troubleshooting Question

Working with iptables (CentOS 5.2) .... "allowing ICMP" and "opening up SSH" ...

Avatar of pugdog_fan
pugdog_fan asked on
Linux Networking
2 Comments1 Solution1343 ViewsLast Modified:
Hi:

I have PBX in a Flash 1.4 (runs on CentOS 5.2) ...

The PC this PBX runs on has two NIC cards.  

One NIC is on a 172.x.x.x subnet (NAT) with no access to the Internet from the LAN.
One NIC has a LIVE 'static' IP address which reaches right to the ISP with no router/firewall in front of it.

I am not able to 'ping' the LIVE 'static' IP address the 2nd NIC is assigned.

I've setup PBX in a Flash 1.4 in the past (in a few other configurations), and I've never really been able to get ICMP to work.

I would like to be able to ping the LIVE static IP address from another host on the Internet.  

NOTE:  ICMP replies 'work' if you try to ping the 172.x.x.x IP address from another 172.x.x.x host, but not the LIVE static IP address assigned to the 2nd NIC.

I am thinking this is not a PBX in a Flash 1.4 concern, but rather an iptables configuration.

How (or what) do I configure inside CentOS to 'allow' incoming ICMP to reply?

-------------------------

Next, if use PuTTY from another PC on the 172.x.x.x subnet, I can SSH into the PBX in a Flash 1.4 PBX.  

If I am on another 'Internet' PC, I cannot SSH into the LIVE static IP address of the PBX in a Flash 1.4 PBX.

Again, I think this is quite possibly a CentOS iptables/firewall boggle.  

How/what can I do to be able to SSH into the PBX in a Flash 1.4 PC from another PC on the Internet?

Thanks in advance for your time and tips.
ASKER CERTIFIED SOLUTION
Blaz

Our community of experts have been thoroughly vetted for their expertise and industry experience.

Join our community to see this answer!
Unlock 1 Answer and 2 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 2 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros