[RISOLTO]Destination Host Unreachable

ant1988 · Messaggio da **ant1988** » giovedì 9 marzo 2017, 18:55

Ho due raspberrypi ma non comunicano tra di loro o per meglio dire il secondo comunica con il primo ma il primo no.
Il secondo (IP 192.168.0.14)

Codice: Seleziona tutto

pi@raspi:~ $ sudo arp-scan --interface=wlan0 --localnet
Interface: wlan0, datalink type: EN10MB (Ethernet)
Starting arp-scan 1.8.1 with 256 hosts (http://www.nta-monitor.com/tools/arp-scan/)
192.168.0.1     08:bd:43:87:7d:42       (Unknown)
192.168.0.4     78:24:af:45:40:99       (Unknown)
192.168.0.7     04:8d:38:26:9d:4d       (Unknown)
192.168.0.2     54:60:09:93:af:02       (Unknown)
192.168.0.3     78:4b:87:ce:0c:f4       (Unknown)

6 packets received by filter, 0 packets dropped by kernel
Ending arp-scan 1.8.1: 256 hosts scanned in 1.893 seconds (135.24 hosts/sec). 5 responded
pi@raspi:~ $

mentre il primo (192.168.0.7):

Codice: Seleziona tutto

pi@raspberrypi:~ $ sudo arp-scan --interface=wlan1 --localnet
Interface: wlan1, datalink type: EN10MB (Ethernet)
Starting arp-scan 1.8.1 with 256 hosts (http://www.nta-monitor.com/tools/arp-scan/)
192.168.0.1     08:bd:43:87:7d:42       (Unknown)
192.168.0.4     78:24:af:45:40:99       (Unknown)
192.168.0.2     54:60:09:93:af:02       (Unknown)

3 packets received by filter, 0 packets dropped by kernel
Ending arp-scan 1.8.1: 256 hosts scanned in 2.020 seconds (126.73 hosts/sec). 3 responded
pi@raspberrypi:~ $

cosa dovrei fare?
ps non é nemmeno un problema di frequenza diversa (il primo viaggia in locale ad una frequenza di 5G mentre il primo di 2G) se fosse un problema di frequenza il 2G non doveva connettersi al 5G ...
e nemmeno un problema di firewall dato che l'ho resettato e che mi da sempre Host Unreacheable
primo:

Codice: Seleziona tutto

pi@raspberrypi:/etc/init.d $ route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         192.168.0.1     0.0.0.0         UG    0      0        0 wlan1
0.0.0.0         192.168.0.1     0.0.0.0         UG    304    0        0 wlan1
192.168.0.0     0.0.0.0         255.255.255.0   U     304    0        0 wlan1
pi@raspberrypi:/etc/init.d $

secondo:

Codice: Seleziona tutto

pi@raspi:~ $ route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         192.168.0.1     0.0.0.0         UG    0      0        0 wlan0
0.0.0.0         192.168.0.1     0.0.0.0         UG    303    0        0 wlan0
192.168.0.0     0.0.0.0         255.255.255.0   U     303    0        0 wlan0
pi@raspi:~ $

thece · Messaggio da **thece** » giovedì 9 marzo 2017, 20:07

posta

Codice: Seleziona tutto

ifconfig
route -n
sudo iptables-save
ping -c 4 192.168.0.7

Codice: Seleziona tutto

(ripeti i primi tre sopra)
ping -c 4 192.168.0.14

ant1988 · Messaggio da **ant1988** » giovedì 9 marzo 2017, 21:02

Codice: Seleziona tutto

pi@raspberrypi:~ $ ifconfig
eth0      Link encap:Ethernet  HWaddr b8:27:eb:c3:aa:6d  
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:32414 errors:0 dropped:0 overruns:0 frame:0
          TX packets:32414 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1 
          RX bytes:4892307 (4.6 MiB)  TX bytes:4892307 (4.6 MiB)

wlan0     Link encap:Ethernet  HWaddr b8:27:eb:96:ff:38  
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

wlan1     Link encap:Ethernet  HWaddr 04:8d:38:26:9d:4d  
          inet addr:192.168.0.7  Bcast:192.168.0.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:370998 errors:0 dropped:288 overruns:0 frame:0
          TX packets:446632 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:57028020 (54.3 MiB)  TX bytes:194479500 (185.4 MiB)

pi@raspberrypi:~ $

Codice: Seleziona tutto

pi@raspberrypi:~ $ route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         192.168.0.1     0.0.0.0         UG    0      0        0 wlan1
0.0.0.0         192.168.0.1     0.0.0.0         UG    304    0        0 wlan1
192.168.0.0     0.0.0.0         255.255.255.0   U     304    0        0 wlan1
pi@raspberrypi:~ $

Codice: Seleziona tutto

pi@raspberrypi:~ $ sudo iptables-save
# Generated by iptables-save v1.4.21 on Thu Mar  9 21:01:07 2017
*filter
:INPUT DROP [2:72]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [11:452]
:fail2ban-ssh - [0:0]
:fail2ban-ssh-ddos - [0:0]
:fail2ban-vsftpd - [0:0]
:pgl_fwd - [0:0]
:pgl_in - [0:0]
:pgl_out - [0:0]
:ufw-after-forward - [0:0]
:ufw-after-input - [0:0]
:ufw-after-logging-forward - [0:0]
:ufw-after-logging-input - [0:0]
:ufw-after-logging-output - [0:0]
:ufw-after-output - [0:0]
:ufw-before-forward - [0:0]
:ufw-before-input - [0:0]
:ufw-before-logging-forward - [0:0]
:ufw-before-logging-input - [0:0]
:ufw-before-logging-output - [0:0]
:ufw-before-output - [0:0]
:ufw-logging-allow - [0:0]
:ufw-logging-deny - [0:0]
:ufw-not-local - [0:0]
:ufw-reject-forward - [0:0]
:ufw-reject-input - [0:0]
:ufw-reject-output - [0:0]
:ufw-skip-to-policy-forward - [0:0]
:ufw-skip-to-policy-input - [0:0]
:ufw-skip-to-policy-output - [0:0]
:ufw-track-input - [0:0]
:ufw-track-output - [0:0]
:ufw-user-forward - [0:0]
:ufw-user-input - [0:0]
:ufw-user-limit - [0:0]
:ufw-user-limit-accept - [0:0]
:ufw-user-logging-forward - [0:0]
:ufw-user-logging-input - [0:0]
:ufw-user-logging-output - [0:0]
:ufw-user-output - [0:0]
-A INPUT -m state --state NEW -m mark ! --mark 0x14 -j pgl_in
-A INPUT -p tcp -m multiport --dports 21,20,990,989,1023 -j fail2ban-vsftpd
-A INPUT -p tcp -m multiport --dports 45678,5901 -j fail2ban-ssh-ddos
-A INPUT -p tcp -m multiport --dports 45679,5901 -j fail2ban-ssh
-A INPUT -j ufw-before-logging-input
-A INPUT -j ufw-before-input
-A INPUT -j ufw-after-input
-A INPUT -j ufw-after-logging-input
-A INPUT -j ufw-reject-input
-A INPUT -j ufw-track-input
-A FORWARD -m state --state NEW -m mark ! --mark 0x14 -j pgl_fwd
-A FORWARD -j ufw-before-logging-forward
-A FORWARD -j ufw-before-forward
-A FORWARD -j ufw-after-forward
-A FORWARD -j ufw-after-logging-forward
-A FORWARD -j ufw-reject-forward
-A OUTPUT -m state --state NEW -m mark ! --mark 0x14 -j pgl_out
-A OUTPUT -j ufw-before-logging-output
-A OUTPUT -j ufw-before-output
-A OUTPUT -j ufw-after-output
-A OUTPUT -j ufw-after-logging-output
-A OUTPUT -j ufw-reject-output
-A OUTPUT -j ufw-track-output
-A fail2ban-ssh -j RETURN
-A fail2ban-ssh-ddos -j RETURN
-A fail2ban-vsftpd -s 103.240.232.181/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 162.244.32.169/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 213.230.92.200/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 31.16.107.42/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 94.50.192.243/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 141.212.122.0/24 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 159.203.215.0/24 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 213.230.101.27/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 176.97.123.21/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 5.136.157.157/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 119.63.132.2/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 94.232.50.250/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 94.43.180.191/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 103.204.188.45/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 164.100.177.164/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 195.191.221.48/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 182.181.240.151/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 77.45.230.168/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 185.54.179.76/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 49.15.16.84/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 94.25.171.129/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 54.223.56.53/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 188.0.130.44/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 90.188.177.30/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 182.181.160.204/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 164.215.93.210/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 37.29.41.149/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 59.91.116.188/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 145.249.254.190/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 110.172.191.142/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 85.26.165.136/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 62.209.153.54/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 5.136.189.72/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 178.127.5.99/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 212.112.100.229/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 213.230.103.126/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 39.33.95.50/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 103.44.98.50/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 178.218.203.196/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 59.95.193.29/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 46.48.135.100/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 39.60.57.195/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 141.212.122.160/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 94.102.49.190/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 94.102.49.0/24 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 217.133.59.137/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 71.6.158.166/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -j RETURN
-A pgl_fwd -s 192.168.0.0/24 -d 192.168.0.0/24 -j RETURN
-A pgl_fwd -d 208.67.222.222/32 -j RETURN
-A pgl_fwd -m mark --mark 0xa -j DROP
-A pgl_fwd -d 127.0.0.0/24 -j RETURN
-A pgl_fwd -s 127.0.0.0/24 -j RETURN
-A pgl_fwd -d 127.0.0.1/32 -j RETURN
-A pgl_fwd -s 127.0.0.1/32 -j RETURN
-A pgl_fwd -d 176.103.48.36/32 -j RETURN
-A pgl_fwd -s 176.103.48.36/32 -j RETURN
-A pgl_fwd -d 192.168.0.0/24 -j RETURN
-A pgl_fwd -s 192.168.0.0/24 -j RETURN
-A pgl_fwd -d 192.168.0.1/32 -j RETURN
-A pgl_fwd -s 192.168.0.1/32 -j RETURN
-A pgl_fwd -d 195.154.128.49/32 -j RETURN
-A pgl_fwd -s 195.154.128.49/32 -j RETURN
-A pgl_fwd -d 195.154.83.5/32 -j RETURN
-A pgl_fwd -s 195.154.83.5/32 -j RETURN
-A pgl_fwd -d 212.83.184.152/32 -j RETURN
-A pgl_fwd -s 212.83.184.152/32 -j RETURN
-A pgl_fwd -d 222.40.142.3/32 -j RETURN
-A pgl_fwd -s 222.40.142.3/32 -j RETURN
-A pgl_fwd -d 46.235.227.11/32 -j RETURN
-A pgl_fwd -s 46.235.227.11/32 -j RETURN
-A pgl_fwd -d 5.153.225.207/32 -j RETURN
-A pgl_fwd -s 5.153.225.207/32 -j RETURN
-A pgl_fwd -d 5.249.146.81/32 -j RETURN
-A pgl_fwd -s 5.249.146.81/32 -j RETURN
-A pgl_fwd -d 77.120.115.66/32 -j RETURN
-A pgl_fwd -s 77.120.115.66/32 -j RETURN
-A pgl_fwd -d 91.200.42.119/32 -j RETURN
-A pgl_fwd -s 91.200.42.119/32 -j RETURN
-A pgl_fwd -d 91.200.42.46/32 -j RETURN
-A pgl_fwd -s 91.200.42.46/32 -j RETURN
-A pgl_fwd -d 91.200.42.47/32 -j RETURN
-A pgl_fwd -s 91.200.42.47/32 -j RETURN
-A pgl_fwd -p udp -m udp --dport 1900 -j RETURN
-A pgl_fwd -p udp -m udp --dport 40707 -j RETURN
-A pgl_fwd -p udp -m udp --dport 4665 -j RETURN
-A pgl_fwd -p udp -m udp --dport 4672 -j RETURN
-A pgl_fwd -p udp -m udp --dport 5665 -j RETURN
-A pgl_fwd -p udp -m udp --dport 58298 -j RETURN
-A pgl_fwd -p udp -m udp --dport 59767 -j RETURN
-A pgl_fwd -p udp -m udp --dport 68 -j RETURN
-A pgl_fwd -p udp -m udp --dport 8200 -j RETURN
-A pgl_fwd -p udp -m udp --dport 9091 -j RETURN
-A pgl_fwd -p tcp -m tcp --dport 123 -j RETURN
-A pgl_fwd -p tcp -m tcp --dport 1900 -j RETURN
-A pgl_fwd -p tcp -m tcp --dport 40707 -j RETURN
-A pgl_fwd -p tcp -m tcp --dport 4662 -j RETURN
-A pgl_fwd -p tcp -m tcp --dport 4665 -j RETURN
-A pgl_fwd -p tcp -m tcp --dport 5665 -j RETURN
-A pgl_fwd -p tcp -m tcp --dport 58298 -j RETURN
-A pgl_fwd -p tcp -m tcp --dport 59767 -j RETURN
-A pgl_fwd -p tcp -m tcp --dport 68 -j RETURN
-A pgl_fwd -p tcp -m tcp --dport 8200 -j RETURN
-A pgl_fwd -p tcp -m tcp --dport 9091 -j RETURN
-A pgl_fwd -j NFQUEUE --queue-num 92
-A pgl_in -s 192.168.0.0/24 -j RETURN
-A pgl_in -i lo -j RETURN
-A pgl_in -m mark --mark 0xa -j DROP
-A pgl_in -s 127.0.0.0/24 -j RETURN
-A pgl_in -s 127.0.0.1/32 -j RETURN
-A pgl_in -s 176.103.48.36/32 -j RETURN
-A pgl_in -s 192.168.0.0/24 -j RETURN
-A pgl_in -s 192.168.0.1/32 -j RETURN
-A pgl_in -s 195.154.128.49/32 -j RETURN
-A pgl_in -s 195.154.83.5/32 -j RETURN
-A pgl_in -s 212.83.184.152/32 -j RETURN
-A pgl_in -s 222.40.142.3/32 -j RETURN
-A pgl_in -s 46.235.227.11/32 -j RETURN
-A pgl_in -s 5.153.225.207/32 -j RETURN
-A pgl_in -s 5.249.146.81/32 -j RETURN
-A pgl_in -s 77.120.115.66/32 -j RETURN
-A pgl_in -s 91.200.42.119/32 -j RETURN
-A pgl_in -s 91.200.42.46/32 -j RETURN
-A pgl_in -s 91.200.42.47/32 -j RETURN
-A pgl_in -p udp -m udp --dport 4241:4253 -j RETURN
-A pgl_in -p udp -m udp --dport 1900 -j RETURN
-A pgl_in -p udp -m udp --dport 40707 -j RETURN
-A pgl_in -p udp -m udp --dport 4665 -j RETURN
-A pgl_in -p udp -m udp --dport 4672 -j RETURN
-A pgl_in -p udp -m udp --dport 5665 -j RETURN
-A pgl_in -p udp -m udp --dport 58298 -j RETURN
-A pgl_in -p udp -m udp --dport 59767 -j RETURN
-A pgl_in -p udp -m udp --dport 68 -j RETURN
-A pgl_in -p udp -m udp --dport 8200 -j RETURN
-A pgl_in -p udp -m udp --dport 9091 -j RETURN
-A pgl_in -p tcp -m tcp --dport 4241:4253 -j RETURN
-A pgl_in -p tcp -m tcp --dport 123 -j RETURN
-A pgl_in -p tcp -m tcp --dport 1900 -j RETURN
-A pgl_in -p tcp -m tcp --dport 40707 -j RETURN
-A pgl_in -p tcp -m tcp --dport 4662 -j RETURN
-A pgl_in -p tcp -m tcp --dport 4665 -j RETURN
-A pgl_in -p tcp -m tcp --dport 5665 -j RETURN
-A pgl_in -p tcp -m tcp --dport 58298 -j RETURN
-A pgl_in -p tcp -m tcp --dport 59767 -j RETURN
-A pgl_in -p tcp -m tcp --dport 68 -j RETURN
-A pgl_in -p tcp -m tcp --dport 8200 -j RETURN
-A pgl_in -p tcp -m tcp --dport 9091 -j RETURN
-A pgl_in -j NFQUEUE --queue-num 92
-A pgl_out -d 192.168.0.0/24 -j RETURN
-A pgl_out -d 208.67.222.222/32 -j RETURN
-A pgl_out -o lo -j RETURN
-A pgl_out -m mark --mark 0xa -j REJECT --reject-with icmp-port-unreachable
-A pgl_out -d 127.0.0.0/24 -j RETURN
-A pgl_out -d 127.0.0.1/32 -j RETURN
-A pgl_out -d 176.103.48.36/32 -j RETURN
-A pgl_out -d 192.168.0.0/24 -j RETURN
-A pgl_out -d 192.168.0.1/32 -j RETURN
-A pgl_out -d 195.154.128.49/32 -j RETURN
-A pgl_out -d 195.154.83.5/32 -j RETURN
-A pgl_out -d 212.83.184.152/32 -j RETURN
-A pgl_out -d 222.40.142.3/32 -j RETURN
-A pgl_out -d 46.235.227.11/32 -j RETURN
-A pgl_out -d 5.153.225.207/32 -j RETURN
-A pgl_out -d 5.249.146.81/32 -j RETURN
-A pgl_out -d 77.120.115.66/32 -j RETURN
-A pgl_out -d 91.200.42.119/32 -j RETURN
-A pgl_out -d 91.200.42.46/32 -j RETURN
-A pgl_out -d 91.200.42.47/32 -j RETURN
-A pgl_out -p udp -m udp --dport 1900 -j RETURN
-A pgl_out -p udp -m udp --dport 40707 -j RETURN
-A pgl_out -p udp -m udp --dport 4665 -j RETURN
-A pgl_out -p udp -m udp --dport 4672 -j RETURN
-A pgl_out -p udp -m udp --dport 5665 -j RETURN
-A pgl_out -p udp -m udp --dport 58298 -j RETURN
-A pgl_out -p udp -m udp --dport 59767 -j RETURN
-A pgl_out -p udp -m udp --dport 68 -j RETURN
-A pgl_out -p udp -m udp --dport 8200 -j RETURN
-A pgl_out -p udp -m udp --dport 9091 -j RETURN
-A pgl_out -p tcp -m tcp --dport 4241:4253 -j RETURN
-A pgl_out -p tcp -m tcp --dport 443 -j RETURN
-A pgl_out -p tcp -m tcp --dport 80 -j RETURN
-A pgl_out -p tcp -m tcp --dport 123 -j RETURN
-A pgl_out -p tcp -m tcp --dport 1900 -j RETURN
-A pgl_out -p tcp -m tcp --dport 40707 -j RETURN
-A pgl_out -p tcp -m tcp --dport 4662 -j RETURN
-A pgl_out -p tcp -m tcp --dport 4665 -j RETURN
-A pgl_out -p tcp -m tcp --dport 5353 -j RETURN
-A pgl_out -p tcp -m tcp --dport 5665 -j RETURN
-A pgl_out -p tcp -m tcp --dport 58298 -j RETURN
-A pgl_out -p tcp -m tcp --dport 59767 -j RETURN
-A pgl_out -p tcp -m tcp --dport 68 -j RETURN
-A pgl_out -p tcp -m tcp --dport 8200 -j RETURN
-A pgl_out -p tcp -m tcp --dport 9091 -j RETURN
-A pgl_out -j NFQUEUE --queue-num 92
-A ufw-after-input -p udp -m udp --dport 137 -j ufw-skip-to-policy-input
-A ufw-after-input -p udp -m udp --dport 138 -j ufw-skip-to-policy-input
-A ufw-after-input -p tcp -m tcp --dport 139 -j ufw-skip-to-policy-input
-A ufw-after-input -p tcp -m tcp --dport 445 -j ufw-skip-to-policy-input
-A ufw-after-input -p udp -m udp --dport 67 -j ufw-skip-to-policy-input
-A ufw-after-input -p udp -m udp --dport 68 -j ufw-skip-to-policy-input
-A ufw-after-input -m addrtype --dst-type BROADCAST -j ufw-skip-to-policy-input
-A ufw-after-logging-forward -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW BLOCK] "
-A ufw-after-logging-input -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW BLOCK] "
-A ufw-before-forward -j ufw-user-forward
-A ufw-before-input -i lo -j ACCEPT
-A ufw-before-input -m state --state RELATED,ESTABLISHED -j ACCEPT
-A ufw-before-input -m state --state INVALID -j ufw-logging-deny
-A ufw-before-input -m state --state INVALID -j DROP
-A ufw-before-input -p icmp -m icmp --icmp-type 3 -j ACCEPT
-A ufw-before-input -p icmp -m icmp --icmp-type 4 -j ACCEPT
-A ufw-before-input -p icmp -m icmp --icmp-type 11 -j ACCEPT
-A ufw-before-input -p icmp -m icmp --icmp-type 12 -j ACCEPT
-A ufw-before-input -p icmp -m icmp --icmp-type 8 -j ACCEPT
-A ufw-before-input -p udp -m udp --sport 67 --dport 68 -j ACCEPT
-A ufw-before-input -j ufw-not-local
-A ufw-before-input -d 224.0.0.251/32 -p udp -m udp --dport 5353 -j ACCEPT
-A ufw-before-input -d 239.255.255.250/32 -p udp -m udp --dport 1900 -j ACCEPT
-A ufw-before-input -j ufw-user-input
-A ufw-before-output -o lo -j ACCEPT
-A ufw-before-output -m state --state RELATED,ESTABLISHED -j ACCEPT
-A ufw-before-output -j ufw-user-output
-A ufw-logging-allow -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW ALLOW] "
-A ufw-logging-deny -m state --state INVALID -m limit --limit 3/min --limit-burst 10 -j RETURN
-A ufw-logging-deny -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW BLOCK] "
-A ufw-not-local -m addrtype --dst-type LOCAL -j RETURN
-A ufw-not-local -m addrtype --dst-type MULTICAST -j RETURN
-A ufw-not-local -m addrtype --dst-type BROADCAST -j RETURN
-A ufw-not-local -m limit --limit 3/min --limit-burst 10 -j ufw-logging-deny
-A ufw-not-local -j DROP
-A ufw-skip-to-policy-forward -j DROP
-A ufw-skip-to-policy-input -j DROP
-A ufw-skip-to-policy-output -j ACCEPT
-A ufw-track-output -p tcp -m state --state NEW -j ACCEPT
-A ufw-track-output -p udp -m state --state NEW -j ACCEPT
-A ufw-user-input -p tcp -m tcp --dport 5665 -j ACCEPT
-A ufw-user-input -p udp -m udp --dport 5665 -j ACCEPT
-A ufw-user-input -p tcp -m tcp --dport 9091 -j ACCEPT
-A ufw-user-input -p udp -m udp --dport 9091 -j ACCEPT
-A ufw-user-input -p tcp -m tcp --dport 4711 -j ACCEPT
-A ufw-user-input -p udp -m udp --dport 4711 -j ACCEPT
-A ufw-user-input -p tcp -m tcp --dport 8200 -j ACCEPT
-A ufw-user-input -p udp -m udp --dport 8200 -j ACCEPT
-A ufw-user-input -p tcp -m tcp --dport 4712 -j ACCEPT
-A ufw-user-input -p udp -m udp --dport 4712 -j ACCEPT
-A ufw-user-input -p tcp -m tcp --dport 5901 -j ACCEPT
-A ufw-user-input -p udp -m udp --dport 5901 -j ACCEPT
-A ufw-user-input -p tcp -m tcp --dport 45678 -j ACCEPT
-A ufw-user-input -p udp -m udp --dport 45678 -j ACCEPT
-A ufw-user-input -p tcp -m tcp --dport 10000 -j ACCEPT
-A ufw-user-input -p udp -m udp --dport 10000 -j ACCEPT
-A ufw-user-input -p tcp -m tcp --dport 6001 -j ACCEPT
-A ufw-user-input -p udp -m udp --dport 6001 -j ACCEPT
-A ufw-user-input -p tcp -m tcp --dport 21 -j ACCEPT
-A ufw-user-input -p udp -m udp --dport 21 -j ACCEPT
-A ufw-user-input -p tcp -m tcp --dport 4662 -j ACCEPT
-A ufw-user-input -p udp -m udp --dport 4662 -j ACCEPT
-A ufw-user-input -p tcp -m tcp --dport 1900 -j ACCEPT
-A ufw-user-input -p udp -m udp --dport 1900 -j ACCEPT
-A ufw-user-input -p tcp -m tcp --dport 50689 -j ACCEPT
-A ufw-user-input -p udp -m udp --dport 50689 -j ACCEPT
-A ufw-user-input -p tcp -m tcp --dport 4665 -j ACCEPT
-A ufw-user-input -p udp -m udp --dport 4665 -j ACCEPT
-A ufw-user-input -p tcp -m tcp --dport 4672 -j ACCEPT
-A ufw-user-input -p udp -m udp --dport 4672 -j ACCEPT
-A ufw-user-input -p tcp -m tcp --dport 68 -j ACCEPT
-A ufw-user-input -p udp -m udp --dport 68 -j ACCEPT
-A ufw-user-input -p tcp -m tcp --dport 123 -j ACCEPT
-A ufw-user-input -p udp -m udp --dport 123 -j ACCEPT
-A ufw-user-input -p tcp -m tcp --dport 5353 -j ACCEPT
-A ufw-user-input -p udp -m udp --dport 5353 -j ACCEPT
-A ufw-user-input -p tcp -m tcp --dport 56558 -j ACCEPT
-A ufw-user-input -p udp -m udp --dport 56558 -j ACCEPT
-A ufw-user-input -p tcp -m tcp --dport 54022 -j ACCEPT
-A ufw-user-input -p udp -m udp --dport 54022 -j ACCEPT
-A ufw-user-input -p tcp -m tcp --dport 58923 -j ACCEPT
-A ufw-user-input -p udp -m udp --dport 58923 -j ACCEPT
-A ufw-user-input -s 192.168.0.0/24 -d 192.168.0.0/24 -j ACCEPT
-A ufw-user-input -p tcp -m multiport --dports 4242:4252 -m multiport --sports 4242:4252 -j ACCEPT
-A ufw-user-limit -m limit --limit 3/min -j LOG --log-prefix "[UFW LIMIT BLOCK] "
-A ufw-user-limit -j REJECT --reject-with icmp-port-unreachable
-A ufw-user-limit-accept -j ACCEPT
-A ufw-user-output -s 192.168.0.0/24 -d 192.168.0.0/24 -j ACCEPT
-A ufw-user-output -s 192.168.0.7/32 -d 192.168.0.8/32 -j ACCEPT
COMMIT
# Completed on Thu Mar  9 21:01:07 2017
pi@raspberrypi:~ $

Codice: Seleziona tutto

pi@raspberrypi:~ $ ping -c 4 192.168.0.14
PING 192.168.0.14 (192.168.0.14) 56(84) bytes of data.

--- 192.168.0.14 ping statistics ---
4 packets transmitted, 0 received, 100% packet loss, time 3002ms

pi@raspberrypi:~ $

Anche ripulendo iptables del primo (192.168.0.7) il risultato non cambia cioé non mi vede il secondo (192.168.0.14) boooh

ant1988 · Messaggio da **ant1988** » giovedì 9 marzo 2017, 21:06

Codice: Seleziona tutto

pi@raspi:~ $ ifconfig
eth0      Link encap:Ethernet  HWaddr b8:27:eb:7b:8c:67  
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:210 errors:0 dropped:0 overruns:0 frame:0
          TX packets:210 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1 
          RX bytes:25712 (25.1 KiB)  TX bytes:25712 (25.1 KiB)

wlan0     Link encap:Ethernet  HWaddr b8:27:eb:2e:d9:32  
          inet addr:192.168.0.14  Bcast:192.168.0.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:5590 errors:0 dropped:274 overruns:0 frame:0
          TX packets:4462 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:6061295 (5.7 MiB)  TX bytes:1085346 (1.0 MiB)

pi@raspi:~ $

Codice: Seleziona tutto

pi@raspi:~ $ route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         192.168.0.1     0.0.0.0         UG    0      0        0 wlan0
0.0.0.0         192.168.0.1     0.0.0.0         UG    303    0        0 wlan0
192.168.0.0     0.0.0.0         255.255.255.0   U     303    0        0 wlan0
pi@raspi:~ $

Codice: Seleziona tutto

pi@raspi:~ $ sudo iptables-save
# Generated by iptables-save v1.4.21 on Thu Mar  9 21:05:02 2017
*filter
:INPUT ACCEPT [4281:5576586]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [4905:1043485]
:fail2ban-ssh - [0:0]
:fail2ban-ssh-ddos - [0:0]
:fail2ban-vsftpd - [0:0]
-A INPUT -p tcp -m multiport --dports 21,20,990,989,1023 -j fail2ban-vsftpd
-A INPUT -p tcp -m multiport --dports 45678,5901 -j fail2ban-ssh-ddos
-A INPUT -p tcp -m multiport --dports 45679,5901 -j fail2ban-ssh
-A fail2ban-ssh -j RETURN
-A fail2ban-ssh-ddos -j RETURN
-A fail2ban-vsftpd -s 103.240.232.181/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 162.244.32.169/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 213.230.92.200/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 31.16.107.42/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 94.50.192.243/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 141.212.122.0/24 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 159.203.215.0/24 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 213.230.101.27/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 176.97.123.21/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 5.136.157.157/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 119.63.132.2/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 94.232.50.250/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 94.43.180.191/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 103.204.188.45/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 164.100.177.164/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 195.191.221.48/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 182.181.240.151/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 77.45.230.168/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 185.54.179.76/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 49.15.16.84/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 94.25.171.129/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 54.223.56.53/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 188.0.130.44/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 90.188.177.30/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 182.181.160.204/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 164.215.93.210/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 37.29.41.149/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 59.91.116.188/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 145.249.254.190/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 110.172.191.142/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 85.26.165.136/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 62.209.153.54/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 5.136.189.72/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 178.127.5.99/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 212.112.100.229/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 213.230.103.126/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 39.33.95.50/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 103.44.98.50/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 178.218.203.196/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 59.95.193.29/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 46.48.135.100/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 39.60.57.195/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 141.212.122.160/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 94.102.49.190/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 94.102.49.0/24 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 217.133.59.137/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -s 71.6.158.166/32 -j REJECT --reject-with icmp-port-unreachable
-A fail2ban-vsftpd -j RETURN
COMMIT
# Completed on Thu Mar  9 21:05:02 2017
pi@raspi:~ $

Codice: Seleziona tutto

pi@raspi:~ $ ping -c 4 192.168.0.7
PING 192.168.0.7 (192.168.0.7) 56(84) bytes of data.
64 bytes from 192.168.0.7: icmp_seq=1 ttl=64 time=0.171 ms
64 bytes from 192.168.0.7: icmp_seq=2 ttl=64 time=0.107 ms
64 bytes from 192.168.0.7: icmp_seq=3 ttl=64 time=0.096 ms
64 bytes from 192.168.0.7: icmp_seq=4 ttl=64 time=0.075 ms

--- 192.168.0.7 ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 2997ms
rtt min/avg/max/mdev = 0.075/0.112/0.171/0.036 ms
pi@raspi:~ $

thece · Messaggio da **thece** » giovedì 9 marzo 2017, 21:45

Le impostazioni di rete dei due RPI sono a posto.

Hai provato a disattivare contemporaneamente tutte le regole di IPTables su entrambi e pingare?

Hai gli stessi problemi se usi le schede di rete Ethernet?

Hai mica impostato qualche filtro sul firewall del router?

ant1988 · Messaggio da **ant1988** » venerdì 10 marzo 2017, 5:46

Allora: no non ho provati a disattivare iptables su tutti e due se io do

Codice: Seleziona tutto

sudo iptables -F

mi si impiantano tutti e due e si riavviano (non so perché )
Non ho provato con l ethernet ma ho problemi di spazio a casa
No non ho nessun filtro sul modem/router
Ps comunque li ho disattivati sul primo con

Codice: Seleziona tutto

sudo /etc/init.d./pgl stop

Codice: Seleziona tutto

sudo /etc/init.d./ufw stop

E sul secondo le Policy sono tutte ACCEPT sia in input,forward, output

thece · Messaggio da **thece** » venerdì 10 marzo 2017, 8:59

Io mi sono fatto l'idea che il problema è da qualche parte sulla configurazione dei due firewall ...

[EDIT]

Prova a fare qualche ping test con tcpdump, con i due firewall sia attivi che disattivi.
Avvii tcpdump sul primo RPI (192.168.0.7)

Codice: Seleziona tutto

sudo tcpdump -i wlan1 -n icmp and src 192.168.0.7 and dst 192.168.0.14

Avvii tcpdump sul secondo RPI (192.168.0.14)

Codice: Seleziona tutto

sudo tcpdump -i wlan0 -n icmp and src 192.168.0.7 and dst 192.168.0.14

Torni sul primo RPI e da un altro terminale fai ping sul secondo RPI

Codice: Seleziona tutto

ping -c 4 192.168.0.14

PS: spero di aver scritto correttamente gli switch. Per terminare tcpdump usa la consueta combinazione CTRL + c

ant1988 · Messaggio da **ant1988** » venerdì 10 marzo 2017, 15:51

FIREWALL ATTIVO

Primo raspberry:

Codice: Seleziona tutto

pi@raspberrypi:~ $ sudo tcpdump -i wlan1 -n icmp and src 192.168.0.7 and dst 192.168.0.14
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on wlan1, link-type EN10MB (Ethernet), capture size 262144 bytes
15:50:03.923515 IP 192.168.0.7 > 192.168.0.14: ICMP echo request, id 13273, seq 1, length 64
15:50:04.923663 IP 192.168.0.7 > 192.168.0.14: ICMP echo request, id 13273, seq 2, length 64
15:50:05.928182 IP 192.168.0.7 > 192.168.0.14: ICMP echo request, id 13273, seq 3, length 64
15:50:06.928049 IP 192.168.0.7 > 192.168.0.14: ICMP echo request, id 13273, seq 4, length 64
^C
4 packets captured
7 packets received by filter
0 packets dropped by kernel
pi@raspberrypi:~ $

Secondo raspi:

Codice: Seleziona tutto

pi@raspi:~ $ sudo tcpdump -i wlan0 -n icmp and src 192.168.0.7 and dst 192.168.0.14
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on wlan0, link-type EN10MB (Ethernet), capture size 262144 bytes
15:50:03.922564 IP 192.168.0.7 > 192.168.0.14: ICMP echo request, id 13273, seq 1, length 64
15:50:04.922382 IP 192.168.0.7 > 192.168.0.14: ICMP echo request, id 13273, seq 2, length 64
15:50:05.927037 IP 192.168.0.7 > 192.168.0.14: ICMP echo request, id 13273, seq 3, length 64
15:50:06.926751 IP 192.168.0.7 > 192.168.0.14: ICMP echo request, id 13273, seq 4, length 64
^C
4 packets captured
4 packets received by filter
0 packets dropped by kernel
pi@raspi:~ $

ping sul primo raspberry:

Codice: Seleziona tutto

pi@raspberrypi:~ $ ping -c 4 192.168.0.14
PING 192.168.0.14 (192.168.0.14) 56(84) bytes of data.

--- 192.168.0.14 ping statistics ---
4 packets transmitted, 0 received, 100% packet loss, time 3004ms

pi@raspberrypi:~ $

ant1988 · Messaggio da **ant1988** » venerdì 10 marzo 2017, 16:00

FIREWALL DISABILITATO SU ENTRAMBI
primo raspberry:

Codice: Seleziona tutto

pi@raspberrypi:~ $ sudo tcpdump -i wlan1 -n icmp and src 192.168.0.7 and dst 192.168.0.14
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on wlan1, link-type EN10MB (Ethernet), capture size 262144 bytes
^C
0 packets captured
0 packets received by filter
0 packets dropped by kernel
pi@raspberrypi:~ $

secondo raspi:

Codice: Seleziona tutto

pi@raspi:~ $ sudo tcpdump -i wlan0 -n icmp and src 192.168.0.7 and dst 192.168.0.14
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on wlan0, link-type EN10MB (Ethernet), capture size 262144 bytes
^C
0 packets captured
0 packets received by filter
0 packets dropped by kernel
pi@raspi:~ $

risultato ping:

Codice: Seleziona tutto

pi@raspberrypi:~ $ ping -c 4 192.168.0.14
PING 192.168.0.14 (192.168.0.14) 56(84) bytes of data.
From 192.168.0.7 icmp_seq=1 Destination Host Unreachable                                                                                                                          
From 192.168.0.7 icmp_seq=2 Destination Host Unreachable                                                                                                                          
From 192.168.0.7 icmp_seq=3 Destination Host Unreachable
From 192.168.0.7 icmp_seq=4 Destination Host Unreachable

--- 192.168.0.14 ping statistics ---
4 packets transmitted, 0 received, +4 errors, 100% packet loss, time 3012ms
pipe 3
pi@raspberrypi:~ $

thece · Messaggio da **thece** » venerdì 10 marzo 2017, 16:03

Scusa, ho sbagliato i filtri

troppo selettivi. Ripeti il ping test con

- primo RPI (192.168.0.7)

Codice: Seleziona tutto

sudo tcpdump -i wlan1 -n icmp and host 192.168.0.7

- secondo RPI (192.168.0.14)

Codice: Seleziona tutto

sudo tcpdump -i wlan0 -n icmp and host 192.168.0.14

ant1988 · Messaggio da **ant1988** » venerdì 10 marzo 2017, 16:07

il primo tuo comando mi da troppi output

sudo tcpdump -i wlan1 -n icmp and host 192.168.0.7

comunque ho riprovato ma nell'output facendoci caso non viene nessun 192.168.0.14 non compare proprio.... anche con firewall disabilitato
una cosa strana l'ho notata: il secondo raspberry non fa il ping sul modem:

Codice: Seleziona tutto

Cpi@raspi:~ $ ping 192.168.0.1
PING 192.168.0.1 (192.168.0.1) 56(84) bytes of data.
^C
--- 192.168.0.1 ping statistics ---
22 packets transmitted, 0 received, 100% packet loss, time 21004ms

pi@raspi:~ $

thece · Messaggio da **thece** » venerdì 10 marzo 2017, 16:11

Come troppi? Fai solo 4 ping

ant1988 · Messaggio da **ant1988** » venerdì 10 marzo 2017, 16:13

voglio dire questo:

Codice: Seleziona tutto

pi@raspberrypi:~ $ sudo tcpdump -i wlan1 -n icmp and host 192.168.0.7
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on wlan1, link-type EN10MB (Ethernet), capture size 262144 bytes
16:08:14.045770 IP 192.168.0.7 > 2.234.146.69: ICMP 192.168.0.7 udp port 5665 unreachable, length 56
16:08:14.327081 IP 116.12.57.164 > 192.168.0.7: ICMP 116.12.57.164 udp port 23598 unreachable, length 58
16:08:14.327820 IP 192.168.0.7 > 188.216.35.109: ICMP 192.168.0.7 udp port 5665 unreachable, length 56
16:08:14.370409 IP 192.168.0.7 > 192.168.0.1: ICMP echo request, id 31497, seq 1, length 64
16:08:14.372633 IP 192.168.0.1 > 192.168.0.7: ICMP echo reply, id 31497, seq 1, length 64
16:08:15.240802 IP 192.168.0.7 > 2.234.231.120: ICMP 192.168.0.7 udp port 5665 unreachable, length 56
16:08:15.295826 IP 192.168.0.7 > 104.180.35.58: ICMP 192.168.0.7 udp port 5665 unreachable, length 56
16:08:15.373545 IP 192.168.0.7 > 192.168.0.1: ICMP echo request, id 31497, seq 1, length 64
16:08:15.375727 IP 192.168.0.1 > 192.168.0.7: ICMP echo reply, id 31497, seq 1, length 64
16:08:16.376568 IP 192.168.0.7 > 192.168.0.1: ICMP echo request, id 31497, seq 1, length 64
16:08:16.378315 IP 192.168.0.1 > 192.168.0.7: ICMP echo reply, id 31497, seq 1, length 64
16:08:16.437118 IP 192.168.0.7 > 151.15.15.30: ICMP 192.168.0.7 udp port 5665 unreachable, length 56
16:08:16.768696 IP 192.168.0.7 > 151.54.68.41: ICMP 192.168.0.7 udp port 5665 unreachable, length 56
16:08:17.120556 IP 192.168.0.7 > 85.154.102.229: ICMP 192.168.0.7 udp port 5665 unreachable, length 134
16:08:17.135770 IP 192.168.0.7 > 95.235.96.156: ICMP 192.168.0.7 udp port 5665 unreachable, length 153
16:08:17.379021 IP 192.168.0.7 > 192.168.0.1: ICMP echo request, id 31497, seq 1, length 64
16:08:17.381165 IP 192.168.0.1 > 192.168.0.7: ICMP echo reply, id 31497, seq 1, length 64
16:08:17.681588 IP 192.168.0.7 > 88.147.43.149: ICMP 192.168.0.7 udp port 5665 unreachable, length 56
16:08:17.747327 IP 192.168.0.7 > 119.228.171.181: ICMP 192.168.0.7 udp port 5665 unreachable, length 134
16:08:18.381766 IP 192.168.0.7 > 192.168.0.1: ICMP echo request, id 31497, seq 1, length 64
16:08:18.383591 IP 192.168.0.1 > 192.168.0.7: ICMP echo reply, id 31497, seq 1, length 64
16:08:18.450606 IP 192.168.0.7 > 113.70.176.237: ICMP 192.168.0.7 udp port 5665 unreachable, length 137
16:08:18.656750 IP 192.168.0.7 > 79.51.4.88: ICMP 192.168.0.7 udp port 5665 unreachable, length 56
16:08:18.668894 IP 192.168.0.7 > 223.17.138.77: ICMP 192.168.0.7 udp port 5665 unreachable, length 134
16:08:18.675888 IP 192.168.0.7 > 1.196.162.133: ICMP 192.168.0.7 udp port 5665 unreachable, length 98
16:08:18.718946 IP 192.168.0.7 > 222.98.226.135: ICMP 192.168.0.7 udp port 5665 unreachable, length 140
16:08:19.029830 IP 192.168.0.7 > 87.9.155.120: ICMP 192.168.0.7 udp port 5665 unreachable, length 133
16:08:19.030012 IP 192.168.0.7 > 87.9.155.120: ICMP 192.168.0.7 udp port 5665 unreachable, length 133
16:08:19.151686 IP 192.168.0.7 > 113.70.176.237: ICMP 192.168.0.7 udp port 5665 unreachable, length 137
16:08:19.311175 IP 192.168.0.7 > 151.230.1.97: ICMP 192.168.0.7 udp port 5665 unreachable, length 66
16:08:19.384017 IP 192.168.0.7 > 192.168.0.1: ICMP echo request, id 31497, seq 1, length 64
16:08:19.386183 IP 192.168.0.1 > 192.168.0.7: ICMP echo reply, id 31497, seq 1, length 64
16:08:19.431819 IP 192.168.0.7 > 151.15.15.30: ICMP 192.168.0.7 udp port 5665 unreachable, length 56
16:08:19.451804 IP 192.168.0.7 > 76.89.193.197: ICMP 192.168.0.7 udp port 5665 unreachable, length 134
16:08:19.590222 IP 192.168.0.7 > 1.196.162.133: ICMP 192.168.0.7 udp port 5665 unreachable, length 98
16:08:20.046700 IP 192.168.0.7 > 213.136.79.205: ICMP 192.168.0.7 udp port 5665 unreachable, length 133
16:08:20.128823 IP 192.168.0.7 > 79.23.224.42: ICMP 192.168.0.7 udp port 5665 unreachable, length 66
16:08:20.143002 IP 192.168.0.7 > 126.7.205.125: ICMP 192.168.0.7 udp port 5665 unreachable, length 134
16:08:20.220769 IP 192.168.0.7 > 151.54.68.41: ICMP 192.168.0.7 udp port 5665 unreachable, length 56
16:08:20.386634 IP 192.168.0.7 > 192.168.0.1: ICMP echo request, id 31497, seq 1, length 64
16:08:20.388482 IP 192.168.0.1 > 192.168.0.7: ICMP echo reply, id 31497, seq 1, length 64
16:08:20.528958 IP 192.168.0.7 > 218.109.32.1: ICMP 192.168.0.7 udp port 5665 unreachable, length 140
16:08:20.966064 IP 192.168.0.7 > 146.158.7.248: ICMP 192.168.0.7 udp port 5665 unreachable, length 140
16:08:21.388924 IP 192.168.0.7 > 192.168.0.1: ICMP echo request, id 31497, seq 1, length 64
16:08:21.390795 IP 192.168.0.1 > 192.168.0.7: ICMP echo reply, id 31497, seq 1, length 64
16:08:21.695888 IP 192.168.0.7 > 82.178.245.218: ICMP 192.168.0.7 udp port 5665 unreachable, length 139
16:08:21.712525 IP 192.168.0.7 > 142.4.212.121: ICMP 192.168.0.7 udp port 5665 unreachable, length 128
16:08:21.853238 IP 192.168.0.7 > 93.227.6.133: ICMP 192.168.0.7 udp port 5665 unreachable, length 101
16:08:22.227156 IP 192.168.0.7 > 79.51.4.88: ICMP 192.168.0.7 udp port 5665 unreachable, length 56
16:08:22.391431 IP 192.168.0.7 > 192.168.0.1: ICMP echo request, id 31497, seq 1, length 64
16:08:22.393650 IP 192.168.0.1 > 192.168.0.7: ICMP echo reply, id 31497, seq 1, length 64
16:08:22.477314 IP 192.168.0.7 > 151.230.1.97: ICMP 192.168.0.7 udp port 5665 unreachable, length 66
16:08:22.481737 IP 192.168.0.7 > 117.3.236.76: ICMP 192.168.0.7 udp port 5665 unreachable, length 140
16:08:22.978710 IP 192.168.0.7 > 151.15.15.30: ICMP 192.168.0.7 udp port 5665 unreachable, length 56
16:08:23.200636 IP 192.168.0.7 > 79.23.224.42: ICMP 192.168.0.7 udp port 5665 unreachable, length 66
16:08:23.394425 IP 192.168.0.7 > 192.168.0.1: ICMP echo request, id 31497, seq 1, length 64
16:08:23.396203 IP 192.168.0.1 > 192.168.0.7: ICMP echo reply, id 31497, seq 1, length 64
16:08:23.423028 IP 192.168.0.7 > 61.84.87.50: ICMP 192.168.0.7 udp port 5665 unreachable, length 151
16:08:23.621238 IP 192.168.0.7 > 88.7.98.49: ICMP 192.168.0.7 udp port 5665 unreachable, length 133
16:08:23.816698 IP 192.168.0.7 > 133.236.17.196: ICMP 192.168.0.7 udp port 5665 unreachable, length 137
16:08:24.396634 IP 192.168.0.7 > 192.168.0.1: ICMP echo request, id 31497, seq 1, length 64
16:08:24.398111 IP 192.168.0.1 > 192.168.0.7: ICMP echo reply, id 31497, seq 1, length 64
16:08:25.076729 IP 192.168.0.7 > 79.50.130.147: ICMP 192.168.0.7 udp port 5665 unreachable, length 56
16:08:25.398533 IP 192.168.0.7 > 192.168.0.1: ICMP echo request, id 31497, seq 1, length 64
16:08:25.400488 IP 192.168.0.1 > 192.168.0.7: ICMP echo reply, id 31497, seq 1, length 64
16:08:26.134938 IP 192.168.0.7 > 212.142.94.155: ICMP 192.168.0.7 udp port 5665 unreachable, length 139
16:08:26.326168 IP 192.168.0.7 > 151.54.68.41: ICMP 192.168.0.7 udp port 5665 unreachable, length 56
16:08:26.401076 IP 192.168.0.7 > 192.168.0.1: ICMP echo request, id 31497, seq 1, length 64
16:08:26.403210 IP 192.168.0.1 > 192.168.0.7: ICMP echo reply, id 31497, seq 1, length 64
16:08:26.632220 IP 82.53.245.187 > 192.168.0.7: ICMP host 82.53.245.187 unreachable, length 87
16:08:27.200401 IP 192.168.0.7 > 2.39.134.118: ICMP 192.168.0.7 udp port 5665 unreachable, length 139
16:08:27.403971 IP 192.168.0.7 > 192.168.0.1: ICMP echo request, id 31497, seq 1, length 64
16:08:27.405586 IP 192.168.0.1 > 192.168.0.7: ICMP echo reply, id 31497, seq 1, length 64
16:08:27.577274 IP 192.168.0.7 > 124.12.33.239: ICMP 192.168.0.7 udp port 5665 unreachable, length 137
16:08:27.917527 IP 192.168.0.7 > 183.88.72.243: ICMP 192.168.0.7 udp port 5665 unreachable, length 134
16:08:28.130010 IP 192.168.0.7 > 79.50.130.147: ICMP 192.168.0.7 udp port 5665 unreachable, length 56
16:08:28.406013 IP 192.168.0.7 > 192.168.0.1: ICMP echo request, id 31497, seq 1, length 64
16:08:28.407702 IP 192.168.0.1 > 192.168.0.7: ICMP echo reply, id 31497, seq 1, length 64
16:08:28.624999 IP 192.168.0.7 > 95.153.130.81: ICMP 192.168.0.7 udp port 5665 unreachable, length 137
16:08:28.840698 IP 192.168.0.7 > 130.0.40.203: ICMP 192.168.0.7 udp port 5665 unreachable, length 139
16:08:29.408185 IP 192.168.0.7 > 192.168.0.1: ICMP echo request, id 31497, seq 1, length 64
16:08:29.409920 IP 192.168.0.1 > 192.168.0.7: ICMP echo reply, id 31497, seq 1, length 64
^C

Sul primo raspberry mi serve assolutamente un comando selettivo..non posso mica perderci la testa!!
ps conta che questo output é senza ping...

thece · Messaggio da **thece** » venerdì 10 marzo 2017, 16:15

Ti stanno bombardando dall'esterno con i ping. Temporaneamente sul router disattiva il port forwarding verso i due RPI

ant1988 · Messaggio da **ant1988** » venerdì 10 marzo 2017, 16:18

ho trovato una cosa strana il primo raspberry fa il ping correttamente al modem/router:

Codice: Seleziona tutto

pi@raspberrypi:~ $ ping 192.168.0.1
PING 192.168.0.1 (192.168.0.1) 56(84) bytes of data.
64 bytes from 192.168.0.1: icmp_seq=1 ttl=64 time=1.74 ms
64 bytes from 192.168.0.1: icmp_seq=2 ttl=64 time=160 ms
64 bytes from 192.168.0.1: icmp_seq=3 ttl=64 time=1.95 ms
^C
--- 192.168.0.1 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2003ms
rtt min/avg/max/mdev = 1.748/54.821/160.761/74.910 ms
pi@raspberrypi:~ $

mentre il secondo no:

Codice: Seleziona tutto

^Cpi@raspi:~ $ ping 192.168.0.1
PING 192.168.0.1 (192.168.0.1) 56(84) bytes of data.
^C
--- 192.168.0.1 ping statistics ---
22 packets transmitted, 0 received, 100% packet loss, time 21004ms

pi@raspi:~ $

ant1988 · Messaggio da **ant1988** » venerdì 10 marzo 2017, 16:19

thece [url=http://forum.ubuntu-it.org/viewtopic.php?p=4965200#p4965200][img]http://forum.ubuntu-it.org/images/icons/icona-cita.gif[/img][/url] ha scritto:Ti stanno bombardando dall'esterno con i ping. Temporaneamente sul router disattiva il port forwarding verso i due RPI

già fatto ma mi "bombardano" ugualmente

thece · Messaggio da **thece** » venerdì 10 marzo 2017, 16:20

Non lo trovo così strano, lo trovo coerente con il malfunzionamento che stai lamentando

thece · Messaggio da **thece** » venerdì 10 marzo 2017, 16:20

ant1988 [url=http://forum.ubuntu-it.org/viewtopic.php?p=4965202#p4965202][img]http://forum.ubuntu-it.org/images/icons/icona-cita.gif[/img][/url] ha scritto:
thece [url=http://forum.ubuntu-it.org/viewtopic.php?p=4965200#p4965200][img]http://forum.ubuntu-it.org/images/icons/icona-cita.gif[/img][/url] ha scritto:Ti stanno bombardando dall'esterno con i ping. Temporaneamente sul router disattiva il port forwarding verso i due RPI
già fatto ma mi "bombardano" ugualmente

Non è possibile. Se sul router il port forwarding verso i due RPI è disabilitato i due RPI possono essere contattati solamente dall'interno della tua LAN

ant1988 · Messaggio da **ant1988** » venerdì 10 marzo 2017, 16:25

ho disattivato il port forwading vedi immagini.

Codice: Seleziona tutto

pi@raspberrypi:~ $ sudo tcpdump -i wlan1 -n icmp and host 192.168.0.7
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on wlan1, link-type EN10MB (Ethernet), capture size 262144 bytes
16:25:06.932653 IP 192.168.0.7 > 93.39.154.81: ICMP 192.168.0.7 udp port 5665 unreachable, length 139
16:25:07.287907 IP 192.168.0.7 > 95.139.243.88: ICMP 192.168.0.7 udp port 5665 unreachable, length 101
16:25:07.469528 IP 192.168.0.7 > 192.168.0.1: ICMP echo request, id 31497, seq 1, length 64
16:25:07.470984 IP 192.168.0.1 > 192.168.0.7: ICMP echo reply, id 31497, seq 1, length 64
16:25:07.646743 IP 192.168.0.7 > 2.235.247.84: ICMP 192.168.0.7 udp port 5665 unreachable, length 139
16:25:07.747223 IP 192.168.0.7 > 178.122.30.74: ICMP 192.168.0.7 udp port 5665 unreachable, length 140
16:25:07.915279 IP 192.168.0.7 > 95.90.245.72: ICMP 192.168.0.7 udp port 5665 unreachable, length 140
16:25:08.177928 IP 192.168.0.7 > 93.45.66.180: ICMP 192.168.0.7 udp port 5665 unreachable, length 56
16:25:08.471411 IP 192.168.0.7 > 192.168.0.1: ICMP echo request, id 31497, seq 1, length 64
16:25:08.473151 IP 192.168.0.1 > 192.168.0.7: ICMP echo reply, id 31497, seq 1, length 64
16:25:08.570065 IP 192.168.0.7 > 134.249.221.234: ICMP 192.168.0.7 udp port 5665 unreachable, length 140
16:25:08.800639 IP 212.171.120.131 > 192.168.0.7: ICMP 212.171.120.131 udp port 4562 unreachable, length 74
16:25:09.268229 IP 192.168.0.7 > 114.36.59.89: ICMP 192.168.0.7 udp port 5665 unreachable, length 137
16:25:09.473563 IP 192.168.0.7 > 192.168.0.1: ICMP echo request, id 31497, seq 1, length 64
16:25:09.475241 IP 192.168.0.1 > 192.168.0.7: ICMP echo reply, id 31497, seq 1, length 64
16:25:09.555874 IP 192.168.0.7 > 134.249.221.234: ICMP 192.168.0.7 udp port 5665 unreachable, length 140
16:25:09.558690 IP 192.168.0.7 > 134.249.221.234: ICMP 192.168.0.7 udp port 5665 unreachable, length 140
16:25:09.561383 IP 192.168.0.7 > 134.249.221.234: ICMP 192.168.0.7 udp port 5665 unreachable, length 140
16:25:09.735698 IP 192.168.0.7 > 52.29.109.220: ICMP 192.168.0.7 udp port 5665 unreachable, length 140
16:25:10.102160 IP 192.168.0.7 > 212.252.56.195: ICMP 192.168.0.7 udp port 5665 unreachable, length 142
16:25:10.475673 IP 192.168.0.7 > 192.168.0.1: ICMP echo request, id 31497, seq 1, length 64
16:25:10.477759 IP 192.168.0.1 > 192.168.0.7: ICMP echo reply, id 31497, seq 1, length 64
16:25:10.495394 IP 192.168.0.7 > 88.147.42.183: ICMP 192.168.0.7 udp port 5665 unreachable, length 56
16:25:10.604402 IP 192.168.0.7 > 1.165.1.90: ICMP 192.168.0.7 udp port 5665 unreachable, length 134
16:25:11.376820 IP 192.168.0.7 > 187.65.222.130: ICMP 192.168.0.7 udp port 5665 unreachable, length 134
16:25:11.478489 IP 192.168.0.7 > 192.168.0.1: ICMP echo request, id 31497, seq 1, length 64
16:25:11.480722 IP 192.168.0.1 > 192.168.0.7: ICMP echo reply, id 31497, seq 1, length 64
16:25:11.570934 IP 192.168.0.7 > 93.45.66.180: ICMP 192.168.0.7 udp port 5665 unreachable, length 56
16:25:11.834224 IP 192.168.0.7 > 27.81.89.222: ICMP 192.168.0.7 udp port 5665 unreachable, length 134
16:25:12.146202 IP 192.168.0.7 > 95.83.150.210: ICMP 192.168.0.7 udp port 5665 unreachable, length 142
^C
30 packets captured
30 packets received by filter
0 packets dropped by kernel
pi@raspberrypi:~ $

thece · Messaggio da **thece** » venerdì 10 marzo 2017, 16:29

Scusa nella fretta ho letto male, è il tuo RPI che sta facendo tutti quei ping verso l'esterno

Forum Ubuntu-it

[RISOLTO]Destination Host Unreachable

[RISOLTO]Destination Host Unreachable

Re: Destination Host Unreachable

Re: Destination Host Unreachable

Re: Destination Host Unreachable

Re: Destination Host Unreachable

Re: Destination Host Unreachable

Re: Destination Host Unreachable

Re: Destination Host Unreachable

Re: Destination Host Unreachable

Re: Destination Host Unreachable

Re: Destination Host Unreachable

Re: Destination Host Unreachable

Re: Destination Host Unreachable

Re: Destination Host Unreachable

Re: Destination Host Unreachable

Re: Destination Host Unreachable

Re: Destination Host Unreachable

Re: Destination Host Unreachable

Re: Destination Host Unreachable

Re: Destination Host Unreachable

Chi c’è in linea

Accedi • Iscriviti