I am trying to route a security video server which is inside my network to the internet. my network is two interface eth0 (internet network xxx.xxx.xxx.198 and internal network 192.168.5.1
I am trying to see an web server on 192.168.5.184
This may or may not be an easy question, as I'm somewhat uninformed in the networking side of computer science. I own a rented server with a static ip address. Is there a way that I can forward requests from it to my computer to setup a LAN network of sorts over the internet. Specifically, there is a program I would like to use that requires LAN (you enter an IP to connect to). Is it possible to setup my server in a way that users could connect to my server's ip, which would then forward it to my home computer (I'm fine with setting up my home computer with programs that would allow this) that could host?
View 2 Replies View RelatedI have configured a samba server where I have configured it for /mnt dir to be exported/shared. When I verify this share, I see mnt dir but I want the content inside the mnt to be visible or chroot into mnt directly.
View 6 Replies View RelatedWe are trying to define an appliance based on Suse for an application server and Web server Apache, so we would like to know configuration best practices for network and security, is there any paper/doc about best practices?
View 3 Replies View RelatedIs it possible to route different applications through different network interfaces?
Let's say (hypothetically) I want to route /usr/bin/thunderbird through vlan0 but /usr/bin/firefox through eth0.
Is there a way? And if so, is there a graphical tool for it as well?
I want to see all my ip's inside server. ip a command and ifconfig not working. Because i am under su root login. Is there any possibilities to view all my IP reside in the server..
I am using CentOS release 5.5 (Final) server.
today I tried to configure a network route to a host for testing my network interface. Code: route add 192.168.1.15 eth0 As I have to eth interfaces and both interface got their IP from DHCP (192.168.1.11 and 192.168.1.12) and are in the same subnet, I shut the other interface down:
Code: ifconfig eth1 down Then I tried to test the interface by doing a ping to 192.168.1.15.
Problem: When I unplug the cable from eth0 (and eth1 is still plugged) the ping still works. Somehow my linux (it's debian) powers up again eth0 and pings over this port.
How can I stop my linux doing this. I just want to have the route added only on the one interface - not the other. Is it maybe some case of a default-gateway?
I've currently got a Xen box with 3 Virtual machines on it, in a routed setup. I'd like to put them all on a private internal network as well, which I'm assuming I'd do with a dummy network card and a xen bridge, but I can't find any information about setting up the xen Bridging setup on top of the existing network-route instlal.
View 1 Replies View RelatedI setup a private network from virtual machines and one of the machines is the DHCP server for the group. I want to specify a next-server for the DHCP server but I'm having trouble connecting to any of the machines that I lease IPs to. I'm just trying to do a simple ping/ssh to 10.0.0.252 (a machine with a lease) but it doesn't seem to respond. I'm assuming I need to be able to connect to my next-server but maybe I'm wrong.
View 1 Replies View Relatedi want to watch music videos, etc but i want them to play (not in a window) inside the desktop like in a predefined area... is this possible?
View 3 Replies View RelatedI know this post isn't strictly linux based, but since the system in question appears to be using Linux and I am as well I decided to post this here. In doing other network playing with Ubuntu Sever 10.10 I noticed that on all traceroutes I did to any IP the second hop from my house jumped through a connection on IP 24.96.153.61 which I think should only be another dynamic IP Knology.net customer...
In scanning the IP I now know that its a Juniper Junos Router 9.2R1.10 (Probably running on some VMware based on googling?) Open ports show: 22 ssh openSSH 4.4 v. 1.99 23 telnet Openwall GNU/*/Linux telnetd
At first I thought this was just a legit Knology.net DNS server or something, but using such outdated versions and freeware... I feel suspiciously like this is something else. Also, why in the world would knology allow remote access to their mainframe equipment? Seems that if it were ever breached it would be beyond terrible for the ISP...
Finally, why can't people not SSH into my box from the outside if I have MAC address filtering on? Anyone know anything about this or am I just being paranoid? I'm a noob, so knowing too little about all this is probably more the problem?
I sshed to a server a week ago, then ran *screen* and created a few windows in my screen session. I then ran a few programs on those screens. All the programs were running in the background (I run them with &). I did not close or detach from the screen sessions. So I was still connected to those screen sessions from my client machine.
Then, this morning I find my client machine rebooted. When I do screen -ls I find there are no screens available to reattach to. But that is not the worst part. The strange thing is that all my processes (which were running on the server) have disappeared as well, even though they were running in the background. I thought 1) using screen I will be able to re-attach to old screens when my client restarts, 2) If I have sshed to a server and have run programs in the background, restarting the client should not stop those programs (even if I had not used screen).
Sometimes while watching ..... vids in firefox I often want to adjust the brightness/contrast/saturation levels.I didn't see any addons for the purpose.Is there a way to do this ?I have visited web sites with embedded flash players which includes these controls.
View 2 Replies View RelatedI have 3 network interfaces on my Linux Router :
Interface - Gateway - Type
Code:
br0 - 192.168.0.1 - Internet
eth2 - 192.168.1.1 - LAN
tun0 - 10.0.0.2 - VPN (via br0)
What I'd like to do is to route all TCP packets coming from eth2 to tun0 where a VPN client is running on 10.0.0.2. If I delete all default routes and if I add a new route to tun0 like :
Code:
route del default
route add default gw 10.0.0.2
Everything is fine, and everyone on eth2 can reach the Internet using the VPN access. Now the problem is that my VPN client does not allow any other protocols other than TCP. And I also want to allow VPN access only to eth2, no other LAN nor the router itself. use iptables to filter any TCP packets and mark them, so they can be sent to tun0, while any other packets can reach the Internet via br0 (192.168.0.1). I found on the Internet that we can mark packets before they get routed. Using the following commands :
Code:
iptables -t mangle -A PREROUTING -j MARK --set-mark 85 -i eth2 -p tcp --dport 80
ip route add table 300 default via 10.0.0.2 dev tun0
ip rule add fwmark 0x55 table 300
First of all, --dport 80 never work... :/ I wanted to filter TCP 80 packets coming from eth2, but none of them seems to be HTTP packets... oO (very strange...). Nevermind, I decided to forget about the --dport option. I use the "iptables -L -v -t mangle" command to see how many packets are marked, and it is working fine, all TCP packets coming from eth2 are marked. Now the problem is that none of them are routed to tun0 they are all respecting the "route -n" rules... and not the "table 300" rule I have created.
I've been seeing a bunch of issues with the /etc/resolv.conf not picking up the nameservers for 3g connections, and managed to fix that issue using tips found here.. the one thing I m having a problwm with is my 3G USB modem not picking up a default route/gateway. I can connect using KNetworkManager, get an IP and nameservers, but.
[Code]..
And to top it all off, I cannot figure out what the default gateway should be from verizon to just write a script out myself that'll do it automatically.
OpenSUSE version: 11.2 *and* 10.0 I am unable to send email. It appears I am being blocked by my ISP [URL]... A Wireshark trace shows ICMP type 3 Code 13 - "Administratively filtered". It's important to note that I don't know exactly when the problem started, because I seldom use my ISP email account, I use Yahoo web mail due to the "throwaway" nature if I get hit with spam. I only discovered the problem when testing the functionality of 11.2. I suspect the problem started several months ago: I restored openSUSE 10.0 and the problem exists there too. I wish I'd sent that last email via 10.0 before the upgrade.
The weird thing is that using Windows 2000 box I can get a successful connection using telnet (Telnet also fails on the openSUSE box.) It appears to me there is something in the Linux TCP stack that Teksavvy doesn't like. I am on dial up and I pointed this out to Teksavvy tech support, as I am probably the only person left on dialup and the reason no one else has reported the problem
I've got this ubuntu maverick machine (that I'm posting from) that I'm converting into a general purpose network computer. I've got two ethernet ports, the dedicated with my cord to the modem/router, the motherboard integrated going to my main desktop. How would I setup a simple two computer network? Main desktop's a slackware machine.
View 4 Replies View RelatedI have a server with 2 network cards. eth0 is used for all traffic and everything is working fine on this side. Eth1 is used for traffic to and from 1 ip address.
Lets say the ip address of eth1 is 123.123.123.10 and its gateway is 123.123.123.1. I need to pass all traffic to 123.123.123.20 through eth1. What command would i use?
I have a static ip on my wired (eth0) connection. I thought I had it well set up in yast. In the routing section I do have my default gw coming up there, with the the right nw i/f (eth0) associate with it. However, when I boot up, y config seems to ignore that fact, and I have to keep goign to root and typing "route add default gw <mygwip>" each time, which is something I want to avoid. Isn't it odd that the route settings created by yast have no effect? If they did, the route would be set up on bootup and I would haven't to do that typing.
View 2 Replies View RelatedI'm currently struggling with the following problem: Connecting to a wired network with NetworkManager (0.7.1) is no problem at all: Everything is set up automatically, including the default route:
[Code]....
When I now add the route manually it works. But as soon as the cable is plugged in, the NetworkManager overwrites the routing table entry again (which makes it quite annoying). Does anyone know a way to avoid this behaviour?
My workstation is on a network, let's say 10.100.0.0/24. I'm opening up an openVPN Tunnel to a test environment in my company, receiving a lot of routes to this network (address range 172.xx.yy.0). Everything is working fine so far. In this test environment I placed a number of virtual systems having their own private network (10.99.0.0/24). I have one machine in this virtual cluster which is able to forward incoming IP traffic to the others.
When I login to this gateway system, using the 172.xx.yy.zz address, I can logon to the others using the 10.99.aa.bb addresses. Fine so far. But I have to be able to call these machines with the 10.99.0.0/24 addresses from my laptop. So I tried to add a route like:
route add -net 10.99.0.0 netmask 255.255.255.0 gw 172.xx.yy.zz
Unfortunately I received an error messages:
SIOCADDRT: No such process
According to the entries in other forum articles (Google helps in most cases), I have to add a host route first:
route add -host 172.xx.yy.zz gw 172.well.defined.dest
have two internet lines from two isp every one pluged to interface eth0 and eth1 and i have eth2 interface to internel network clients now i need to make some clients to use line 1 and other use line 2 i want make this without use netmask , just for selected IP.
View 1 Replies View RelatedI want to add this route but I am getting this error message. What is the reason of this problem? I cant add this route? how can i add?
Code: [root@linux/]# route add -net 10.1.0.0 netmask 255.255.0.0 gw 10.2.0.1 eth0 SIOCADDRT: Network is unreachable
how efficient and effective are these snort, argus, ossec etc etc for an organization having 3500 PC Network, connected through 700+ Cisco Devices (Layer 2 and Layer 3), and scattered on 130 different sites (geographically)? what should be the combination of products and what should be the architecture for an efficient forensics activity?
View 2 Replies View RelatedSo I have two network Interfaces
eth0 - NAT behind a router
eth1 - Public IP
When ever I restart the machine, both interfaces pull a IP, but the it randomly chooses eth0 or eth1 to have the gateway. I want the gateway to be eth0 always.
[Code]...
Is there some file or setting I can modify in Fedora10 that will always choose 192.168.1.1 on eth0 as the default gateway?
I can connect my laptop via the ethernet cable, and get an IP, Subnet mask, and a route. But if I connect via Wireless, I get an IP and Subnet mask.
More interesting, my Internet Tablet grabs the route via wireless with out issues.
I'm using ubuntu server 10.04. I need to create a second network to do some testing. Here's what it looks like so far: WAN > x.x.x.x/9 > router > 192.168.1.0/24 > LAN
I need to do this: WAN > x.x.x.x/9 > router > 192.168.1.0/24 > LAN > ubuntu server (LAMP, dhcp, dns via eth1) [eth0 192.168.1.138] > ubuntu server [eth1 10.0.0.1] The two networks should be transparent to one another. I've got everything working, except routing. Here is ifconfig:
[Code]...
I am using nessus to evaluate the security of a web server. I have started up the nessus daemon on the server, here's the netstat output:
Code:
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 *:ldap *:* LISTEN 3565/slapd
tcp 0 0 *:mysql *:* LISTEN 4026/mysqld
tcp 0 0 *:pop3 *:* LISTEN 3584/xinetd
tcp 0 0 *:sunrpc *:* LISTEN 3463/portmap
tcp 0 0 *:www-http *:* LISTEN 13855/httpd2-prefor
tcp 0 0 *:ssh *:* LISTEN 3577/sshd
tcp 0 0 *:nessus *:* LISTEN 6118/nessusd: waiti
tcp 0 0 *:smtp *:* LISTEN 3636/master
tcp 0 0 *:https *:* LISTEN 13855/httpd2-prefor
udp 0 0 *:sunrpc *:* 3463/portmap
It's listening on the default nessus port 9390. I am trying to connect to the nessus server instance using Open-VAS Client. I have generated the client and server certificates, I have pointed the client at the User Certificate File, the User Key File and I have a CA cert. I have created a user account on the nessus server. The problem is that when I try and log in from the Open-VAS client it keeps saying it can't connect. Is there anywhere I can check to see if it's being caught in a firewall, or where I can see if the connection is even making it to the server..
I have a RHEL 5 Server dedicated to web hosting. HTTPD 2.2.x.x is running on it with PHP and MySQL. The machine is not a server system (hardware wise, a C2D 2.66 with 2GB RAM and 2 x NICs). I have a CIR Fiber link with a pool of live IPs. The machines including this web server is plugged into a switch which has all the live interfaces and is separate from the LAN switches. The problem i am facing is that, when ever this web server is plugged in, the traffic on live switch is choked. Internet slows down to a halt (as live interface of proxy is plugged in this switch. DNS stops resolving name due to time outs. Mail delivery is slowed and the mail ques pile ups. The moment i get this machine of the switch, all the traffic becomes normal. Therefore i have deduced that this is the faulty server. I do not know if this server is hacked and working as a bot or it is a mere hardware problem(faulty LAN Card).
View 3 Replies View RelatedI have a Linux server that has local mail service. There are few user accounts on this server. User may send the mail to each other but that only restrict to LAN environment only.
For example, I may
# mail user1
To send mail to user1. User are not able to send mail to public. Some service like hylafax using this local mail service to send notification of fax status.
I don't want to manage and maintain local mail service anymore. I have subscribed a package from ISP to host a public domain of my own. I wish to have my hylafax service to able to send the notification mails to public mail server, is that possible to do it? It is great if all mails that send to local mail server may forward to public mail server. That makes the local mail service serve mail forward only.