Debian Configuration :: Forward Traffic From Public IP To Another Public IP?
Mar 3, 2010
How can I forward all traffic from a public IP to another public IP. Let's say I have a first debian box named box1 with eth0 = 1.1.1.1 and eth0:1 = 1.1.1.2 and I want to forward all traffic from 1.1.1.2 to "box2" located somewhere else over the internet and having for eth0 2.2.2.2 Both 1.1.1.0/24 and 3.3.3.0/24 are public IP ranges.
I installed Chromium Browser and made it default. The version which is available through squeeze and wheezy main is a dinosaur, and as such I cannot install any Chrome addons. I tried ubuntu or launchpad ppa for Chromium-Daily. I added [URL] maverick main to my Third party Repositories. Its not working.
The terminal returns an error: W: GPG error: [URL] maverick Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 5A9BF3BB4E5E17B5
I'm trying to write a p2p file sharing program using python's built-in libraries. Everything is going well. The only thing is that i'd like to be able to use openssl public and private keys so only a host with the public key could access/decrypt the filesharing. I've gotten these libraries (httplib, basehttpserver, ssl, os) to work using just a pem file containing both the public and private keys but no success with them seperately. Can someone point me in the right direction or offer an alternative? PS, the goal of the project is to create an anonymous, decentralized, secure file sharing program. I want to be able to upload this to sourceforge so everyone can use it, if that's any incentive
I need to be able to do the following: Physical Router located at 192.168.40.1 On Ubuntu 10.04 Lucid machine:
eth0 with static ip 192.168.40.2 eth1 with static ip 192.168.40.3 eth2 with static ip 192.168.40.4
Associate a virtual address to eth1 with an entirely different network address such as 192.168.50.1 Do the same (virtual address) for eth2 -- e.g. 192.168.60.1 In the application:
register phone number A at 192.168.40.1 (The application will automatically use eth0 for this) register phone number B at 192.168.50.1 register phone number C at 192.168.60.1
Somehow forward all traffic (including the register request) sent to 192.168.50.1 to 192.168.40.1 as if the register had been made directly to 192.168.40.1. In other words, the app "sends" registration and traffic to 192.168.50.1 but then Ubuntu forwards it to 192.168.40.1 (but the app does not know that). Similarly, forward all traffic sent to 192.168.60.1 to the router at 192.168.40.1.
Do the same for the reverse, forward all traffic that the router sends back to 192.168.40.3 (eth1) to 192.168.50.1 (within the Ubuntu machine) so that the app knows it is for phone B. Similarly forward all traffic that the router sends back to 192.168.40.4 (eth2) to 192.168.60.1 so that the app knows it is for phone C. Thus, the application believes that it is registering at 3 completely separate routers on 3 completely separate networks via 3 separate network interfaces but in fact is really registering all three to the same router (but does not know that). Similarly, the router believes that it is receiving 3 separate registrations because it receives each registration request and traffic from 3 separate interfaces and thus 3 separate mac addresses (i.e., of eth0, eth1, and eth2). Traffic sent to and from the router for each of the 3 phone numbers (via eth0, eth1, and eth2) are not mixed because the translation happens in both directions.
The following errors show up when I run from the file from the term window, but are not written to log.log:
tar: /public/public/clamscans/*.txt: Cannot stat: No such file or directory tar: Error exit delayed from previous errors mv: cannot stat `/public/public/clamscans/*.txt': No such file or directory
I know with windows you can add the 2>&1 to capture error data. Is there such a thing for Linux?
iptables and multiple public-facing IP addresses. With the current setup I have a public-facing firewall with iptables which will then forward traffic to a LAN IP. I will hopefully be allotted 1 private IP per public IP, which I hope will make this much more simple. For example, I have server A with the LAN IP of 10.0.0.1 which I would like to have traffic forwarded from 5.0.0.1, the public IP. I also have server B with LAN IP of 10.0.0.2 which I would like to have forwarded from 5.0.0.2, the second public IP. From what I have read and understood, this should be a simple task, however I would just like to double check to make sure that it is in fact possible, and if so, how would it be recommended that I go about doing so. Essentially, I need to forward each public IP to a corresponding LAN IP with all ports.
I've installed it properly until it works now, it does send emails and receive them, but heres the problem.
1) it does not send emails to a certain domain, unless i do dpkg-reconfigure on exim4 and put the domain on allowed relay... can't i just put something on settings which allow to send emails to ALL domains?
2) EVERYONE can connect to the server by telnet from any position, terminal or pc, and just use an existing user to send emails to anyone.... example, i have testuser123 setted up in debian/exim4 .. then they simply write "mail from:testuser123@host.dot" and the server accepts it.. without even request an authentication for that. And this is a problem, because everyone can use my email addresses to send emails to whoever.. heaven for spammers/hackers..
Just added Squeeze multimedia repositories in source list,but get this after reload :
W: GPG error: ftp://ftp.debian-multimedia.org squeeze Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 07DC563D1F41B907
However,update for Audacity & Mplayer showed in Update Manager,and I successfully updated.
My /etc/resolv.conf file is normally just set up to use Google's public DNS:
When I connect to the network at the university library, it totally overwrites my /etc/resolv.conf file to something like:
This is pretty annoying, so I tried comprimising by making a file with the school's domain and search entries plus the Google nameservers, then revoking write permission on the file. However, I couldn't access any domain name with this config on their network, so I reverted to using their nameservers. I keep all the school's entries commented out when I connect to my home network.
My ultimate question is what is actually overwriting the file? I suspect that my connecting through DHCP is responsible. Whatever it is, I'm pretty annoyed that no back up file was created.
Why everytime I send apt-get update I got this error on the last lines? Reading package lists... Done W: GPG error: [URL] Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 8F91B0E6C862B42C Here is my /etc/apt/sources.list
I have a debian server installed with a static ip. Now i am able to ping my ip, but when i try to configure a domain name with the nameserver as my ip, i am not able to ping the domain name
On my stable/squeeze computer, I have /etc/ssh/ssh_host_rsa_key.pub but I cannot find this in my testing/wheezy computer. Why can't I find it? Did the way to retrieve one's public rsa key change? I have openssh-client and openssh-server installed on both computers.
I am very new to encryption. Right now I am making certs and keys using RSA public-key cryptography. Is RSA the best? What other public-key cryptography <?> is there to use? Is <?> a cipher or algorithm? Whats the difference?
I bought vps server and now I want to upload openssh public key. With this command:
ssh-copy-id username@ipaddress the result is: /usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed /usr/bin/ssh-copy-id: ERROR: ssh: connect to host xxxxxxxxx port 22: connection timed out
with this command: cat ~/.ssh/id_rsa.pub | ssh username@ipaddress "mkdir -p ~/.ssh && cat >> ~/.ssh/authorized_keys" the result is: ssh: connect to host xxxxxxxxx port 22: connection timed out
also with this: ssh username@ipaddress the result is: ssh: connect to host xxxxxxxxx port 22: connection timed out
I often run into this and it's such a hassle that I have had no choice but to ignore it. But, I would like to run it properly but I don't understand why my sources list is 'wrong' or has incorrect info so that it's often not verified or authenticated. The public keyring is wrong or the source or both? I get these messages, for e.g.:
# apt-get update && apt-get install dmo-archive-keyring && apt-get update exit with result: W: GPG error: http://unofficial.debian-maintainers.org squeeze Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 9EEBC8DB9B9C3CB6
I probably don't need that but I ran into a similar error trying to authenticate the multimedia keyring. Not sure it worked but I am guessing the system works the same with all the authentications? I hope to understand what I'm doing wrong and what the process is.
I have added the following line in sources.list, deb [URL] squeeze main non-free
Running apt-get update i get this error message, Reading package lists... Done W: GPG error: http://www.debian-multimedia.org squeeze Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 123456789
Do i need to generate this public key 123456789 ? If so, how?
Running apt-key update has not solved the problem.
apt-get install debian-archive-keyring was a recommended solution from some googling.
I have also read this page, [URL] , but how to add a key is under construction.
I have two computers running Debian Squeeze. I'm trying to set up the public keys for them so that I don't need to use passwords to log in. As far as I know, I did the same thing for both, however only one is working.Here is the connection output for eachBroken:
Code: OpenSSH_5.1p1 Debian-5+b1, OpenSSL 0.9.8g 19 Oct 2007 debug1: Reading configuration data /etc/ssh/ssh_config
I turned on my debian systems. Update tells me that I have 26 updates, mostly to samba. I proceed and it gives me an error saying something about public key not available. Suggests to try smart update. I do that, smart update says I have 129 updates available (reasonable I guess b/c I have not updated in close to a year)
I proceed with smart update...now it says I can install 137 updates, I hit Check, tells me it is downloading packages, then, I get an error: W: GPG error: http://code.highrise.ca lenny Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY B95C4D3ECC4D3D27
I don't understand why....What is the solution for this?
I'm pretty new to Debian, and I'm trying to set up Apache 2, and I want to set the DocumentRoot to public_html in my home dir, but I run into some problems.
I tried to change this (/etc/apache2/sites-available/default): <VirtualHost *:80> ServerAdmin webmaster@localhost DocumentRoot /var/www/ <Directory /> Options FollowSymLinks AllowOverride None .....
When I restart apache I get a 403 error, and when I change it back to its original, it works fine. I want to change the DocumentRoot so I can upload files via FTP to ~/public_html. ~/public_html has the mode 777.
I need to set up my centOS computer as a firewall in my home network. Ive got 2 interfaces, eth0 and eth1. I want to allow and forward all traffic on eth0 and block all traffic on eth1 except ssh, ping(icmp) and DNS. How do I do this? Ive tried some editing in /etc/sysconfig/iptables but no luck.
I'm trying to give some windows users a permanent connection to a samba share behind a firewall over the public Internet. I know I can give them access with something like winscp (which they have done) but really I'd like to do it with a VPN so it seems seamless to the user. However I have no idea how to set up the server to support this and am finding the documentation a bit confusing. The samba share is on a Debian box and the firwewall is a Linksys WRT54GL.
I'm trying to add the PGP public key for the new repository. Here are the two lines I want to add for my e-mail but don't know where to add on the new repository.[URL]... I went to to the Synaptic Manager but could not find or where to place it. Would I create a new repository?
The public key isn't available when I try to use the Update Manager; clicking the "Check" button results in a popup with the following text:
Code: W: GPG error: http://ppa.launchpad.net lucid Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 6E871C4A881574DE
When I do 'sudo apt-get update' I get this error now:
Code: Hit http://ppa.launchpad.net lucid/main Packages Hit http://ppa.launchpad.net lucid/main Packages Fetched 116kB in 1s (70.5kB/s) Reading package lists... Done W: GPG error: http://ppa.launchpad.net lucid Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 1A0771178279047A
I'm completely new to Ubuntu, I've just installed 10.04 and this is only the second week I've had it, and I'm not sure what is going on with this. Whenever I try to check for updates I get this message: The repository may no longer be available or could not be contacted because of network problems. If available an older version of the failed index will be used. Otherwise the repository will be ignored. Check your network connection and ensure the repository address in the preferences is correct.
Quote: GPG error: [URL] feisty Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 2D6CFB44DD800CD9 Failed to fetch cdrom://Ubuntu 10.04 LTS _Lucid Lynx_ - Release i386 (20100429)/dists/lucid/main/binary-i386/Packages.gz Please use apt-cdrom to make this CD-ROM recognized by APT. apt-get update cannot be used to add new CD-ROMs Failed to fetch cdrom://Ubuntu 10.04 LTS _Lucid Lynx_ - Release i386 (20100429)/dists/lucid/restricted/binary-i386/Packages.gz Please use apt-cdrom to make this CD-ROM recognized by APT. Apt-get update cannot be used to add new CD-ROMs Some index files failed to download, they have been ignored, or old ones used instead.