ping: sendmsg: Operation not permitted o_O - Sicurezza Informatica

NoTrace Security Forum

Nome Utente:	Password:
Salva Password
Password Dimenticata?

Tutti i Forum

Sistemi Operativi

Linux/Unix

ping: sendmsg: Operation not permitted o_O

Forum Bloccato

Versione Stampabile

Aggiungi Segnalibro

Autore

Discussione

Yves
Moderatore

Città: Buenos Aires

6097 Messaggi

Inserito il - 30/03/2007 : 02:08:54

Prima volta che mi fa sto inghippo, ho cercato un pò su google e sembra sia dovuto alle due interfacce di rete (eth0 = RJ45 ed eth1 = WiFi) ed a iptables non ben configurato per esse, fatto sta che prima di oggi non me lo aveva mai fatto, ultime cose fatte ieri nel pomeriggio (in ufficio) ho installato amsn 0.96 da "svn" (come da guida del forum Ubuntu-it), oltre ad un pò di aggiornamenti (non ricordo che pacchetti, ma ho dato un occhiata prima di dare il fatidico "s" e a memoria niente che riguardasse "kernel", "samba" o "xorg", ma forse dipendenze..), comunque dopo ho spento ed ho riacceso in altro sito (fmpalermo e si è riconnessa al volo sulla loro rete (WiFiradar fa miracoli), ho fatto un pò di cose (trasferimenti ftp..hanno un upload da favola

) e niente più, 3 e mezza del mattino a dormire..

Questa mattina (si fa per dire.. svegliato alle 11..) ho riacceso per controllare la posta, scaricato e tutto ok, galerato un pò con irc, ecc. fatto due lavoretti in "locale" (documenti..), perfetto, spengo e a magnà...

Riaccendo il pomeriggio e comincia la galera, controllo con ifconfig e mi segnala che è tutto ok, controllo allora con un ping in locale ed è ok, faccio un ping a google e sorpresa:

......
ping: sendmsg: Operation not permitted
ping: sendmsg: Operation not permitted
......

comincio a sgooglare come un matto e mi accorgo che la storia non è affatto "rara", cosa non riesco a trovare la soluzione, cioè, ho disattivato eth0 (visto che uso prevalentemente il wifi..) e la cosa si è rimessa a posto come per magia, ma se ci fosse una soluzione diversa sarebbe ottimo, posto un pò di comandi:


ifconfig (eth0 disattivata)

eth0      Link encap:Ethernet  HWaddr 00:03:0D:3E:DC:2C
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)
          Interrupt:11 Memory:febfc000-0

eth1      Link encap:Ethernet  HWaddr 00:13:02:13:DD:D3
          inet addr:192.168.0.176  Bcast:192.168.0.255  Mask:255.255.255.0
          inet6 addr: fe80::213:2ff:fe13:ddd3/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:21296 errors:0 dropped:25 overruns:0 frame:0
          TX packets:3257 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:900475 (879.3 KiB)  TX bytes:269323 (263.0 KiB)
          Interrupt:10 Base address:0x2000 Memory:feaff000-feafffff

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)


yves[No-Spam]Edgy:~$ iwconfig
lo        no wireless extensions.

eth0      no wireless extensions.

eth1      IEEE 802.11g  ESSID:"Sinapsis"  Nickname:"Sinapsis"
          Mode:Managed  Frequency:2.462 GHz  Access Point: 00:C0:49:54:36:64
          Bit Rate:54 Mb/s   Tx-Power:15 dBm
          Retry limit:15   RTS thr:off   Fragment thr:off
          Power Management:off
          Link Quality=96/100  Signal level=-30 dBm  Noise level=-31 dBm
          Rx invalid nwid:0  Rx invalid crypt:0  Rx invalid frag:0
          Tx excessive retries:0  Invalid misc:44   Missed beacon:0

sit0      no wireless extensions.


/sbin/route -n
Kernel IP routeing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
192.168.0.0     0.0.0.0         255.255.255.0   U     0      0        0 eth1
0.0.0.0         192.168.0.1     0.0.0.0         UG    0      0        0 eth1

Dimenticavo iptables..


yves[No-Spam]Edgy:~$ sudo iptables -L
Password:
Chain INPUT (policy DROP)
target     prot opt source               destination
ACCEPT     tcp  --  resolver1.opendns[.com]  anywhere            tcp flags:!FIN,SYN,RST,ACK/SYN
ACCEPT     udp  --  resolver1.opendns[.com]  anywhere
ACCEPT     tcp  --  resolver2.opendns[.com]  anywhere            tcp flags:!FIN,SYN,RST,ACK/SYN
ACCEPT     udp  --  resolver2.opendns[.com]  anywhere
ACCEPT     tcp  --  192.168.0.1          anywhere            tcp flags:!FIN,SYN,RST,ACK/SYN
ACCEPT     udp  --  192.168.0.1          anywhere
ACCEPT     all  --  anywhere             anywhere
ACCEPT     icmp --  anywhere             anywhere            limit: avg 10/sec burst 5
DROP       all  --  anywhere             255.255.255.255
DROP       all  --  BASE-ADDRESS.MCAST.NET/8  anywhere
DROP       all  --  anywhere             BASE-ADDRESS.MCAST.NET/8
DROP       all  --  255.255.255.255      anywhere
DROP       all  --  anywhere             0.0.0.0
DROP       all  --  anywhere             anywhere            state INVALID
LSI        all  -f  anywhere             anywhere            limit: avg 10/min burst 5
INBOUND    all  --  anywhere             anywhere
LOG_FILTER  all  --  anywhere             anywhere
LOG        all  --  anywhere             anywhere            LOG level info prefix `Unknown Input'

Chain FORWARD (policy DROP)
target     prot opt source               destination
ACCEPT     icmp --  anywhere             anywhere            limit: avg 10/sec burst 5
LOG_FILTER  all  --  anywhere             anywhere
LOG        all  --  anywhere             anywhere            LOG level info prefix `Unknown Forward'

Chain OUTPUT (policy DROP)
target     prot opt source               destination
ACCEPT     tcp  --  192.168.0.176        resolver1.opendns[.com] tcp dpt:domain
ACCEPT     udp  --  192.168.0.176        resolver1.opendns[.com] udp dpt:domain
ACCEPT     tcp  --  192.168.0.176        resolver2.opendns[.com] tcp dpt:domain
ACCEPT     udp  --  192.168.0.176        resolver2.opendns[.com] udp dpt:domain
ACCEPT     tcp  --  192.168.0.176        192.168.0.1         tcp dpt:domain
ACCEPT     udp  --  192.168.0.176        192.168.0.1         udp dpt:domain
ACCEPT     all  --  anywhere             anywhere
DROP       all  --  BASE-ADDRESS.MCAST.NET/8  anywhere
DROP       all  --  anywhere             BASE-ADDRESS.MCAST.NET/8
DROP       all  --  255.255.255.255      anywhere
DROP       all  --  anywhere             0.0.0.0
DROP       all  --  anywhere             anywhere            state INVALID
OUTBOUND   all  --  anywhere             anywhere
LOG_FILTER  all  --  anywhere             anywhere
LOG        all  --  anywhere             anywhere            LOG level info prefix `Unknown Output'

Chain INBOUND (1 references)
target     prot opt source               destination
ACCEPT     tcp  --  anywhere             anywhere            state RELATED,ESTABLISHED
ACCEPT     udp  --  anywhere             anywhere            state RELATED,ESTABLISHED
ACCEPT     all  --  192.168.0.116        anywhere
ACCEPT     all  --  192.168.0.150        anywhere
ACCEPT     all  --  192.168.0.176        anywhere
ACCEPT     all  --  192.168.0.5          anywhere
ACCEPT     all  --  192.168.0.109        anywhere
ACCEPT     all  --  192.168.0.108        anywhere
ACCEPT     all  --  192.168.0.1          anywhere
ACCEPT     tcp  --  anywhere             anywhere            tcp dpts:netbios-ns:netbios-ssn
ACCEPT     udp  --  anywhere             anywhere            udp dpts:netbios-ns:netbios-ssn
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:microsoft-ds
ACCEPT     udp  --  anywhere             anywhere            udp dpt:microsoft-ds
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:ipp
ACCEPT     udp  --  anywhere             anywhere            udp dpt:ipp
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:6881
ACCEPT     udp  --  anywhere             anywhere            udp dpt:6881
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:6884
ACCEPT     udp  --  anywhere             anywhere            udp dpt:6884
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:msnp
ACCEPT     udp  --  anywhere             anywhere            udp dpt:msnp
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:htt*s
ACCEPT     udp  --  anywhere             anywhere            udp dpt:htt*s
ACCEPT     tcp  --  192.168.0.108        anywhere            tcp dpt:9100
ACCEPT     udp  --  192.168.0.108        anywhere            udp dpt:9100
ACCEPT     tcp  --  192.168.0.176        anywhere            tcp dpt:swat
ACCEPT     udp  --  192.168.0.176        anywhere            udp dpt:901
LSI        all  --  anywhere             anywhere

Chain LOG_FILTER (5 references)
target     prot opt source               destination

Chain LSI (2 references)
target     prot opt source               destination
LOG_FILTER  all  --  anywhere             anywhere
LOG        tcp  --  anywhere             anywhere            tcp flags:FIN,SYN,RST,ACK/SYN limit: avg 1/sec burst 5 LOG level info prefix `Inbound '
DROP       tcp  --  anywhere             anywhere            tcp flags:FIN,SYN,RST,ACK/SYN
LOG        tcp  --  anywhere             anywhere            tcp flags:FIN,SYN,RST,ACK/RST limit: avg 1/sec burst 5 LOG level info prefix `Inbound '
DROP       tcp  --  anywhere             anywhere            tcp flags:FIN,SYN,RST,ACK/RST
LOG        icmp --  anywhere             anywhere            icmp echo-request limit: avg 1/sec burst 5 LOG level info prefix `Inbound '
DROP       icmp --  anywhere             anywhere            icmp echo-request
LOG        all  --  anywhere             anywhere            limit: avg 5/sec burst 5 LOG level info prefix `Inbound '
DROP       all  --  anywhere             anywhere

Chain LSO (0 references)
target     prot opt source               destination
LOG_FILTER  all  --  anywhere             anywhere
LOG        all  --  anywhere             anywhere            limit: avg 5/sec burst 5 LOG level info prefix `Outbound '
REJECT     all  --  anywhere             anywhere            reject-with icmp-port-unreachable

Chain OUTBOUND (1 references)
target     prot opt source               destination
ACCEPT     icmp --  anywhere             anywhere
ACCEPT     tcp  --  anywhere             anywhere            state RELATED,ESTABLISHED
ACCEPT     udp  --  anywhere             anywhere            state RELATED,ESTABLISHED
ACCEPT     all  --  anywhere             anywhere

grazie.

Modificato da - Yves in Data 30/03/2007 02:30:40

Trunks
Moderatore

2016 Messaggi

Inserito il - 31/03/2007 : 19:01:36

Butta giù il firewall e prova :P Ma usi firestarter?

Yves
Moderatore

Città: Buenos Aires

6097 Messaggi

Inserito il - 31/03/2007 : 19:22:25

Si, uso Firestarte con una modifica la file di configurazione che mi aveva suggerito Gimli tempo fa, cioè commentare queste linee:

# if [ "$BCAST" != "" ]; then
# $IPT -A INPUT -d $BCAST -j DROP
# fi

in /etc/firestarter/firewall, questo è il file completo, ma bon, di punto in bianco

?

Comunque, da quando ho disattivato eth0 va perfetto.

Ciao.

Discussione

Forum Bloccato

Versione Stampabile

Aggiungi Segnalibro

Vai a:

NoTrace Security Forum

Pagina generata in 0,25 secondi.

TargatoNA | SuperDeeJay | Snitz Forums 2000