Всем здрям, столкнулся с проблемой, сервер одна eth2 смотрит в локальную eth1 в в инет. Запускаю свид пытаюсь с клиентской тачки выйти в инет получаю
mozilla:
ERROR
The requested URL could not be retrieved
While trying to retrieve the URL: http://nixp.ru/
The following error was encountered:
* Socket Failure
The system returned:
(99) Cannot assign requested address
Squid is unable to create a TCP socket, presumably due to excessive load. Please retry your request.
лог squid
2007/03/12 23:22:45| NETDB state saved; 0 entries, 0 msec
2007/03/12 23:25:54| commBind: Cannot bind socket FD 27 to 80.92.x.33:0: (99) Cannot assign requested address
2007/03/12 23:55:35| commBind: Cannot bind socket FD 27 to 80.92.x.33:0: (99) Cannot assign requested address
2007/03/12 23:56:06| commBind: Cannot bind socket FD 27 to 80.92.x.33:0: (99) Cannot assign requested address
Inet:/etc/squid # iptables -L
Chain INPUT (policy DROP)
target prot opt source destination
ACCEPT 0 — anywhere anywhere
ACCEPT 0 — anywhere anywhere state RELATED,ESTABLISHED
input_ext 0 — anywhere anywhere
input_ext 0 — anywhere anywhere
input_ext 0 — anywhere anywhere
LOG 0 — anywhere anywhere limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix `SFW2-IN-ILL-TARGET '
DROP 0 — anywhere anywhere
Chain FORWARD (policy DROP)
target prot opt source destination
LOG 0 — anywhere anywhere limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix `SFW2-FWD-ILL-ROUTING '
ACCEPT 0 — 172.22.x.23 anywhere
ACCEPT 0 — anywhere 172.22.x.23
ACCEPT 0 — 172.16.0.0/12 anywhere
ACCEPT 0 — 80.92.202.x/29 anywhere
ACCEPT 0 — 172.22.x.23 anywhere
ACCEPT 0 — anywhere Inet.Citynor.my
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
ACCEPT 0 — anywhere anywhere
ACCEPT 0 — anywhere anywhere state NEW,RELATED,ESTABLISHED
LOG 0 — anywhere anywhere limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix `SFW2-OUT-ERROR '
Chain forward_ext (0 references)
target prot opt source destination
Chain input_ext (3 references)
target prot opt source destination
DROP 0 — anywhere anywhere PKTTYPE = broadcast
ACCEPT icmp — anywhere anywhere icmp source-quench
ACCEPT icmp — anywhere anywhere icmp echo-request
ACCEPT icmp — anywhere anywhere state RELATED,ESTABLISHED icmp echo-reply
ACCEPT icmp — anywhere anywhere state RELATED,ESTABLISHED icmp destination-unreachable
ACCEPT icmp — anywhere anywhere state RELATED,ESTABLISHED icmp time-exceeded
ACCEPT icmp — anywhere anywhere state RELATED,ESTABLISHED icmp parameter-problem
ACCEPT icmp — anywhere anywhere state RELATED,ESTABLISHED icmp timestamp-reply
ACCEPT icmp — anywhere anywhere state RELATED,ESTABLISHED icmp address-mask-reply
ACCEPT icmp — anywhere anywhere state RELATED,ESTABLISHED icmp protocol-unreachable
ACCEPT icmp — anywhere anywhere state RELATED,ESTABLISHED icmp redirect
LOG tcp — anywhere anywhere limit: avg 3/min burst 5 tcp dpt:ndmp flags:FIN,SYN,RST,ACK/SYN LOG level warning tcp-options ip-options prefix `SFW2-INext-ACC-TCP '
ACCEPT tcp — anywhere anywhere tcp dpt:ndmp
LOG tcp — anywhere anywhere limit: avg 3/min burst 5 tcp dpt:ndl-aas flags:FIN,SYN,RST,ACK/SYN LOG level warning tcp-options ip-options prefix `SFW2-INext-ACC-TCP '
ACCEPT tcp — anywhere anywhere tcp dpt:ndl-aas
LOG tcp — anywhere anywhere limit: avg 3/min burst 5 tcp dpt:http flags:FIN,SYN,RST,ACK/SYN LOG level warning tcp-options ip-options prefix `SFW2-INext-ACC-TCP '
ACCEPT tcp — anywhere anywhere tcp dpt:http
LOG tcp — anywhere anywhere limit: avg 3/min burst 5 tcp dpt:ssh flags:FIN,SYN,RST,ACK/SYN LOG level warning tcp-options ip-options prefix `SFW2-INext-ACC-TCP '
ACCEPT tcp — anywhere anywhere tcp dpt:ssh
reject_func tcp — anywhere anywhere tcp dpt:ident state NEW
LOG 0 — anywhere anywhere limit: avg 3/min burst 5 PKTTYPE = multicast LOG level warning tcp-options ip-options prefix `SFW2-INext-DROP-DEFLT '
DROP 0 — anywhere anywhere PKTTYPE = multicast
LOG tcp — anywhere anywhere limit: avg 3/min burst 5 tcp flags:FIN,SYN,RST,ACK/SYN LOG level warning tcp-options ip-options prefix `SFW2-INext-DROP-DEFLT '
LOG icmp — anywhere anywhere limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix `SFW2-INext-DROP-DEFLT '
LOG udp — anywhere anywhere limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix `SFW2-INext-DROP-DEFLT '
LOG 0 — anywhere anywhere limit: avg 3/min burst 5 state INVALID LOG level warning tcp-options ip-options prefix `SFW2-INext-DROP-DEFLT-INV '
DROP 0 — anywhere anywhere
Chain reject_func (1 references)
target prot opt source destination
REJECT tcp — anywhere anywhere reject-with tcp-reset
REJECT udp — anywhere anywhere reject-with icmp-port-unreachable
REJECT 0 — anywhere anywhere reject-with icmp-proto-unreachable
я так понимаю проблема в iptables? Как мне заставить принимать пакеты с eth2 на порт 3180 и переадресовывать их на eth1?
Последние комментарии
- OlegL, 17 декабря в 15:00 → Перекличка 21
- REDkiy, 8 июня 2023 года в 9:09 → Как «замокать» файл для юниттеста в Python? 2
- fhunter, 29 ноября 2022 года в 2:09 → Проблема с NO_PUBKEY: как получить GPG-ключ и добавить его в базу apt? 6
- Иванн, 9 апреля 2022 года в 8:31 → Ассоциация РАСПО провела первое учредительное собрание 1
- Kiri11.ADV1, 7 марта 2021 года в 12:01 → Логи catalina.out в TomCat 9 в формате JSON 1