請問固三如何設定Linux的網路【求助】



贊助商連結


arikchao
2004-06-16, 01:11 AM
請教大家,
我收到Hinet固三的設定說明,
用戶LAN起始IP=220.xxx.xxx.154
用戶LAN結束IP=220.xxx.xxx.156
用戶LAN Netmask=255.255.255.0
Gateway=220.xxx.xxx.254

當我在壹台Linux上設定網路卡eth0使用一個固定ip時,
我的Broadcast與Network應該設什麼才對?

贊助商連結


cewolf
2004-06-16, 01:33 AM
如果沒寄錯的話
Broadcast是220.xxx.xxx.255
network是220.xxx.xxx.000
有錯的話還請各位指正

arikchao
2004-06-16, 09:07 AM
我基本上是依詢一般規則將255設為broadcast,0設為network,
但是很奇怪的,
我的linux不斷收到這樣的訊息:

168.95.82.194 sent an invalid ICMP type 11, code 0 error to a broadcast: 220.xxx.xxx.255 on eth0

所以我懷疑是我的broadcast設錯了...
或者這是其他問題呢?

煩請各位先進幫個忙...

raytracy
2004-06-18, 03:05 PM
您用下面這個指令看一下究竟跟 168.95.82.194 之間有些什麼瓜葛:

tcpdump host 168.95.82.194

linux_xp
2004-06-19, 03:47 PM
啟動防火牆

PING別人電腦的時候,是送出一種ICMP封包

大量的ICMP封包也可以造成一種攻擊,稱做阻斷服務式攻擊DoS,藉由讓伺服器不斷的回應耗用資源,來癱瘓掉目標伺服器的服務

wansg
2004-06-24, 09:21 AM
最初由 arikchao 發表
我基本上是依詢一般規則將255設為broadcast,0設為network,
但是很奇怪的,
我的linux不斷收到這樣的訊息:

168.95.82.194 sent an invalid ICMP type 11, code 0 error to a broadcast: 220.xxx.xxx.255 on eth0

所以我懷疑是我的broadcast設錯了...
或者這是其他問題呢?

煩請各位先進幫個忙...


這是samba引起的問題,
啟動時加上這一行
echo 1 >/proc/sys/net/ipv4/icmp_ignore_bogus_error_responses就不會出現了

請參考以下的說明:

>Since replacing RH52 with RH60, we've started getting the error message
>
> kernel: x.x.x.x sent an invalid ICMP error to a broadcast.
>
>every five minutes from one of our upstream ISP's border gateways and also
from a LAN-based ROM emulator. I'm assuming that the reporting is a
function of better DoS prevention, but is anyone familiar with this
symptom, and, if so, is there a way to shut it off at least for known
addresses??

Gary;

This is a function of the 2.2.X series kernels.

To turn it off, I added the following to my /etc/rc.d/init.d file:

echo 1 >/proc/sys/net/ipv4/icmp_ignore_bogus_error_responses

I put it in line 93 of the file - right at the end of the "start)" portion.

Note - to the best of my knowledge, this only crops up when running samba,
so you could add it to the /etc/rc.d/init.d/smb file as well.