From a at aufbix.org Wed Nov 2 17:10:51 2011 From: a at aufbix.org (Andraz Sraka) Date: Wed, 02 Nov 2011 17:10:51 +0100 Subject: [LUGOS] SIT tunel, ICMP protocol 41 port 0 unreachable In-Reply-To: <4EAD8BE4.7010404@rula.net> References: <4EAD8BE4.7010404@rula.net> Message-ID: <1320250251.3905.30.camel@vaio.home.lan> er On Sun, 2011-10-30 at 18:39 +0100, Rok Poto?nik wrote: > torej... mam ene te?ave, pa nism prepri?an ali so distro/kernel based > al te?ava zarad tagiranih vlanov... ne izklju?ujem mo?nosti, da sm js > kje zamu?kal... > > sit tunel med dvema ki?tama: > A - centos 5.7 eth0 ip 1.1.1.1 > B - centos 6 eth0.2 ip 2.2.2.2 (vlan tagiran promet) A lahko posredujes celotni config kako imas interface skonfigurirane na masinah. Pa output {ip addr sh | ip tun sh | ip -6 addr sh | ip -6 ro sh | ip ro sh | iptables -L -v | ..} pa seveda katero verzijo kernela imas na eni in drugi strani. lp, Andraz -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 198 bytes Desc: This is a digitally signed message part Url : http://liste2.lugos.si/pipermail/lugos-list/attachments/20111102/4a8eb541/attachment.pgp From r at rula.net Thu Nov 3 13:04:33 2011 From: r at rula.net (=?UTF-8?B?Um9rIFBvdG/EjW5paw==?=) Date: Thu, 03 Nov 2011 13:04:33 +0100 Subject: [LUGOS] SIT tunel, ICMP protocol 41 port 0 unreachable In-Reply-To: <1320250251.3905.30.camel@vaio.home.lan> References: <4EAD8BE4.7010404@rula.net> <1320250251.3905.30.camel@vaio.home.lan> Message-ID: <4EB28351.9000909@rula.net> On 2.11.2011 17:10, Andraz Sraka wrote: > er > > On Sun, 2011-10-30 at 18:39 +0100, Rok Poto?nik wrote: >> torej... mam ene te?ave, pa nism prepri?an ali so distro/kernel based >> al te?ava zarad tagiranih vlanov... ne izklju?ujem mo?nosti, da sm js >> kje zamu?kal... >> >> sit tunel med dvema ki?tama: >> A - centos 5.7 eth0 ip 1.1.1.1 >> B - centos 6 eth0.2 ip 2.2.2.2 (vlan tagiran promet) > > A lahko posredujes celotni config kako imas interface skonfigurirane na > masinah. > > Pa output {ip addr sh | ip tun sh | ip -6 addr sh | ip -6 ro sh | ip ro > sh | iptables -L -v | ..} pa seveda katero verzijo kernela imas na eni > in drugi strani. > > lp, > Andraz vse po spisku... plus tcpdump ob pinganju :) ma?ina A, centos 5.7 x64, eth2 je untrust: $ uname -r 2.6.18-274.7.1.el5 $ cat /etc/sysconfig/network NETWORKING=yes NETWORKING_IPV6=yes HOSTNAME=A.domena.net NOZEROCONF=yes NETWORKING_IPV6=yes IPV6FORWARDING=yes GATEWAY=89.89.0.1 $ cat /etc/sysconfig/network-scripts/ifcfg-eth2 DEVICE=eth2 HWADDR=00:1F:D0:90:8D:54 ONBOOT=yes BOOTPROTO=none IPADDR=89.89.0.10 NETMASK=255.255.0.0 IPV6INIT=yes IPV6ADDR=2001:2001:2001::2/126 $ ip a sh dev eth2 5: eth2: mtu 1500 qdisc pfifo_fast qlen 1000 link/ether 00:1f:d0:90:8d:54 brd ff:ff:ff:ff:ff:ff inet 89.89.0.10/16 brd 89.89.255.255 scope global eth2 inet6 2001:2001:2001::2/126 scope global valid_lft forever preferred_lft forever inet6 fe80::21f:d0ff:fe90:8d54/64 scope link valid_lft forever preferred_lft forever $ ip r sh dev eth2 89.89.0.0/16 proto kernel scope link src 89.89.0.10 default via 89.89.0.1 $ ip tu s test6 test6: ipv6/ip remote 89.89.0.22 local 89.89.0.10 dev eth2 ttl inherit $ ip -6 a s dev test6 15: test6 at eth2: mtu 1480 inet6 2001:2001:2001:1001::1/64 scope global valid_lft forever preferred_lft forever inet6 fe80::59d4:16d8/128 scope link valid_lft forever preferred_lft forever $ ip -6 r s dev test6 2001:2001:2001:1001::/64 via :: metric 256 expires 21010488sec mtu 1480 advmss 1420 hoplimit 4294967295 fe80::/64 via :: metric 256 expires 21010462sec mtu 1480 advmss 1420 hoplimit 4294967295 $ iptables -nvL | head -3 Chain INPUT (policy DROP 4 packets, 274 bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * * 89.89.0.22 0.0.0.0/0 $ ip tu sh test6 test6: ipv6/ip remote 89.89.0.22 local 89.89.0.10 dev eth2 ttl inherit ip6tables accepta vse ma?ina B, centos 6 x64, eth0.500 je untrust: $ uname -r 2.6.32-71.29.1.el6.x86_64 $ cat /etc/sysconfig/network NETWORKING=yes HOSTNAME=B.domena.net NOZEROCONF=yes GATEWAY=89.89.0.1 NETWORKING_IPV6=yes IPV6FORWARDING=yes $ cat /etc/sysconfig/network-scripts/ifcfg-eth0 DEVICE=eth0 BOOTPROTO=none HWADDR=00:25:22:68:3C:FA IPV6INIT=yes IPV6_AUTOCONF=yes NM_CONTROLLED=no ONBOOT=yes IPADDR=192.168.0.1 NETMASK=255.255.255.0 IPV6ADDR=2001:ffff:ffff:1::1/64 $ cat /etc/sysconfig/network-scripts/ifcfg-eth0.2 DEVICE=eth0.2 VLAN=yes BOOTPROTO=none IPADDR=193.193.193.59 NETMASK=255.255.255.224 ONBOOT=yes IPV6INIT=yes IPV6ADDR=2001:ffff:ffff:2::1/64 $ cat /etc/sysconfig/network-scripts/ifcfg-eth0.3 DEVICE=eth0.3 VLAN=yes BOOTPROTO=none IPADDR=178.178.178.2 NETMASK=255.255.255.224 ONBOOT=yes IPV6INIT=yes IPV6ADDR=2001:ffff:ffff:3::1/64 $ cat /etc/sysconfig/network-scripts/ifcfg-eth0.100 DEVICE=eth0.100 VLAN=yes BOOTPROTO=none IPADDR=192.168.100.1 NETMASK=255.255.255.0 ONBOOT=yes IPV6INIT=yes IPV6ADDR=2001:ffff:ffff:4::1/64 $ cat /etc/sysconfig/network-scripts/ifcfg-eth0.500 DEVICE=eth0.500 VLAN=yes BOOTPROTO=none IPADDR=89.89.0.22 NETMASK=255.255.0.0 ONBOOT=yes IPV6INIT=no $ ip a sh dev eth0.500 6: eth0.500 at eth0: mtu 1500 qdisc noqueue state UP link/ether 00:25:22:68:3c:fa brd ff:ff:ff:ff:ff:ff inet 89.89.0.22/16 brd 89.89.255.255 scope global eth0.500 inet6 fe80::225:22ff:fe68:3cfa/64 scope link valid_lft forever preferred_lft forever $ ip r s dev eth0.500 89.89.0.0/16 proto kernel scope link src 89.89.0.22 default via 89.89.0.1 $ ip tu s test6 test6: ipv6/ip remote 89.89.0.10 local 89.89.0.22 dev eth0.500 ttl inherit # ip -6 a s dev test6 10: test6: mtu 1480 inet6 2001:2001:2001:1001::2/64 scope global valid_lft forever preferred_lft forever inet6 fe80::59d4:703d/128 scope link valid_lft forever preferred_lft forever $ ip -6 r s dev test6 2001:2001:2001:1001::/64 via :: proto kernel metric 256 mtu 1480 advmss 1420 hoplimit 4294967295 fe80::/64 via :: proto kernel metric 256 mtu 1480 advmss 1420 hoplimit 4294967295 $ iptables -nvL | head -3 Chain INPUT (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 7 508 ACCEPT all -- * * 89.89.0.10 0.0.0.0/0 ip6tables accepta vse user at B $ ping6 2a01:2001:2001:1001::1 PING 2a01:2001:2001:1001::1(2a01:2001:2001:1001::1) 56 data bytes ^C --- 2a01:2001:2001:1001::1 ping statistics --- 177 packets transmitted, 0 received, 100% packet loss, time 176015ms root at B # tcpdump -nvs0 -ieth0.500 not tcp and not udp and not vlan tcpdump: listening on eth0.500, link-type EN10MB (Ethernet), capture size 65535 bytes 12:56:09.751481 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto IPv6 (41), length 124) 89.89.0.22 > 89.89.0.10: IP6 (hlim 64, next-header ICMPv6 (58) payload length: 64) 2a01:2001:2001:1001::2 > 2a01:2001:2001:1001::1: [icmp6 sum ok] ICMP6, echo request, length 64, seq 58 12:56:09.800444 IP (tos 0xc0, ttl 64, id 62773, offset 0, flags [none], proto ICMP (1), length 152) 89.89.0.22 > 89.89.0.10: ICMP 89.89.0.22 protocol 41 port 0 unreachable, length 132 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto IPv6 (41), length 124) 89.89.0.10 > 89.89.0.22: IP6 (hlim 64, next-header ICMPv6 (58) payload length: 64) 2a01:2001:2001:1001::1 > 2a01:2001:2001:1001::2: [icmp6 sum ok] ICMP6, echo reply, length 64, seq 58 12:56:10.751462 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto IPv6 (41), length 124) 89.89.0.22 > 89.89.0.10: IP6 (hlim 64, next-header ICMPv6 (58) payload length: 64) 2a01:2001:2001:1001::2 > 2a01:2001:2001:1001::1: [icmp6 sum ok] ICMP6, echo request, length 64, seq 59 12:56:10.800581 IP (tos 0xc0, ttl 64, id 62774, offset 0, flags [none], proto ICMP (1), length 152) 89.89.0.22 > 89.89.0.10: ICMP 89.89.0.22 protocol 41 port 0 unreachable, length 132 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto IPv6 (41), length 124) 89.89.0.10 > 89.89.0.22: IP6 (hlim 64, next-header ICMPv6 (58) payload length: 64) 2a01:2001:2001:1001::1 > 2a01:2001:2001:1001::2: [icmp6 sum ok] ICMP6, echo reply, length 64, seq 59 -- LP, Rok -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/pkcs7-signature Size: 2162 bytes Desc: S/MIME Cryptographic Signature Url : http://liste2.lugos.si/pipermail/lugos-list/attachments/20111103/1b583c97/attachment.bin From andrej.znidarsic at gmail.com Wed Nov 16 09:55:34 2011 From: andrej.znidarsic at gmail.com (Andrej Znidarsic) Date: Wed, 16 Nov 2011 10:55:34 +0200 Subject: [LUGOS] Ubuntu urice november Message-ID: Pozdravljeni ! V mescu novembru Ubuntu.si skupnost organzira Ubuntu urice v naslednjih krajih: - *Koper*, 23.11. ob 17.00 v Tu? Bowling baru v Kopru - *Ljubljana*, 23.11. ob 19.00 v baru Cezar pri Ljubljanski Borzi - *Novo mesto, *26.11 ob 17.00 uri v baru Total?ek (Novi trg) - *Postojna*, 24.11. ob 19.00 v baru Tandem (pri Tu?u) Ubuntu urice so neformalna sre?anja uporabnikov Ubuntuja in vseh, ki jih zanimajo Ubuntu, Linux ali odprta koda na splo?no. So brez dnevnega reda in odvisne predvsem od oseb, ki se zberejo. Udele?ence spodbujamo naj imajo s sabo kapo/majico/?al svoje priljubljene odprtokodne maskote. Ve? o ideji si lahko preberete na https://www.ubuntu.si/ubuntu-urice/ Vabljeni k udele?bi Lp, Andrej -------------- next part -------------- An HTML attachment was scrubbed... URL: http://liste2.lugos.si/pipermail/lugos-list/attachments/20111116/2e774790/attachment.htm From mitja.znidaric at gmail.com Tue Nov 29 00:50:45 2011 From: mitja.znidaric at gmail.com (Mitja Znidaric) Date: Mon, 28 Nov 2011 23:50:45 +0000 (UTC) Subject: [LUGOS] Invitation to connect on LinkedIn Message-ID: <152972577.65722261.1322524245971.JavaMail.app@ela4-app0130.prod> Glavni, I'd like to add you to my professional network on LinkedIn. - Mitja Mitja Znidaric Security Specialist at MIKROTEH d.o.o. Slovenia Confirm that you know Mitja Znidaric: https://www.linkedin.com/e/4sd509-gvk4sf68-30/isd/5063848403/iOZ_fGpE/?hs=false&tok=2zPMGpSuTmll01 -- You are receiving Invitation to Connect emails. Click to unsubscribe: http://www.linkedin.com/e/4sd509-gvk4sf68-30/zmdemg4lt3sHaV3TQzt1vXE9ECXrogG/goo/lugos-list%40lugos%2Esi/20061/I1765969207_1/?hs=false&tok=1CJSULR-Dmll01 (c) 2011 LinkedIn Corporation. 2029 Stierlin Ct, Mountain View, CA 94043, USA. -------------- naslednji del -------------- HTML priponka je pre?i??ena... URL: http://liste2.lugos.si/pipermail/lugos-list/attachments/20111128/4a5f2975/attachment-0001.htm From b at thz.net Tue Nov 29 09:55:10 2011 From: b at thz.net (Blaz Podrzaj) Date: Tue, 29 Nov 2011 09:55:10 +0100 Subject: [LUGOS] Invitation to connect on LinkedIn In-Reply-To: <152972577.65722261.1322524245971.JavaMail.app@ela4-app0130.prod> References: <152972577.65722261.1322524245971.JavaMail.app@ela4-app0130.prod> Message-ID: <20111129095510.b8len1x6ows0koos@mail.psilon.org> Me too! I'm 21. Bla? Podr?aj Special Agent in Charge at THz Quoting Mitja Znidaric : > Glavni, > > I'd like to add you to my professional network on LinkedIn. > > - Mitja > > Mitja Znidaric > Security Specialist at MIKROTEH d.o.o. > Slovenia > > Confirm that you know Mitja Znidaric: > https://www.linkedin.com/e/4sd509-gvk4sf68-30/isd/5063848403/iOZ_fGpE/?hs=false&tok=2zPMGpSuTmll01 > > -- > You are receiving Invitation to Connect emails. Click to unsubscribe: > http://www.linkedin.com/e/4sd509-gvk4sf68-30/zmdemg4lt3sHaV3TQzt1vXE9ECXrogG/goo/lugos-list%40lugos%2Esi/20061/I1765969207_1/?hs=false&tok=1CJSULR-Dmll01 > > (c) 2011 LinkedIn Corporation. 2029 Stierlin Ct, Mountain View, CA > 94043, USA. > From b at thz.net Tue Nov 29 09:50:21 2011 From: b at thz.net (Blaz Podrzaj) Date: Tue, 29 Nov 2011 09:50:21 +0100 Subject: [LUGOS] AVNOJ In-Reply-To: <201011300113.50145.jure@hehe.si> References: <20091129210050.jd6i5cdxc0w48wc8@mail.psilon.org> <4B143C5A.9010307@siol.net> <201011300113.50145.jure@hehe.si> Message-ID: <20111129095021.35iz56iz4ssggwgc@mail.psilon.org> Na dana?nji dan, to?no pred letom dni je Barcelona v silovitem juri?u pregazila Real Madrid s 5:0. Vsa ?ast! lp,B From bostjan at japet.si Tue Nov 29 14:50:10 2011 From: bostjan at japet.si (Bostjan Janezic) Date: Tue, 29 Nov 2011 14:50:10 +0100 (CET) Subject: [LUGOS] AVNOJ In-Reply-To: <20111129095021.35iz56iz4ssggwgc@mail.psilon.org> References: <20091129210050.jd6i5cdxc0w48wc8@mail.psilon.org> <4B143C5A.9010307@siol.net> <201011300113.50145.jure@hehe.si> <20111129095021.35iz56iz4ssggwgc@mail.psilon.org> Message-ID: <9d694340db4e2da356bd0cead6a88ebc.squirrel@posta.japet.si> Hoj! On Tue, November 29, 2011 09:50, Blaz Podrzaj wrote: > Na dana?nji dan, to?no pred letom dni je Barcelona v silovitem > juri?u pregazila Real Madrid s 5:0. Vsa ?ast! He, he. Ne pozabimo na dogodke pred ohoo leti. :) Lp, Bo?tjan Jane?i?