Re: eth0 vanishing

"vvor" <[email protected]> wrote:
> To: "Linux" <[email protected]>
> Subject: eth0 vanishing
> Date: Tue, 7 Oct 2003 15:57:37 -0400
> Reply-To: [email protected]
> 
> as i mentioned, i switched to iptables.
> 
> now, every few hours, my roadrunner connection is dropping. this was not
> happening with ipchains! here is the part of my log just before it happens. i
> tried ifup, but that doesn't help. it fails to acquire the ip address. does
> anyone know what is happening? is my nic dying? is it iptables? i wish i had a
> clue. (rat is the name of my serer)
> 
<snip>
> Oct  7 11:14:56 rat kernel: [UDP reject] IN= OUT=eth0 SRC=24.90.93.125
> DST=24.29.99.107 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=68
> DPT=67 LEN=556
> Oct  7 11:14:56 rat kernel: [UDP drop] IN= OUT=eth0 SRC=192.168.0.1
> DST=255.255.255.255 LEN=328 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=68
> DPT=67 LEN=308
These are outgoing DHCP packets.  You need to allow those, although if 
you're not I don't see how you would have gotten a DHCP lease in the 
first place.  Do you have leftover scripts in place to change the 
firewall rules when you start DHCP?  I don't think that's needed with 
iptables.  Also I would recommend using dhcpcd exclusively instead of 
pump.  If you remove the pump RPM the scripts should handle this 
automatically.  The SRC=192.168.0.1 is an RFC violation (it should be 
SRC=0.0.0.0).
John
> Oct  7 11:16:01 rat ntpd[1241]: sendto(192.5.41.40): Invalid argument
> Oct  7 11:17:24 rat ntpd[1241]: sendto(129.237.32.1): Invalid argument
> Oct  7 11:19:08 rat ntpd[1241]: sendto(128.206.12.150): Invalid argument
> Oct  7 11:20:04 rat ntpd[1241]: sendto(128.249.2.19): Invalid argument
> Oct  7 11:20:15 rat ntpd[1241]: sendto(192.52.71.4): Invalid argument
> Oct  7 11:26:10 rat ntpd[1241]: sendto(128.252.19.1): Invalid argument
> Oct  7 11:27:34 rat ntpd[1241]: sendto(192.5.41.41): Invalid argument
> Oct  7 11:28:13 rat ntpd[1241]: sendto(192.52.71.21): Invalid argument
> Oct  7 12:03:53 rat named[1319]: no longer listening on 24.90.93.125#53
> 
> vora