18
[SOLVED] I have issues with asymmetric routing (infosec.pub)
submitted 2 years ago* (last edited 2 years ago) by genuineparts@infosec.pub to c/selfhosted@lemmy.world
9 comments fedilink hide all child comments

One is the route from my Proxmox (vimes) server to my NAS, (colon) going via my Router (pessimal) (as it should be) Second one is my NAS going to Proxmox directly. However I didn't set any static routes and this is causing issues as the Router Firewalls those Asymmetric Connections. This is happening since I upgraded Proxmox... I am not the best at network stuff, so if someone has some pointers I'd be most grateful.

I'm a moron and had a wrong subnet mask.

top 9 comments
sorted by: hot top new old
[-] towerful@programming.dev 10 points 2 years ago

If they are on the same subnet, why are they going via the router? Surely the NIC/OS will know it's a local address within its subnet, and will send it directly; as opposed to not knowing where to send the packet, so letting the router deal with it.

I'm assuming you are using a standard 24 bit subnet mask, because you haven't provided anything that indicates otherwise and the issue you present would be indicative of a local link being used - this possible

[-] genuineparts@infosec.pub 2 points 2 years ago* (last edited 2 years ago)

You got it perfectly right! It was the subnetting... Thanks!

[-] towerful@programming.dev 2 points 2 years ago

That whole "shortest path" has caught me out before (tho in a different way)!
And firewall logs of "state violation" aren't always helpful when that's pretty much the default log message

[-] genuineparts@infosec.pub 1 points 2 years ago

Absolutely. But I at least realized it had to be asymmetric routing... because if I didn't I would have been even more puzzled. Because even setting firewall rules wouldn't fix it then. I'm glad there are people here that understand that sometimes we brain fart and they give you a great pointer! Like the second I saw netmask I knew what was wrong and facepalmed.

[-] theit8514@lemmy.world 1 points 2 years ago

You'll probably have to provide the netmask info for us to review. If you're using /24 then those all reside in the same network so I would expect them to be in the same broadcast domain.

If you have mismatched netmasks that could be trying to route traffic to the gateway which then reflects back. Ensure your devices have the same network, netmask and broadcast ip (e.g. 192.168.1.0/24 will have broadcast ip of 192.168.1.255)

[-] mhzawadi@lemmy.horwood.cloud 4 points 2 years ago

this, most likely a netmask mismatch.

Make sure all 3 devices have a /24 (255.255.255.0) network mask

[-] genuineparts@infosec.pub 1 points 2 years ago

That's it... Thanks. I'm a moron.

[-] mhzawadi@lemmy.horwood.cloud 1 points 2 years ago

your not a moron, networking is a learning opportunity. just need a way to debug your issue, thats how I go about all tech issues.

Most of what I know is on the job learning, I dont have any certificates in any of what I do.

[-] genuineparts@infosec.pub 1 points 2 years ago

That's it... Thanks. I'm a moron.

this post was submitted on 27 May 2024
18 points (95.0% liked)

Selfhosted

62781 readers
1050 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.

  8. AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS
ruud@lemmy.world
Loki@lemmy.world
CannaVet@lemmy.world
devve@lemmy.world
ayyy@sh.itjust.works
curbstickle@anarchist.nexus
curbstickle_lw@lemmy.world