1

I'm trying to learn how it all goes in networking. I have a working network done by some specialists and I bought new Mikrotik router and done a new LAN in which I want to do some trial&error. So rewrited many settings from the working LAN and it seems to work but:

I can ping other computers in local network, but I can't traceroute them, I can't see them in the network I can't access local web page on one of computer running os X server. It seems like some firewall filter rules blocking it, here's screen

enter image description here

I don't really see into it and I can't see the difference between #1 and #2 record or the last three ones.

There's screen of the other network's router filter rules, where everything works fine:

enter image description here

Here I also don't see the difference between #0 and #1 records #2 and #3 and also the #8 seems to drop things that matches the other chains...

If my assumption that it's filter rules problem is wrong please let me know where the problem could be, I have no Nat rules set apart from default masquerading.

Thank's for any help.

  • Why not call them again and have them restore it? We don't know what the previous configurations were like. – Larssend Jul 11 '15 at 10:46
  • Well, I don't have problem with it, I just wanna learn something so I just bought new router and server and I try&fail alongside that working network. – Marek Židek Jul 11 '15 at 11:02
0

The reason traceroute won't work on local network is, because it all goes via 2. layer, not 3. network one, so there are no hops, ping however will work as the machine will answer.

The firewall rules on the other network router are port specific, so they will work different as your setting. Your firewall seems to accept only established connections and I guess the rule #3 is dropping everything that tries to go inside your network except of established connection. Everything on local network should work just fine.

Therefore, I would try to troubleshoot problems with OSX server on server level not network level, that comes if you can ping it's interface. You have probably not setup web server on it properly.

  • Thanks, I have my web allowed and I have set everything by manual, I don't think I screwed up anything there because it was very user-friendly and easy. I don't have any public IP I just wanna try if I can see a web page: file:///Library/Server/Web/Data/Sites/www.example.com/ located at my server from another computer. I would add that the other PC is win7 and I cannot see the server or other devices in folder MyNetworkPlaces. I would also want to know about the url, the default os x web page is at pepi.local, but my custom web is at that long url: file:///Lib... how to make it example.local? – Marek Židek Jul 11 '15 at 10:44
  • Don't know if you have setup local DNS, but if not, you have to access the web via ip adress of the server, have you tried that? – tikend Jul 11 '15 at 10:46
  • Thanks :) (no local dns) I can access to the server via it's IP, but I found out I cannot ping it :D I can ping only from the sever to the other computer... this is just confusing, another wierd thing is that in the other network(professionally made) I can traceroute the other computers even if there are 0 hops. Sorry for bothering, these are just things that you cannot find in school scripts or manuals... – Marek Židek Jul 11 '15 at 11:00
  • If you cannot ping the server, most likely it's local firewall is stopping it. This is normal as to stop DDoS attacks. The reason traceroute works on pro configuration is probably that they have separated local network to more subnetworks, so router has to route the packets and therefore there are hops. – tikend Jul 11 '15 at 11:02
  • 1
    @tikend: Not interested. If I don't understand you here, I won't understand you there. The point being, there's no difference between traceroute and ping at Layer 2. They're both Layer 3 entities. – Larssend Jul 11 '15 at 16:03

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.