Adrian Bridgett wrote:
> On Fri, Jun 22, 2007 at 16:27:55 +0100 (+0100), Jack Knight wrote:
>
>> I suspect the fact that ping 127.0.0.1 results in "ping: sendto:
>> permission denied" may have something to do with it. Both the eth0 wired
>>
>
> That sounds like a firewall message - what does:
>
> "iptables -L -n -v" say? In particular for INPUT and OUTPUT rules?
> Can you ping another machine?
>
> It sounds like an OUTPUT rule problem to me.
>
> Adrian
>
Hi Adrian, thanks for responding.
jfk@tony:~$ sudo iptables -L -n -v
Password:
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source
destination
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source
destination
Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source
destination
jfk@tony:~$ ping 192.168.5.2
PING 192.168.5.2 (192.168.5.2) 56(84) bytes of data.
64 bytes from 192.168.5.2: icmp_seq=1 ttl=64 time=2.36 ms
64 bytes from 192.168.5.2: icmp_seq=2 ttl=64 time=1.74 ms
--- 192.168.5.2 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1001ms
rtt min/avg/max/mdev = 1.744/2.055/2.366/0.311 ms
jfk@tony:~$
jfk@tony:~$ ping localhostChain POSTROUTING (policy DROP 30950 packets,
25M bytes)
pkts bytes target prot opt in out source
destination
4865 306K MASQUERADE 0 -- * eth1 0.0.0.0/0
0.0.0.0/0
However I do have a NAT postrouting rule:
PING tony (127.0.0.1) 56(84) bytes of data.
ping: sendmsg: Operation not permitted
ping: sendmsg: Operation not permitted
--- tony ping statistics ---
2 packets transmitted, 0 received, 100% packet loss, time 1009ms
