[Shorewall-users] Can't ping an IP address in LAN of cable modem

[Csányi Pál]

Hi,

in my home network I am connected to my Internet Service Provider
(ISP)'s cable modem (CM).
This is the Thomson TWG870 - Wireless Voice Gateway.

It has four Ethernet connectors:
Eth1
Eth2 -- Raspberry Pi Model 2 ( RasPi ) - Gentoo Linux
Eth3 -- laptop - Gentoo Linux
Eth4

RasPi and laptop gets it's IP addresses through DHCP of the CM.
RasPi IP address is 192.168.0.11
laptop IP address is 192.168.0.10

On RasPi I have a web server which has a domain cspl.hu .
I get from my ISP a fix IP address which is associated with MAC
address on my RasPi.
host cspl.hu
cspl.hu has address 217.17.98.71

From my laptop I am trying to ping RasPi:
ping 192.168.0.11
without any success.

I can ssh in to RasPi.
Shorewall rules on RasPi is:
after
?SECTION NEW
Ping(ACCEPT) net:192.168.0.10 $FW
Web(ACCEPT) net $FW

Why can't I ping RasPi?
Why can't I open my web site cspl.hu from my laptop and from the Internet?

[Tom Eastep]

Post by Csányi Pál
Hi,
in my home network I am connected to my Internet Service Provider
(ISP)'s cable modem (CM). This is the Thomson TWG870 - Wireless
Voice Gateway.
It has four Ethernet connectors: Eth1 Eth2 -- Raspberry Pi Model 2
( RasPi ) - Gentoo Linux Eth3 -- laptop - Gentoo Linux Eth4
RasPi and laptop gets it's IP addresses through DHCP of the CM.
RasPi IP address is 192.168.0.11 laptop IP address is 192.168.0.10
On RasPi I have a web server which has a domain cspl.hu . I get
from my ISP a fix IP address which is associated with MAC address
on my RasPi. host cspl.hu cspl.hu has address 217.17.98.71
From my laptop I am trying to ping RasPi: ping 192.168.0.11 without
any success.
I can ssh in to RasPi. Shorewall rules on RasPi is: after ?SECTION
NEW Ping(ACCEPT) net:192.168.0.10 $FW Web(ACCEPT) net
$FW
Why can't I ping RasPi? Why can't I open my web site cspl.hu from
my laptop and from the Internet?

If you 'shorewall clear' on RasPi, does everything work?

- -Tom
- --
Tom Eastep \ When I die, I want to go like my Grandfather who
Shoreline, \ died peacefully in his sleep. Not screaming like
Washington, USA \ all of the passengers in his car
http://shorewall.net \________________________________________________

[Csányi Pál]

Hello Tom,

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Post by Csányi Pál
Hi,
in my home network I am connected to my Internet Service Provider
(ISP)'s cable modem (CM). This is the Thomson TWG870 - Wireless
Voice Gateway.
It has four Ethernet connectors: Eth1 Eth2 -- Raspberry Pi Model 2
( RasPi ) - Gentoo Linux Eth3 -- laptop - Gentoo Linux Eth4
RasPi and laptop gets it's IP addresses through DHCP of the CM.
RasPi IP address is 192.168.0.11 laptop IP address is 192.168.0.10
On RasPi I have a web server which has a domain cspl.hu . I get
from my ISP a fix IP address which is associated with MAC address
on my RasPi. host cspl.hu cspl.hu has address 217.17.98.71
From my laptop I am trying to ping RasPi: ping 192.168.0.11 without
any success.
I can ssh in to RasPi. Shorewall rules on RasPi is: after ?SECTION
NEW Ping(ACCEPT) net:192.168.0.10 $FW Web(ACCEPT) net
$FW
Why can't I ping RasPi? Why can't I open my web site cspl.hu from
my laptop and from the Internet?

If you 'shorewall clear' on RasPi, does everything work?

If I run 'shorewall clear' on RasPi the ping does work only, but the
web does not.

[Csányi Pál]

Hello Tom,

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Post by Csányi Pál
Hi,
in my home network I am connected to my Internet Service Provider
(ISP)'s cable modem (CM). This is the Thomson TWG870 - Wireless
Voice Gateway.
It has four Ethernet connectors: Eth1 Eth2 -- Raspberry Pi Model 2
( RasPi ) - Gentoo Linux Eth3 -- laptop - Gentoo Linux Eth4
RasPi and laptop gets it's IP addresses through DHCP of the CM.
RasPi IP address is 192.168.0.11 laptop IP address is 192.168.0.10
On RasPi I have a web server which has a domain cspl.hu . I get
from my ISP a fix IP address which is associated with MAC address
on my RasPi. host cspl.hu cspl.hu has address 217.17.98.71
From my laptop I am trying to ping RasPi: ping 192.168.0.11 without
any success.
I can ssh in to RasPi. Shorewall rules on RasPi is: after ?SECTION
NEW Ping(ACCEPT) net:192.168.0.10 $FW Web(ACCEPT) net
$FW
Why can't I ping RasPi? Why can't I open my web site cspl.hu from
my laptop and from the Internet?

If you 'shorewall clear' on RasPi, does everything work?

Finally works something!
I ask my ISP to give me instructions how to setup Thomson modem:

at web page of the modem (192.168.0.1) choose
Network / Portbase PassThrough
Here must add MAC address of RasPi's NIC, the eth0.

After this is set, RasPi gets it's static IP and not internal
(192.168.0.x) IP address.

So at last I can see my homepage out there: http://cspl.hu.
I can ssh into RasPi after that too.

Just can't ping it from my laptop. But, this is not interesting and
not important at all.
So my problem is solved.

Thanks anyway. Sorry for the noise.