On Tue, Jul 11, 2006 at 11:31:33AM +0200, Marco Berizzi wrote: > > Me again. After a while here is: > > [EMAIL PROTECTED]:/tmp# ping 10.49.59.23 > PING 10.49.59.23 (10.49.59.23) 56(84) bytes of data. > > --- 10.49.59.23 ping statistics --- > 4 packets transmitted, 0 received, 100% packet loss, time 3010ms
Please check using ip -s x p to make sure that the packet is hitting the right policy. Unfortunately we don't update the byte/packet counters so you'll have to look at the `use' time stamp. If it's passing through IPsec, then you should trace through your iptables rules using the LOG target to see if it's hitting them. We need to know if it's being dropped before, in, or after netfilter. Please also do ip r g 10.49.59.23 to make sure that it says something sane. Cheers, -- Visit Openswan at http://www.openswan.org/ Email: Herbert Xu ~{PmV>HI~} <[EMAIL PROTECTED]> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html
