The following setup:
- Two linux hosts s=server, c=client
- One switch which is fully VLAN capable
- Tagged port setting and tagging enabled on the server/switch side
- Untagged everything on the client side
- One IP network 192.168.178.0/24
- This, no layer 3/ routing is used
- Firewalls are disabled on both ends
- Routes look good on the server
- Arp Ping the server from the client
- Ping from the server outwards s --> *
- Reach the Internet via a router in the client network
I cannot (my problem):
- Ping or connect to any service from c --> s
What am I missing, shouldn't this work?
I fixed it, although the firewall (shorewall in this case) was stopped, I found the following iptables rules which seemed suspicious to me:
$ iptables --list-rules -P INPUT DROP -P FORWARD DROP -P OUTPUT DROP
Changed them to
ACCEPT, makes it work.
Now I try to find out where those rules came from.
I could not find out where these rules were coming from. I ended up doing
iptabled --flush and
iptables-save and now the rules seems to be reset also across reboots.