Cant access from outside to my Servers

[makaruxx]

Hello,

I have a problem. I cant connect from outside to my Servers... My interface file looks like this:

# network interface settings
auto lo
iface lo inet loopback

iface eth0 inet manual
broadcast 176.57.xxx.255
network 176.57.xxx.0

auto vmbr0
iface vmbr0 inet static
address 176.57.141.xxx
netmask 255.255.255.0
gateway 176.57.xxx.1
bridge_ports eth0
bridge_stp off
bridge_fd 0

auto vmbr0:1
iface vmbr0:1 inet static
address 176.57.142.xx
netmask 255.255.255.0

auto vmbr0:8
iface vmbr0:8 inet static
address 176.57.141.xx
netmask 255.255.255.0

I add the unasaigned ip to my vServer that i orderd from my Hoster. Then i start it, but i cant connect to it...
The Ip that i added to the vServer isnt added in the interface file. So it MUST work... but it doesnt...

I can ping the IP Address from my Node. "ping 176.57.143.xxx" but i cant reach the IP from outside...
Whats wrong?

http://www7.pic-upload.de/01.02.14/swklydyph6in.jpg

I hope someone know this problem :/

 

[udo]

Hi,
your network.conf look strange.

Normaly you should use only an IP on vmbr0 - and in your case (same IP-range for clients).
If your ISP need all traffic from one MAC-Address you must use iptables...

# network interface settings
auto lo
iface lo inet loopback

iface eth0 inet manual

auto vmbr0
iface vmbr0 inet static
    address 176.57.141.xxx
    netmask 255.255.255.0
    gateway 176.57.xxx.1
    bridge_ports eth0
    bridge_stp off
    bridge_fd 0

Then use an bridged interface for the VM/CT and define the right network-config inside the client.

After that, you can see the traffic with "tcpdump -i vmbr0 host ip.of.one.vm" on the host while you ping the VM from outside.

Udo

 

[makaruxx]

Thanks for the reply. I used your network configuration but it still doesnt work. I cant ping the VM from outside but i can the VM ping from my Main Root in Putty... I think its a traffic/routing problem. And yes, the IP that i used for the VM is not added to the network conf. And if i try the "tcpdump" command, it says:

-bash: tcpdump: command not found

But thats not the main problem right now.

http://www7.pic-upload.de/01.02.14/qhyuneip5ag.jpg

 

[udo]

And if i try the "tcpdump" command, it says:

-bash: tcpdump: command not found

Hi,
on the host? - then "apt-get install tcpdump".

Udo

 

[makaruxx]

Well... Yeah, Command works now. But still cant ping my VM...

If i ping my VM from outside, i will get these information with tcpdump:

http://www7.pic-upload.de/01.02.14/q4yghyzi3zr.jpg

Do you have Skype or so? So we can talk there.

 

[udo]

Well... Yeah, Command works now. But still cant ping my VM...

If i ping my VM from outside, i will get these information with tcpdump:

http://www7.pic-upload.de/01.02.14/q4yghyzi3zr.jpg

Looks that your VM don't answer the arp-request? Do you have any firewall active in the VM?
Double check with tcpdump and take the 176.57.XX.1 instaed of .81

Do you have Skype or so? So we can talk there.

sorry, no skype (I'm using only foss! ).

Udo

 

[makaruxx]

I have iptables. The default Firewall on Debian 6.0.

Well, when i ping "176.57.xxx.1" (Gateway) i got no answer...

root@kd007:/home# ping 176.57.xxx.1
PING 176.57.xxx.1 (176.57.xxx.1) 56(84) bytes of data.

--- 176.57.xxx.1 ping statistics ---
38 packets transmitted, 0 received, 100% packet loss, time 36999ms

I think thats bad, isn't it? But how can i fix this?

 

[udo]

I have iptables. The default Firewall on Debian 6.0.

Well, when i ping "176.57.xxx.1" (Gateway) i got no answer...



I think thats bad, isn't it? But how can i fix this?

Hi,
I guess that your ISP need the MAC-address from your Server (perhaps you can enable further mac-addresses in an webfrontend?).
What do you see with tcpdump when you ping the router?

If you can't enable more mac-addresses, you must use iptables-rules on the host to Nat the traffic. There are some threats about this - but i have not much experiences with this.

Udo

 

[makaruxx]

Okey, problem solved.

I just changed /proc/sys/net/ipv4/conf/vmbr0/proxy_arp to 1 and it works now.. I can access to the VM now.

Do you know what this command does? I dont understand why it now works.

 

[udo]

Okey, problem solved.

I just changed /proc/sys/net/ipv4/conf/vmbr0/proxy_arp to 1 and it works now.. I can access to the VM now.

Do you know what this command does? I dont understand why it now works.

Hi,
see here: http://doc.rz.ifi.lmu.de/ldp/LDP/HOWTO/Adv-Routing-HOWTO/lartc.bridging.proxy-arp.html

Udo