General :: GNUGK - Create Static Routing From Inbound To Outboung Gateways ?
Aug 12, 2010
How to work GNUGK for H.323 Gatekeeper.
I am having a problem, configuring static call routing on GNUGK
In the section
You can see that the routers Local-router1 and 2 has the same dialling plan.
What happens is the gatekeeper send calls randomly to one router or to the other when one of the matching extension is dialled.
What I am trying to do is to force
Any calls coming from Remote1 to go out only throught Local-router1
Remote1 =========================> Local-router1
And any calls from Remote2 to go out throught Local-router2
Remote2 =========================> Local-router2
View 1 Replies
ADVERTISEMENT
Dec 21, 2009
I have recently setup a new mail server and have simulated sending and receiving on the new email server. The new email server will replace the primary one.I would like to setup the new email server in parallel with the existing one.This way i can observe issues that might occur and be aware of what could go wrong. I want to received mail to be delivered to both mail servers at the same time.I would like to use postfix, exim i find a bit to difficult to understand.I have thought of using transport maps, the only problem is that you can only forward mail to one server at a time using transport maps.I think recipient_bcc_maps and sender_bcc_maps could work, i would just like ideas of how i can do this.
View 5 Replies
View Related
Jun 14, 2011
I've been trying to get it work for 2 days now..
Here's my setup.
MODEM -> router (ISP one don't have access)
from the router it split into 2 connection one to my GW (linux debian) and another to a switch which is connected to a web/email server and the gateway.
My gw use x.x.x.27 and x.x.x.26 (everything I use on these ips is ok)
on the web/email server I have x.x.x.28 29 and 30
With this setup it's ok but I want to eliminate the link to the switch and make it pass thru the GW and i can't manage to get it work!
View 4 Replies
View Related
Apr 14, 2009
I have just installed Fedora 10 on an old laptop and was quite impressed with how smoothly it all went ... until it came to setting up networking!
I have battled for three days now and I'm almost there;
- installed updated firmware to the built in Broadcom 4306 wireless network adapter
- got NetworkManager to work with a static ip address by manually editing the ifcfg-wlan0 file
- managed to get the WPA security to work
The only problem I am left with is that there is no default route; if I set one up using: ip r a default via 10.1.1.1 dev wlan0
Then everything starts working.
If I try to add routes using the NetworkManager gui interface they dont get saved (no suprises there then! ).
I have tried creating a route-wlan0 file in /etc/sysconfig/network-scripts/ but this seems to be ignored by NetworkManager.
Since the NetworkManager GUI is almost useless, does anyone know if there are any other configuration files I can manually modify to get a default route set?
View 6 Replies
View Related
Nov 29, 2010
I have to connect my private adres 10.0.0.2/26 to an external adres 192.168.1.253/16
I am not allowed to use Nat so i have to create a static routing table..
Ive put a router between with 2 nic's:
Ive seen on various sites that :
Should do the trick but it isnt working for me ... Ipforwarding is enabled.. Also when i use the sys/proc command..
How to make the table? I am using Opensuse 11.2
View 5 Replies
View Related
Aug 25, 2010
In configuring static routing between two different subnets.
I have two different subnets as mentioned below:
I have a linux machine with two NICs on which i would like to configure static routing. details of the NICs are as mentioned below:
I have configured the gateway as 10.77.77.1 on machines which fall under 10.77.77.0/24 subnet and 172.16.40.1 on 172.16.40.0/24 machines.
My main motive here is i want communication to happen between both the subnets.
If the following modifications to route-eth0 and route-eth1.
View 3 Replies
View Related
Dec 16, 2010
I have a block of 5 static ip's and 2 servers that push HTTP and other services. What is the best method of configuring/routing traffic to individual boxes on the network?
More detail: One of my static IP's is assigned to a dedicated box for an Ubuntu mirror. Another static IP is assigned to a server with all of the HTTP traffic.
Several configurations function to route traffic appropriately (forwarding proxy or 1-to-1 NAT). However, with 1-to-1 NAT, the box is left open to the world with only the software firewall. Do I really need to place a hardware firewall inline to EVERY server?
Or, what other methods of routing and firewall would you recommend?
View 3 Replies
View Related
May 4, 2009
Any official or 3rd party yum repo that supports gnugk (GateKeeper for VoIP)? I am trying to install gnugk in a centos 5 environment.
View 2 Replies
View Related
Jun 1, 2010
How to check inbound and files transfer from outbound to inbound in my linux server. because in my server from outside to inside transfer is high. so its take huge bandwidth. how to check this and reduse this .
View 2 Replies
View Related
Jul 20, 2010
1. It is definitely my system and not the router. I had been accepting these connections just fine on my Fedora 6 system, but upgraded to FC11 and haven't been able to get these inbound connections working. I still have the drive with the FC6 system and whenever I put the old drive in the system, the connections work fine. So, the hardware, wiring, etc is identical between the FC6 and FC11 systems.
2. The system's firewall is disabled. iptables, and ip6tables are turned off both at startup (e.g., chkconfig iptables off) and using "service iptables stop". (Note--my router also works as a firewall)
3. sshd and httpd are both on and listening on all interfaces. "nmap -P0 -p 22,80 127.0.0.1" shows both ports open, as does 192.168.1.80. But when I use the same command looping through the external IP, the ports are filtered:
Host is up.
PORT STATE SERVICE
22/tcp filtered ssh
80/tcp filtered http
4. hosts.deny is empty.
5. The messages and secure logs do not show anything in response to the nmap scans.
Again, I'd have sworn this was my router, except that it cleanly allows the traffic when I swap the drives in my system.
View 9 Replies
View Related
Jul 5, 2011
I'm facing a strange problem. I have a Debian squeeze machine connected to Internet through a 3G USB modem. The machine connects as expected, and I can resolve domain names and establish HTTP and SSH connections.The problem is when I try to communicate to that machine from another PC connected to Internet. The machine doesn't respond to PING and I can't connect to the SSHD installed in it. If I connect the machine to the local network, it works right.
route:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default * 0.0.0.0 U 0 0 0 ppp0[code]...........
View 1 Replies
View Related
Apr 26, 2011
I want to set a domain name for my static ip address. If i am giving my static ip, i got output but i cant create a domain name instead of giving ip address.
View 3 Replies
View Related
Apr 6, 2010
I have a firewall, this consists of three NIC's:
Code: eth0[192.168.0.2] eth1[192.168.1.2] and eth2[10.10.165.2]
I am trying to ping eth0 from eth2, but I am not able to succesfully get a response from pinging the device, I am using:
Code: ping 192.168.0.2 -I eth2
I have tried to insert routing data into the routing table, but it still doesn't work
View 2 Replies
View Related
Apr 26, 2011
want to set a domain name for my static ip address. If i am giving my static ip, i got output but i cant create a domain name instead of giving ip address.
View 5 Replies
View Related
Dec 1, 2010
I have 3 servers interconnected with IPs 192.168.150.1-3. First two has internet connection and third first server uses them as gateways. After googling and reading howtos I managed to get it working: The firewall for ssh on first server is defined
Code:
...
iptables -A EXTIN -p tcp --dport 23 -j ACCEPT
iptables -A FORWARD -p tcp -d 192.168.150.3 --dport 22 -j ACCEPT
iptables -t nat -A POSTROUTING -d 192.168.150.3 -p tcp --dport 22 -j SNAT --to 192.168.150.1
iptables -t nat -A PREROUTING -i ppp0 -p tcp --dport 23 -j DNAT --to 192.168.150.3:22
...
On Seconds server:
Code:
...
iptables -A EXTIN -p tcp --dport 23 -j ACCEPT
iptables -A FORWARD -p tcp -d 192.168.150.3 --dport 22 -j ACCEPT
iptables -t nat -A POSTROUTING -d 192.168.150.3 -p tcp --dport 22 -j SNAT --to 192.168.150.2
iptables -t nat -A PREROUTING -i ppp0 -p tcp --dport 23 -j DNAT --to 192.168.150.3:22
...
And on third route is defined like this:
Code:
ip route add default scope global nexthop via 192.168.150.1 dev eth0 nexthop via 192.168.150.2 dev eth0
It works, but the problem is that connections on third server are shown that their connected from 192.168.150.1 or 192.168.150.2. Are there is any way to keep original connection source address, when connecting to 192.168.150.3?
View 2 Replies
View Related
Jan 7, 2011
I have two NICs and both having different IPs and Default Gateways. Now CentOS by default picks only one default gateway and puts entry in routing table (route -n). I want to keep both default gateway in active mode to achieve redundancy. For example if traffic enters through eth0 then it goes out using default gateway of eth0 and if traffic enters from eth1 then it goes out using default gateway of eth1. I use command route add default gw 192.168.0.1 netmask 0.0.0.0 dev eth2 then both default gateways becomes active. Now I want to make sure that when server reboots both default gateways are setup. For this I wrote shell script/sbin/route add default gw 192.168.0.1 netmask 0.0.0.0 dev eth0/sbin/route add default gw 192.168.0.10 netmask 0.0.0.0 dev eth1I am calling this script via /etc/rc.local but it doesn't work on boot time however once server is booted and I execute script (sh script.sh) then it works fine.
View 1 Replies
View Related
Apr 6, 2010
I'm hosting a Sendmail Cyrus-Imap server on fedora 12. I recently installed a second NIC on a second internet gateway and successfully configured source based routing. Clients are able to connect over the mail.domain.com received from the gateway 192.168.0.1 to the interface 192.168.0.254. ETH0. Clients are also able to connect from pop3.domain.com and smtp.domain.com from the second gateway 192.168.1.1 to the interface 192.168.1.254. ETH1
I have cyrus-imap certs configured for the mail.domain.com and a Sendmial cert configured for mail.domain.com. My question is how would I tell sendmail and cyrus that the mail.domain.com goes out the ETH0 but deliver the second and third cert (eg cyrus sends pop3.domain.com and sendmail sends smtp.domain.com) to clients connected on ETH1?
View 1 Replies
View Related
Mar 24, 2010
I have a CentOS5 box I use to run ASSP for Anti-spam. It has a single NIC. I configure network settings using Webmin. I have two Internet connections managed by different routers.
Router 1 - 10.0.0.254 255.255.255.0
Router 2 - 10.0.0.250 255.255.255.0
CentOS - 10.0.0.30 255.255.255.0
Both routers port forward traffic on port 25 (SMTP) to the CentOS box. The SMTP connections only work for the router that is the default gateway on the CentOS box! If Router 1 is configured as the default gateway in CentOS then I can Telnet to that routers WAN IP on port 25 and successfully send mail! On Router 2 I get no connection unless I change the default gateway in CentOS to be the IP of Router 2 thern Router 1 SMTP connections will not work! I imagine that CentOS is sending out it's responses to the default gateway instead of the Router that initiated the port forward?
View 2 Replies
View Related
Nov 17, 2009
I`ve got a network (192.168.1.0/24)with common internet gateway (gw 192.168.1.253).Everything works good and i have access to i-net through 192.168.1.253 from all loacl machines. Then I tried to make and internal server as a firewall for local subnetwork. It is CentOS 5.3 based.
Code:
[root@router etc]# uname -a
Linux router 2.6.9-89.0.16.EL #1 Tue Nov 3 17:15:02 EST 2009 i686 i686 i386 GNU/Linux
[code]...
View 4 Replies
View Related
May 11, 2010
I installed the CentOS v5.4 on a virtual machine vmware server v1.0. I put the the vmware ethernet on bridged mode and now I have an ip address, subnet mask and dns from my dhcp server from the the office where I am. I edit the file /etc/sysconfig/network and I put there the gateway ip. Now is okay but not at my home where I have another gateway ip. a script who switch between my gateways ?
View 4 Replies
View Related
Apr 4, 2016
I am having some troubles using iptable rules on two Servers that act as Gateways pointed to one backend server with only one interface.
To be more exact, i have 3 Servers, 2 of those have a public and a private interface, with different public ips but common private interface ( they connect to the same switch ), the last one only has 1 private interface and is connected to that same switch.
Those 2 servers also act as a gateway and a firewall for the private network.
My problem is that i cannot seem able to route traffic from both of those to the third one and back to the same public ip that the request came from ( effectivly using two gateways on the machine with only one interface ).
As a testing scenario i am using ferm for applying iptable rules that forward ssh traffic ( for example ) to the backend server, and it works well when i do it with one gateway.
When i apply something like this in /etc/network/interfaces on the backend server though:
Code: Select allauto eth0:0 eth0:1
# The primary network interface
allow-hotplug eth0
iface eth0:1 inet static
address 192.168.9X.XXX
netmask 255.255.255.0
broadcast 192.168.9X.255
network 192.168.9X.0
[Code] ....
Even though forcing selection of an interface from the backend server ( like curl --interface ) seems to work well, meaning that the request to the curl appear to happen from the correct public ip, i can still only use one of the public ips to access the server with the ferm rules. Ideally i should be able to ssh to the backend server from both public ips using their ferm rules for forwarding traffic to the backend server.
I feel like i am missing some details on routing that should happen on the firewalls as the backend server seems to be able to use both gateways to access the internet and receive replies from it.
View 2 Replies
View Related
Feb 12, 2010
I'm having some problems on the line with ***. This is from a OpenEntidade.java class file and I'm trying to update EmprestadorView's variables.
EmprestadorView.java
public class EmprestadorView extends FrameView {
...
OpenEntidade.java
-----------------
public class OpenEntidade extends javax.swing.JFrame {
[code]....
View 2 Replies
View Related
Mar 14, 2011
Looking at the output of netstat, I'm not seeing a definitive way to tell which torrent connections are clients reaching in to my machine vs my machine reaching out to the world. Is there a clear way to determine which is which?
View 1 Replies
View Related
Apr 6, 2011
I am running Ubuntu 10.10 I have an question about the firewall Firestarter, when checking the firewall it told me there are 9 serious incoming connections what must I do with this info. Inbound is normally blocked as standard i have also see that someone with port 1234 and 12345 have trying to attempt mine system but failed all trojan ports are fully blocked.
View 2 Replies
View Related
Apr 7, 2011
I'm trying to adjust the firewall to only inbound syn connections.
To Allow all home subnets access to port 53 both tcp/udp but deny the rest.
View 1 Replies
View Related
Jul 22, 2011
Is there a way I can count inbound/outbound mails for a particular user? I'm using sendmail as MTA and dovecot for POP3.
View 1 Replies
View Related
Sep 9, 2011
I'm often on my corporate network but also need to be on another network simultaneously. At the moment I have to manually switch back and forth between the two. I'm using ubuntu 10.04. I've come across an excellent document that explains how to do this: "Linux Advanced Routing & Traffic Control HOWTO" by Bart Hubert. He mentions:
make sure that your kernel is compiled with the "IP: advanced router" and "IP: policy routing" features
I've downloaded the kernel sources, but I don't find any config options with names like these in them.
sudo apt-get build-dep --no-install-recommends linux-image-$(uname -r)
sudo apt-get source linux-image-$(uname -r)
Searching doesn't reveal anything
~/kernelBuild/linux-2.6.35/debian.master$ grep -iR policy . | grep -i routing
~/kernelBuild/linux-2.6.35/debian.master$
So my question is...how can I tell if the kernel I have has these config options. Failing that, how do I build a kernel that does support these things?
Additional use cases for this knowledge. (1) At work with desktop computer plugged into corporate network. Plug 3g phone into USB port. My corporate network wont allow me to access my external servers over ssh, but the 3g phone will. (2) At home on the corporate VPN, but would like to access my other local network computers.
View 1 Replies
View Related
Jun 13, 2011
We are planning on rolling out a mail service that will backend a webmail/groupware interface using postfix and dovecot, and we are trying to nail down an architecture for the system. I was hoping I could get some opinions from you good people on the different models we have come up with, and any improvements. To preface this discussion, we use NFS as the backend storage for mail so that clusters of mail servers can be created.
One possible solution is to separate three services, inbound email, outbound email, and message retrieval onto separate servers. We currently run a mail system with 65K users in this manner and it works, but there is a lot of wasted cpu on the inbound and outbound mail servers. where the dovecot servers are doing most of the work.
Another solution would be to combine the dovecot and inbound postfix servers to run dovecot as the local transport agent for postfix with LMTP, giving us quota and sieve capability.
The last solution is to run all three services on the same machine, giving us a single server image that we can clone on demand when we need to add more performance.
The single server, all three services, solution seems to be the simplest to build and manage, but putting all your eggs in one basket like that concerns us. What if there is a sudden influx of mail from our filtering platform, and it slows down all the other processes? What if the NFS server becomes disconnected from the network and the load average on each server skyrockets killing the ability for outbound mail to flow (where a separate outbound mail server would continue running despite this issue)?
View 10 Replies
View Related
Apr 28, 2010
RHEL 5.4 i want to be able to do redistribution of inbound syslog messages to syslogd. as example, my syslog.conf has in it at the end:
*.* @192.168.5.5
*.* @192.168.5.6
my sysconfig/syslog file has "-r" as the only option for syslogd. any messages generated by the localhost will be sent to the two remote servers, but messages that come into this box (udp 514) only get logged locally and do not get sent out to the remote hosts.
you may ask why do i want to do this. because i have several syslog servers (for security purposes) and many of my net devices are configured to send syslog to all the syslog servers, hence each device is sending way too much duplicate udp-514. so i would like to minimize the udp-514 coming out of the devices, have all devices send to a central syslog server, and then central syslog server do distribution to the other syslog servers. others have also called this "syslog proxy". or, if not with syslogd, how to achieve this (preserving the original syslog message host info, etc)?
View 1 Replies
View Related
Jan 13, 2010
We host a web server in which we are hoping to implement some form of traffic redirection based on source IP address, and I am wondering whether the squid proxy built on iptables would be capable of managing this task? Essentially we are trying to redirect traffic from specific set of source IP ranges to a "Your IP has been restricted" type of page at a different IP/FQDN.
View 2 Replies
View Related
