Subject: Re: [vserver] Problem reaching public internet from private address inside a VPS
From: Baltasar Cevc <baltasar@cevc-topp.de>
Date: Thu, 27 Mar 2008 18:25:19 +0100
Thu, 27 Mar 2008 18:25:19 +0100
Hi Victor,

I would try to use the iptables logs to see whether you accidently  
filter
some traffic and tcpdump to see whether something goes out and what  
comes
in.

Forwarding is not necessary for the VServers as they run in the same  
kernel.

What does a ping output?

Baltasar


On 27.03.2008, at 11:02, Víctor Román Archidona wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hi again,
>
> I made a typo when I wrote the previous email. The correct
> <path/to/vserver>interfaces/1/ip is:
> ~ /etc/vservers/private/interfaces/1/ip     > 172.16.1.10
>
> Thanks for all in advance.
>
> Víctor Román Archidona escribió:
> | Hi,
> |
> | I'm using several VPS on the same machine with multiple public IP
> | addresses. Both host and VPS machines has network conectivity and  
> reachs
> | the public Internet via eth0, which has all the public IPs.
> |
> | Now I'm building "private" VPS on 172.16.1.0/24 network segment.  
> If I
> | give 172.16.1.1 to HOST and 172.16.1.10 to a private VPS, they  
> both can
> | see each other.
> |
> | The problem comes when I try to reach the public internet from the
> | private VPS on the private subnet. I also enabled forwarding and
> | postrouting on the host:
> |
> | echo 1 > /proc/sys/net/ipv4/ip forward
> | iptables -t nat -A POSTROUTING -s 172.16.1.0/24 ! -d  
> 172.16.1.0/24 -j
> | SNAT --to A.B.C.D
> |
> | (being A.B.C.D the public IP address).
> |
> | The VPS has the following interfaces configuration:
> | ~ /etc/vservers/private/interfaces/0/dev    > lo
> | ~ /etc/vservers/private/interfaces/0/prefix > 8
> | ~ /etc/vservers/private/interfaces/0/ip     > 127.0.0.1
> |
> | ~ /etc/vservers/private/interfaces/1/dev    > eth0
> | ~ /etc/vservers/private/interfaces/1/prefix > 24
> | ~ /etc/vservers/private/interfaces/1/ip     > 171.16.1.10
> |
> | Can anyone help me or give some hint about why I cannot reach the  
> public
> | Internet?
> |
> | Regards,
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.8 (MingW32)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iEYEARECAAYFAkfrcJsACgkQQ/ddYKMfqaDunACffW0qBsFxy2HaT9CEV4ii5+OO
> f94An1icQ0MSNWxY/zhUJTJGWKx9z400
> =N4TR
> -----END PGP SIGNATURE-----
>



((( Baltasar Cevc


) World wide web:
   # http://www.openairkino.net/ (a project for the local youth;  
German only)
   # http://technik.juz-kirchheim.de/ (programming and admin projects)
   # http://baltasar.cevc-topp.de/ (private homepage)
) Phone:
   +49 178 691 22 33
)







["application/pgp-signature" not shown]