Re: Network Probs (was Re: Firewall issues)

>> I see hits on other random ports (80, 1080, 1433, etc..) that are
>> supposed to make it to the logdrop chain, but nothing shows up for the
>>  ports I'm allowing.  Any time I try to ssh, ftp, or ping the box from
>>  the outside world, I can see the count go up for the correct rule.
>>
>> I have also tried flushing the INPUT chain and setting the policy to
>> ACCEPT, but I'm still not getting any responses to requests from the
>> outside world..  Very confused..
>
> After a week of not getting to touch the box, I've run a few more
> tests..  It turns out it's not a firewall related problem at all.  I
> booted up the machine with iptables off to be sure the modules weren't
> loaded.  After about 6 hours, all communication with the outside via
> eth0 ceased.  The ssh session I had open reported 'connection reset by
> peer' and dropped.  I was able to continue sending and receiving via
> eth1 (both cards are intel ethernet pro 100s).  As I said before, after
> this problem occurs, the computer still sees the traffic (as shown by
> iptables -vL), but no longer acts upon it.

Okay, this helps. I'm assuming here that the connection requires an
authentication scheme before transferring data. Your ISP kills the
connection after a certain amount of time being down, and redhat happily
redials, but doesn't do the auth process. You can set up ssh or an expect
script to refresh the authentication scheme if it goes down.

-- 
Keith Mastin
BeechTree Information Technology Services Inc.
Toronto, Canada
(416)696 6070