[vmchecker-dev] Sistem de test

[Razvan Deaconescu]

On Sat, 2008-07-12 at 03:02 -0700, Szekeres Adriana wrote:
> 
> Nu cred ca e stins calcul. Ping merge, telnet merge, dar pe portul 22,
> nu 50022, si nu stie user:student pass:student.

Ba e stins :-)

Adresa adevarata este 10.38.249.255 - adresa privata.

Am facut un DNAT care mapeaza 141.85.37.1:50022 peste 10.38.249.255:22

---
root at csr:~# iptables -t nat -L PREROUTING -n
Chain PREROUTING (policy ACCEPT)
<snip>
DNAT       tcp  --  0.0.0.0/0            141.85.37.1         tcp
dpt:50022 to:10.38.249.255:22 
DNAT       tcp  --  0.0.0.0/0            141.85.37.1         tcp
dpt:50902 to:10.38.249.255:902 
---

Portul 22 al 141.85.37.1 este asociat chiar sistemului cu adresa IP
141.85.37.1. De-asta si merge telnet sau chiar SSH. Mai incolo e
problema.

---
razvan at valhalla:~$ host csr.cs.pub.ro
csr.cs.pub.ro is an alias for csrouter.cs.pub.ro.
csrouter.cs.pub.ro has address 141.85.37.1
razvan at valhalla:~$ ssh root at csr.cs.pub.ro
<snip>
root at csr:~# ping 10.38.249.255
PING 10.38.249.255 (10.38.249.255) 56(84) bytes of data.
>From 10.38.0.1 icmp_seq=2 Destination Host Unreachable
>From 10.38.0.1 icmp_seq=3 Destination Host Unreachable
>From 10.38.0.1 icmp_seq=4 Destination Host Unreachable
<snip>
root at csr:~# nmap -sP 10.38.249.255/32

Starting Nmap 4.20 ( http://insecure.org ) at 2008-07-12 13:02 EEST
Note: Host seems down. If it is really up, but blocking our ping probes,
try -P0
Nmap finished: 1 IP address (0 hosts up) scanned in 0.222 seconds
---

Razvan