Server anpingbar

A

AllOnline

New Member
Hallo,

habe einen neuen Server, der läuft auch mehr oder minder,
lässt sich aber nicht anpingen.
Ein Ping auf dem Server auf sich selbst funktioniert anstandslos.
Welche Port muss für Ping offen sein und wie kann ich testen ob dieser frei ist?

Danke euch!
 
Eingehend: ICMP Typ 8 "Echo Request".
Ausgehend: ICMP Typ 0 "Echo Reply".
Code: 
iptables -j ACCEPT -p icmp --icmp-type echo-request
iptables -j ACCEPT -p icmp --icmp-type echo-reply
 
Die Box muss auf ICMP-Echo Requests antworten, ein offener Port ist beim "handelsüblichen Ping" nicht notwendig.

edit: beat me to it
 
Whistler said:
Eingehend: ICMP Typ 8 "Echo Request".
Ausgehend: ICMP Typ 0 "Echo Reply".
Code: 
iptables -j ACCEPT -p icmp --icmp-type echo-request
iptables -j ACCEPT -p icmp --icmp-type echo-reply
Click to expand...
Code: 
iptables -j ACCEPT -p icmp --icmp-type echo-request
iptables v1.4.8: no command specified
Try `iptables -h' or 'iptables --help' for more information.

Ausgabe :D
Code: 
iptables -L | egrep -i "drop|reject"
Chain INPUT (policy DROP)
Reject     all  --  anywhere             anywhere
reject     all  --  anywhere             anywhere            [goto]
Chain FORWARD (policy DROP)
Reject     all  --  anywhere             anywhere
reject     all  --  anywhere             anywhere            [goto]
Chain OUTPUT (policy DROP)
Chain Drop (1 references)
reject     tcp  --  anywhere             anywhere            tcp dpt:auth /* Aut                                                                             h */
dropBcast  all  --  anywhere             anywhere
dropInvalid  all  --  anywhere             anywhere
DROP       udp  --  anywhere             anywhere            multiport dports lo                                                                             c-srv,microsoft-ds /* SMB */
DROP       udp  --  anywhere             anywhere            udp dpts:netbios-ns                                                                             :netbios-ssn /* SMB */
DROP       udp  --  anywhere             anywhere            udp spt:netbios-ns                                                                              dpts:1024:65535 /* SMB */
DROP       tcp  --  anywhere             anywhere            multiport dports lo                                                                             c-srv,netbios-ssn,microsoft-ds /* SMB */
DROP       udp  --  anywhere             anywhere            udp dpt:1900 /* UPn                                                                             P */
dropNotSyn  tcp  --  anywhere             anywhere
DROP       udp  --  anywhere             anywhere            udp spt:domain /* L                                                                             ate DNS Replies */
Chain Reject (2 references)
reject     tcp  --  anywhere             anywhere            tcp dpt:auth /* Aut                                                                             h */
dropBcast  all  --  anywhere             anywhere
dropInvalid  all  --  anywhere             anywhere
reject     udp  --  anywhere             anywhere            multiport dports lo                                                                             c-srv,microsoft-ds /* SMB */
reject     udp  --  anywhere             anywhere            udp dpts:netbios-ns                                                                             :netbios-ssn /* SMB */
reject     udp  --  anywhere             anywhere            udp spt:netbios-ns                                                                              dpts:1024:65535 /* SMB */
reject     tcp  --  anywhere             anywhere            multiport dports lo                                                                             c-srv,netbios-ssn,microsoft-ds /* SMB */
DROP       udp  --  anywhere             anywhere            udp dpt:1900 /* UPn                                                                             P */
dropNotSyn  tcp  --  anywhere             anywhere
DROP       udp  --  anywhere             anywhere            udp spt:domain /* L                                                                             ate DNS Replies */
Chain dropBcast (2 references)
DROP       all  --  anywhere             anywhere            ADDRTYPE match dst-                                                                             type BROADCAST
DROP       all  --  anywhere             base-address.mcast.net/4
Chain dropInvalid (2 references)
DROP       all  --  anywhere             anywhere            ctstate INVALID
Chain dropNotSyn (2 references)
DROP       tcp  --  anywhere             anywhere            tcp flags:!FIN,SYN,                                                                             RST,ACK/SYN
Chain logdrop (0 references)
DROP       all  --  anywhere             anywhere
LOG        all  --  anywhere             anywhere            LOG level info ip-o                                                                             ptions prefix `Shorewall:logflags:DROP:'
DROP       all  --  anywhere             anywhere
Chain logreject (0 references)
reject     all  --  anywhere             anywhere
Drop       all  --  anywhere             anywhere
DROP       all  --  anywhere             anywhere
Chain reject (9 references)
DROP       all  --  anywhere             anywhere            ADDRTYPE match src-                                                                             type BROADCAST
DROP       all  --  base-address.mcast.net/4  anywhere
DROP       igmp --  anywhere             anywhere
REJECT     tcp  --  anywhere             anywhere            reject-with tcp-res                                                                             et
REJECT     udp  --  anywhere             anywhere            reject-with icmp-po                                                                             rt-unreachable
REJECT     icmp --  anywhere             anywhere            reject-with icmp-ho                                                                             st-unreachable
REJECT     all  --  anywhere             anywhere            reject-with icmp-ho                                                                             st-prohibited
LOG        all  --  anywhere             anywhere            LOG level info pref                                                                             ix `Shorewall:smurfs:DROP:'
DROP       all  --  anywhere             anywhere

Was meinst du mit Box und wie aktiviere ich die Antwort?
 
Last edited by a moderator:
Es gibt ja auch TCP Pings :D
Da kannst du dann jeden offenen Port nehmen.

Aber ich gehe stark davon aus, dass du ICMP Ping meinst :-)
 
You must log in or register to reply here.
Back
Top