[MDK9.2] ping local

par **chaba** » 23 Déc 2003 12:58

Bonjour, Je viens d'installer une Mandrake 9.2 et j'ai quelques soucis. cette Mdk tourne sur mon serveur et connecte a internet. Le partage de connection marche et le client et un windows XP. Le probleme, c'est que je ne peux pas pinger depuis mon client, mon serveur avec une ip 192.168.1.2. Le client est en DHCP. Par contre le ping vers une adresse internet marche bien. J'ai arrete les services du firewall, autorise les echos ICMP, rien de mieux. Je pense qu'il y a un probleme de routage mais ??? Si quelqu'un a une idee. Autre chose, dans mon fichier /etc/resolv.conf, je retrouve une ligne: nameserver 212.27.39.1 #ppp entry temp qui ne correspond a rien puisque mes serveurs de DNS sont 217.27.32.176 et 217.27.32.177 Elle revient sans arret meme si je l'enleve. J'ai tout reconfiguré, connection internet, partage, dhcp mais toujours pareil. Merci ..

par **tomtom** » 23 Déc 2003 13:20

Il n'y a pas de problème de routage puisque la connexion marche ! Je pense que le icmp doit etre bloqué au niveau reseau par la mandrake, à verifier... Pour ce qui est du serveur dns, il est fourni par le distant lors de la fourniture de l'ip par dhcp. C'ets lors de la configuration du tunnel ppp que cela se met. Si ton fai te fournit, ne le touches pas.. Ca ne devrait pas poser de probleme... t.

par **chaba** » 23 Déc 2003 13:41

Merci, pour ce qui est des echos iCMP, je les ai bloques a oui via le centre de controle (onglet options reseaux). Ca na rien fait. En fait je souhaite prendre la main depuis mon xp par une console graphique puisque je n´ai pas d´ecran sur mon serveur. En telnet, rlogin et vnc la connection ewst impossible. J´en avais fais la conclusion que le probleme pouvait venir de la puisque je n´arrive pas a pinger mon serveur.

par **tomtom** » 23 Déc 2003 13:45

Que te donnes iptables -L -v ? t.

par **chaba** » 23 Déc 2003 13:56

pas mal de lignes... Mais je ne ais pas ce qu´il faut que je cherche ? Merci

par **tomtom** » 23 Déc 2003 13:59

S'il y a pas mal de lignes, le firewall n'est pas desactivé ! ALors donne moi toutes les lignes avec input stp ! t.

par **chaba** » 23 Déc 2003 14:02

Voila Chain INPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 30 2740 ACCEPT all -- lo any anywhere anywhere 0 0 DROP !icmp -- any any anywhere anywhere state INVALID 2531 712K ppp_in all -- ppp+ any anywhere anywhere 222 29298 eth0_in all -- eth0 any anywhere anywhere 0 0 eth1_in all -- eth1 any anywhere anywhere 0 0 common all -- any any anywhere anywhere 0 0 LOG all -- any any anywhere anywhere LOG level info prefix `Shorewall:INPUT:REJECT:' 0 0 reject all -- any any anywhere anywhere Je peux te mettre le reste si ca t´interesse aussi

par **tomtom** » 23 Déc 2003 14:05

oui, mets tout ! t.

par **chaba** » 23 Déc 2003 14:05

le service iptables est bien arrete. est-ce que le firewall marche dans ce cas la ?

par **chaba** » 23 Déc 2003 14:06

Chain INPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 30 2740 ACCEPT all -- lo any anywhere anywhere 0 0 DROP !icmp -- any any anywhere anywhere state INVALID 2531 712K ppp_in all -- ppp+ any anywhere anywhere 222 29298 eth0_in all -- eth0 any anywhere anywhere 0 0 eth1_in all -- eth1 any anywhere anywhere 0 0 common all -- any any anywhere anywhere 0 0 LOG all -- any any anywhere anywhere LOG level info prefix `Shorewall:INPUT:REJECT:' 0 0 reject all -- any any anywhere anywhere Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 DROP !icmp -- any any anywhere anywhere state INVALID 4946 2284K ppp_fwd all -- ppp+ any anywhere anywhere 4692 637K eth0_fwd all -- eth0 any anywhere anywhere 0 0 eth1_fwd all -- eth1 any anywhere anywhere 0 0 common all -- any any anywhere anywhere 0 0 LOG all -- any any anywhere anywhere LOG level info prefix `Shorewall:FORWARD:REJECT:' 0 0 reject all -- any any anywhere anywhere Chain OUTPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 30 2740 ACCEPT all -- any lo anywhere anywhere 0 0 DROP !icmp -- any any anywhere anywhere state INVALID 1834 272K fw2net all -- any ppp+ anywhere anywhere 36 3524 fw2masq all -- any eth0 anywhere anywhere 0 0 all2all all -- any eth1 anywhere anywhere 0 0 common all -- any any anywhere anywhere 0 0 LOG all -- any any anywhere anywhere LOG level info prefix `Shorewall:OUTPUT:REJECT:' 0 0 reject all -- any any anywhere anywhere Chain all2all (6 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 0 0 newnotsyn tcp -- any any anywhere anywhere state NEW tcp flags:!SYN,RST,ACK/SYN 236 28482 common all -- any any anywhere anywhere 34 2532 LOG all -- any any anywhere anywhere LOG level info prefix `Shorewall:all2all:REJECT:' 34 2532 reject all -- any any anywhere anywhere Chain common (5 references) pkts bytes target prot opt in out source destination 63 5104 icmpdef icmp -- any any anywhere anywhere 6 2576 reject udp -- any any anywhere anywhere udp dpt:135 247 29460 reject udp -- any any anywhere anywhere udp dpts:netbios-ns:netbios-ssn 0 0 reject udp -- any any anywhere anywhere udp dpt:microsoft-ds 0 0 reject tcp -- any any anywhere anywhere tcp dpt:netbios-ssn 6 288 reject tcp -- any any anywhere anywhere tcp dpt:microsoft-ds 180 8664 reject tcp -- any any anywhere anywhere tcp dpt:135 0 0 DROP udp -- any any anywhere anywhere udp dpt:1900 0 0 DROP all -- any any anywhere 255.255.255.255 0 0 DROP all -- any any anywhere BASE-ADDRESS.MCAST.NET/4 0 0 reject tcp -- any any anywhere anywhere tcp dpt:auth 0 0 DROP udp -- any any anywhere anywhere udp spt:domain state NEW 0 0 DROP all -- any any anywhere 192.168.1.255 0 0 DROP all -- any any anywhere 192.168.60.255 Chain dynamic (6 references) pkts bytes target prot opt in out source destination Chain eth0_fwd (1 references) pkts bytes target prot opt in out source destination 4692 637K dynamic all -- any any anywhere anywhere 4692 637K masq2net all -- any ppp+ anywhere anywhere 0 0 all2all all -- any eth1 anywhere anywhere Chain eth0_in (1 references) pkts bytes target prot opt in out source destination 222 29298 dynamic all -- any any anywhere anywhere 222 29298 masq2fw all -- any any anywhere anywhere Chain eth1_fwd (1 references) pkts bytes target prot opt in out source destination 0 0 dynamic all -- any any anywhere anywhere 0 0 loc2net all -- any ppp+ anywhere anywhere 0 0 all2all all -- any eth0 anywhere anywhere Chain eth1_in (1 references) pkts bytes target prot opt in out source destination 0 0 dynamic all -- any any anywhere anywhere 0 0 all2all all -- any any anywhere anywhere Chain fw2masq (1 references) pkts bytes target prot opt in out source destination 14 1712 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 0 0 newnotsyn tcp -- any any anywhere anywhere state NEW tcp flags:!SYN,RST,ACK/SYN 0 0 ACCEPT tcp -- any any anywhere anywhere multiport dports ipp,printer,netbios-ns,netbios-dgm,netbios-ssn state NEW 0 0 ACCEPT udp -- any any anywhere anywhere multiport dports ipp,printer,netbios-ns,netbios-dgm,netbios-ssn state NEW 22 1812 all2all all -- any any anywhere anywhere Chain fw2net (1 references) pkts bytes target prot opt in out source destination 1566 256K ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 0 0 newnotsyn tcp -- any any anywhere anywhere state NEW tcp flags:!SYN,RST,ACK/SYN 268 16244 ACCEPT all -- any any anywhere anywhere Chain icmpdef (1 references) pkts bytes target prot opt in out source destination Chain loc2net (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 0 0 newnotsyn tcp -- any any anywhere anywhere state NEW tcp flags:!SYN,RST,ACK/SYN 0 0 ACCEPT all -- any any anywhere anywhere Chain masq2fw (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 0 0 newnotsyn tcp -- any any anywhere anywhere state NEW tcp flags:!SYN,RST,ACK/SYN 0 0 ACCEPT tcp -- any any anywhere anywhere multiport dports domain,bootps,http,https,ipp,imap,pop3,smtp,nntp,ntp state NEW 8 2628 ACCEPT udp -- any any anywhere anywhere multiport dports domain,bootps,http,https,ipp,imap,pop3,smtp,nntp,ntp state NEW 214 26670 all2all all -- any any anywhere anywhere Chain masq2net (1 references) pkts bytes target prot opt in out source destination 3955 601K ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 0 0 newnotsyn tcp -- any any anywhere anywhere state NEW tcp flags:!SYN,RST,ACK/SYN 737 35569 ACCEPT all -- any any anywhere anywhere Chain net2all (3 references) pkts bytes target prot opt in out source destination 6445 2939K ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 138 5548 newnotsyn tcp -- any any anywhere anywhere state NEW tcp flags:!SYN,RST,ACK/SYN 894 51036 common all -- any any anywhere anywhere 657 35998 LOG all -- any any anywhere anywhere LOG level info prefix `Shorewall:net2all:DROP:' 657 35998 DROP all -- any any anywhere anywhere Chain newnotsyn (7 references) pkts bytes target prot opt in out source destination 138 5548 LOG all -- any any anywhere anywhere LOG level info prefix `Shorewall:newnotsyn:DROP:' 138 5548 DROP all -- any any anywhere anywhere Chain ppp_fwd (1 references) pkts bytes target prot opt in out source destination 4946 2284K dynamic all -- any any anywhere anywhere 4946 2284K net2all all -- any eth0 anywhere anywhere 0 0 net2all all -- any eth1 anywhere anywhere Chain ppp_in (1 references) pkts bytes target prot opt in out source destination 2531 712K dynamic all -- any any anywhere anywhere 2531 712K net2all all -- any any anywhere anywhere Chain reject (11 references) pkts bytes target prot opt in out source destination 186 8952 REJECT tcp -- any any anywhere anywhere reject-with tcp-reset 253 32036 REJECT udp -- any any anywhere anywhere reject-with icmp-port-unreachable 34 2532 REJECT icmp -- any any anywhere anywhere reject-with icmp-host-unreachable 0 0 REJECT all -- any any anywhere anywhere reject-with icmp-host-prohibited Chain shorewall (0 references) pkts bytes target prot opt in out source destination

par **tomtom** » 23 Déc 2003 14:18

Ha oui la je peux te dire que ton firewlal est actif <IMG SRC="images/smiles/icon_lol.gif"> Et puis avec quoi tu as fait ton partage de connexion ??? c'est dement le nombre de regles... <IMG SRC="images/smiles/icon_rolleyes.gif"> Bon, pour te debloquer temporairement : tapes dans une ligne de commande en root : iptables -I INPUT -i eth0 -j ACCEPT (si eth0 est bien la carte connectée au lan, sinon adaptes). Mais au prochain demarrage, ca ne marchera plus, il faudrait savoir avec quoi est fait ton script de partage de connexion etc... pour le modifier definitivement. t.

par **chaba** » 23 Déc 2003 14:26

le partage de connection a ete gere en automatique par les utilitaires de la Mandrake. C´est ok pour le ping NICKEL. MERCI Comment puis-je faire pour desactiver completemet le firewall et repartir de zero ? Je n´arrive toujours pas a acceder par un telnet ou vnc...

par **marlone41** » 23 Déc 2003 14:31

salut, tous d'abord va dans etc/shorewall et dis moi ce qu'il y a dans les files shorewall ,tcrules ,rules et rfc1918et je pourrais t'en dire un peu plus sinon dans tes paramètres réseau xp mets une adresse ip fixe du meme ordre que ton serveur genre 192.168.1.1 pour ta passerelle mandrake ip 192.168.1.2 pour xp masque est 255.255.255.0 passerelle 192.168.1.1 serveur dns192.168.1.1 mais j'attends que tu m'envoye le contenu des fichiers voila BIG <IMG SRC="images/smiles/icon_up.gif">

par **marlone41** » 23 Déc 2003 14:36

en reponse à Comment puis-je faire pour desactiver completemet le firewall et repartir de zero ? -------------------------------------- ce n'est pas une très bonne idée et le désactiver va te faire galérer encore plus par contre comme je le disais envoie moi tes fichiers de conf de shorewall exemple: tcrules ,rules et rfc1918et je pourrais t'en dire un peu plus A+

par **chaba** » 23 Déc 2003 14:41

Salut, Pour l´ip fixe, deja essaye ca n´a rien change. Voici les contenus des fichiers SHOREWALL n´existe pas mais il y a un SHOREWALL.conf RULES: # # Shorewall version 1.4 - Rules File # # /etc/shorewall/rules # # Rules in this file govern connection establishment. Requests and # responses are automatically allowed using connection tracking. # # In most places where an IP address or subnet is allowed, you # can preceed the address/subnet with "!" (e.g., !192.168.1.0/24) to # indicate that the rule matches all addresses except the address/subnet # given. Notice that no white space is permitted between "!" and the # address/subnet. # # Columns are: # # # ACTION ACCEPT, DROP, REJECT, DNAT, DNAT-, REDIRECT, CONTINUE # or LOG. # # ACCEPT -- allow the connection request # DROP -- ignore the request # REJECT -- disallow the request and return an # icmp-unreachable or an RST packet. # DNAT -- Forward the request to another # system (and optionally another # port). # DNAT- -- Advanced users only. # Like DNAT but only generates the # DNAT iptables rule and not # the companion ACCEPT rule. # REDIRECT -- Redirect the request to a local # port on the firewall. # REDIRECT- # -- Advanced users only. # Like REDIRET but only generates the # REDIRECT iptables rule and not # the companion ACCEPT rule. # CONTINUE -- (For experts only). Do not process # any of the following rules for this # (source zone,destination zone). If # The source and/or destination IP # address falls into a zone defined # later in /etc/shorewall/zones, this # connection request will be passed # to the rules defined for that # (those) zone(s). # LOG -- Simply log the packet and continue. # # May optionally be followed by ":" and a syslog log # level (e.g, REJECT:info). This causes the packet to be # logged at the specified level. # # You may also specify ULOG (must be in upper case) as a # log level.This will log to the ULOG target for routing # to a separate log through use of ulogd # (http://www.gnumonks.org/projects/ulogd). # # SOURCE Source hosts to which the rule applies. May be a zone # defined in /etc/shorewall/zones, $FW to indicate the # firewall itself, or "all" If the ACTION is DNAT or # REDIRECT, sub-zones of the specified zone may be # excluded from the rule by following the zone name with # "!' and a comma-separated list of sub-zone names. # # Except when "all" is specified, clients may be further # restricted to a list of subnets and/or hosts by # appending ":" and a comma-separated list of subnets # and/or hosts. Hosts may be specified by IP or MAC # address; mac addresses must begin with "~" and must use # "-" as a separator. # # dmz:192.168.2.2 Host 192.168.2.2 in the DMZ # # net:155.186.235.0/24 Subnet 155.186.235.0/24 on the # Internet # # loc:192.168.1.1,192.168.1.2 # Hosts 192.168.1.1 and # 192.168.1.2 in the local zone. # loc:~00-A0-C9-15-39-78 Host in the local zone with # MAC address 00:A0:C9:15:39:78. # # Alternatively, clients may be specified by interface # by appending ":" to the zone name followed by the # interface name. For example, loc:eth1 specifies a # client that communicates with the firewall system # through eth1. This may be optionally followed by # another colon (":") and an IP/MAC/subnet address # as described above (e.g., loc:eth1:192.168.1.5). # # DEST Location of Server. May be a zone defined in # /etc/shorewall/zones, $FW to indicate the firewall # itself or "all" # # Except when "all" is specified, the server may be # further restricted to a particular subnet, host or # interface by appending ":" and the subnet, host or # interface. See above. # # Restrictions: # # 1. MAC addresses are not allowed. # 2. In DNAT rules, only IP addresses are # allowed; no FQDNs or subnet addresses # are permitted. # 3. You may not specify both an interface and # an address. # # Unlike in the SOURCE column, you may specify a range of # up to 256 IP addresses using the syntax # <first ip>-<last ip>. When the ACTION is DNAT or DNAT-, # the connections will be assigned to addresses in the # range in a round-robin fashion. # # The port that the server is listening on may be # included and separated from the server's IP address by # ":". If omitted, the firewall will not modifiy the # destination port. A destination port may only be # included if the ACTION is DNAT or REDIRECT. # # Example: loc:192.168.1.3:3128 specifies a local # server at IP address 192.168.1.3 and listening on port # 3128. The port number MUST be specified as an integer # and not as a name from /etc/services. # # if the ACTION is REDIRECT, this column needs only to # contain the port number on the firewall that the # request should be redirected to. # # PROTO Protocol - Must be "tcp", "udp", "icmp", a number, or # "all". # # DEST PORT(S) Destination Ports. A comma-separated list of Port # names (from /etc/services), port numbers or port # ranges; if the protocol is "icmp", this column is # interpreted as the destination icmp-type(s). # # A port range is expressed as <low port>:<high port>. # # This column is ignored if PROTOCOL = all but must be # entered if any of the following ields are supplied. # In that case, it is suggested that this field contain # "-" # # If your kernel contains multi-port match support, then # only a single Netfilter rule will be generated if in # this list and the CLIENT PORT(S) list below: # 1. There are 15 or less ports listed. # 2. No port ranges are included. # Otherwise, a separate rule will be generated for each # port. # # CLIENT PORT(S) (Optional) Port(s) used by the client. If omitted, # any source port is acceptable. Specified as a comma- # separated list of port names, port numbers or port # ranges. # # If you don't want to restrict client ports but need to # specify an ADDRESS in the next column, then place "-" # in this column. # # If your kernel contains multi-port match support, then # only a single Netfilter rule will be generated if in # this list and the DEST PORT(S) list above: # 1. There are 15 or less ports listed. # 2. No port ranges are included. # Otherwise, a separate rule will be generated for each # port. # # ORIGINAL DEST (0ptional -- only allowed if ACTION is DNAT[-] or # REDIRECT[-]) If included and different from the IP # address given in the SERVER column, this is an address # on some interface on the firewall and connections to # that address will be forwarded to the IP and port # specified in the DEST column. # # A comma-separated list of addresses may also be used. # This is usually most useful with the REDIRECT target # where you want to redirect traffic destined for # particular set of hosts. # # Finally, if the list of addresses begins with "!" then # the rule will be followed only if the original # destination address in the connection request does not # match any of the addresses listed. # # The address (list) may optionally be followed by # a colon (":") and a second IP address. This causes # Shorewall to use the second IP address as the source # address in forwarded packets. See the Shorewall # documentation for restrictions concerning this feature. # If no source IP address is given, the original source # address is not altered. # # Example: Accept SMTP requests from the DMZ to the internet # # #ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL # # PORT PORT(S) DEST # ACCEPT dmz net tcp smtp # # Example: Forward all ssh and http connection requests from the internet # to local system 192.168.1.3 # # #ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL # # PORT PORT(S) DEST # DNAT net loc:192.168.1.3 tcp ssh,http # # Example: Redirect all locally-originating www connection requests to # port 3128 on the firewall (Squid running on the firewall # system) except when the destination address is 192.168.2.2 # # #ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL # # PORT PORT(S) DEST # REDIRECT loc 3128 tcp www - !192.168.2.2 # # Example: All http requests from the internet to address # 130.252.100.69 are to be forwarded to 192.168.1.3 # # #ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL # # PORT PORT(S) DEST # DNAT net loc:192.168.1.3 tcp 80 - 130.252.100.69 # # Example: You want to accept SSH connections to your firewall only # from internet IP addresses 130.252.100.69 and 130.252.100.70 # # #ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL # # PORT PORT(S) DEST # ACCEPT net:130.252.100.69,130.252.100.70 # tcp 22 ############################################################################## #ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL # PORT PORT(S) DEST ACCEPT masq fw tcp domain,bootps,http,https,631,imap,pop3,smtp,nntp,ntp - ACCEPT masq fw udp domain,bootps,http,https,631,imap,pop3,smtp,nntp,ntp - ACCEPT fw masq tcp 631,515,137,138,139 - ACCEPT fw masq udp 631,515,137,138,139 - #LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE RFC1918: # # Shorewall 1.4 -- RFC1918 File # # /etc/shorewall/rfc1918 # # Lists the subnetworks that are blocked by the 'norfc1918' interface option. # # The default list includes those IP addresses listed in RFC 1918, those listed # as 'reserved' by the IANA, the DHCP Autoconfig class B, and the class C # reserved for use in documentation and examples. # # Columns are: # # SUBNET The subnet (host addresses also allowed) # TARGET Where to send packets to/from this subnet # RETURN - let the packet be processed normally # DROP - silently drop the packet # logdrop - log then drop # ############################################################################### #SUBNET TARGET 255.255.255.255 RETURN # We need to allow limited broadcast 169.254.0.0/16 DROP # DHCP autoconfig 172.16.0.0/12 logdrop # RFC 1918 192.0.2.0/24 logdrop # Example addresses 192.168.0.0/16 logdrop # RFC 1918 # # The following are generated with the help of the Python program found at: # # http://www.shorewall.net/pub/shorewall/ ... _reserved/ # # The program was contributed by Andy Wiggin # 0.0.0.0/7 logdrop # Reserved 2.0.0.0/8 logdrop # Reserved 5.0.0.0/8 logdrop # Reserved 7.0.0.0/8 logdrop # Reserved 10.0.0.0/8 logdrop # Reserved 23.0.0.0/8 logdrop # Reserved 27.0.0.0/8 logdrop # Reserved 31.0.0.0/8 logdrop # Reserved 36.0.0.0/7 logdrop # Reserved 39.0.0.0/8 logdrop # Reserved 41.0.0.0/8 logdrop # Reserved 42.0.0.0/8 logdrop # Reserved 49.0.0.0/8 logdrop # JTC - Returned to IANA Mar 98 50.0.0.0/8 logdrop # JTC - Returned to IANA Mar 98 58.0.0.0/7 logdrop # Reserved 60.0.0.0/8 logdrop # Reserved 70.0.0.0/7 logdrop # Reserved 72.0.0.0/5 logdrop # Reserved 83.0.0.0/8 logdrop # Reserved 84.0.0.0/6 logdrop # Reserved 88.0.0.0/5 logdrop # Reserved 96.0.0.0/3 logdrop # Reserved 127.0.0.0/8 logdrop # Loopback 197.0.0.0/8 logdrop # Reserved 198.18.0.0/15 logdrop # Reserved 201.0.0.0/8 logdrop # Reserved - Central & South America 240.0.0.0/4 logdrop # Reserved # # End of generated entries # #LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE

[MDK9.2] ping local

Qui est en ligne ?