Networking :: Enabling Full Routing Site To Site With Openvpn Not Using Masquerading?
Jul 27, 2010
I've been on a quest to enable full routing through my openvpn tunnel between my office and the colo. Masquerading will work, however it will throw off anything key based and makes a lot of things just more difficult and vague in general. Is there an easy way to do this via iptables? I tried using quagga hoping it would magically solve my problems, however it does not seem to do my routing for me . I just did a basic static route within zebra...
View 3 Replies
ADVERTISEMENT
Mar 25, 2010
I have three locations with a central office connected to two remote locations. At the central office I run on a cisco asa 5505 two site to site vpns. The remote end of the first site is a checkpoint firewall , and the remote end of the second site is racoon on debian. Both sites are up and working. However, where at the first site traffic goes both ways, at the second site it only works from the central office to the remote office.
For example, I can ssh from a host in the central office to a host in the first remote site (through checkpoint firewall,) then ssh back from that host at the remote office to any host in the central office. In contrast, after I ssh from a host in the central office to a host in the second remote office (through racoon), I cannot see the central office hosts (ping the ip address of a central office host, ssh, etc. all fail.) The vpn settings at the central office (the cisco asa 5505) are identical. So it seems to me that some routing magic is missing on the host running racoon at the second remote office. Where would such setting reside? racoon config files? iptables?
View 1 Replies
View Related
Jun 25, 2010
I have to ubuntu machine (9.10 and 10.4) with a openvpn tunnel between them.This is the situation:
Code:
NetworkA 192.168.0.0/24
|
UbuntuA br0:192.168.0.3 (openvpn bridge between eth0 and tap0)[code].....
UbuntuA has one only interface etho and there are two openvpn instance: one bridge istance with br0 and another instance with tun0.
UbuntuA is not the gateway for networkA. UbuntuB is the gateway for NetworkB.I need to comunicate between pc on networkB e those on networkA.This is the "ping situation" (no pc tested has an active firewall):
ubuntuA vs ubuntuB: OK
ubuntuB vs ubuntuA: OK
pc on NetworkA vs ubuntuA and ubuntuB: OK[code].....
View 6 Replies
View Related
Nov 28, 2010
At every site i have two provider vsat and wireless connection.I have a linux machine and wanna setup act router for every site.
SITE 1 :
vsat : gw 10.23.128.1
wireless : gw 192.168.100.1
[code].....
View 5 Replies
View Related
Sep 6, 2010
My test server is going well for the past 2 months. I have learned a lot from searching the net for how to's and forums on questions I have. My next task on the to-do list is enabling ssl on my mail server. I have the ssl setup with an automatic redirect from http to https.It is working fine with a minor issue.I have 2 domains and several subdomains on the server. Since I have enabled ssl, it seems for any of the domain/subdomain links I type in with a https://, it takes me to my mail server site. How can I have it set to only one secure link to my mail server?
View 8 Replies
View Related
Oct 3, 2010
Maybe a site-to-site Ouija board connection.
View 5 Replies
View Related
Feb 18, 2010
In the office there is a local network with samba+openldap PDC. The local domain name is company.net. The company desided to create a corporate Website on a remote hosting and desided that the site's domain should be company.net which is same as local network's domain name. So now it is not possible to reach that corporate website from within the company's local network because, as I guess, bind9 which is installed on above menioned PDC looks for company.net on a local webserver. Is there a possibility to let people from this local network browse the remote site?
View 1 Replies
View Related
Jan 8, 2010
I don't know what I'm trying to achieve falls into 'routing' or 'Bridging'???I have two network ports (with static IP ) and I would like to forward RX packets of one to the other.
I have done this in Windows by enabling a service called 'routing'.Is there something similar in Fedora 11? I am pretty sure there are a few thread explaining these but I am just not educated enough to find one that makes sense to me, so Please excuse me for starting a redundant thread and point me to it?
View 1 Replies
View Related
Apr 4, 2010
My special networking configuration.
The case: I'm running two dedicated Linux servers (openSUSE). Both servers are connected through public IP addresses to the internet. Each server hosts a VMware with another Linux inside.
SRV1 and SRV2 are the entry points for OpenVPN from external clients. SRV1 and SRV2 are although connected through an OpenVPN connection for save data sharing.
My problems:
SRV3 can't connect to SRV2 and SRV4.
SRV4 can't connect to SRV1 and SRV3.
External OpenVPN clients connected to SRV1 can't reach SRV2 and SRV4.
External OpenVPN clients connected to SRV2 can't reach SRV1 and SRV3.
Here are my configurations:
Code:
Code:
Code:
Code:
View 1 Replies
View Related
Dec 12, 2010
I have set up OpenVPN Server on a VM (Ubuntu 10.10) running virtualbox bridged to the host. Everything is working fine excepts the fact that I cant seem to be able to assign internal IP (VPN Server) to client connecting. Let me explain: All my clients are connecting and accessing the internet without any issue. Where I have an issue is that all my clients come out the other way on the internet with my server ip address which kind of defeat the purpose. Is there a way (keeping in mind that I am running the server in a VM) to have all my clients accessing the internet with an IP provided by the VPN Server?
View 4 Replies
View Related
Apr 16, 2011
To be able to use my 3g connection from my laptop I am using Azilink.Azilink work by setting up a little Openvpn server on your smartphone then you connect to your smartphone from your laptop with OpenVPN.From there what i wanted was to use a second VPN connection to an external Linux host and redirecting all my traffic to that tunnel... (redirect-gateway + iptables)It is working but partially..Here is the way I connect through my phone (all steps are I think important for the routing issue...)
1) I plug the phone then a usb0 interface is created with the 192.168.239.5 ip adress (my phone is 192.168.239.4)Then adb connect 192.168.239.4
2) I have to enable a port forward on my phone adb forward tcp:41927 tcp:41927
3) I run the openvpn script (to connect to my phone on wich i have launched Azilink)
So Openvpn connect to 127.0.0.1:41927 (to my phone) From there I have a Initialization Sequence Completed
At this time I am connected through 3G via my smartphone to the Internet..And as you imagine i don't want to enter all the IP adresses of Internet minus RFC1918 manually via route command.I think the problem comes from the fact that when i do the route add default gw 10.8.0.5 it is overwritting all the routes required to establish the first and the second connection am i right? Could someone help me solve that issue ?
View 2 Replies
View Related
Sep 19, 2010
how do i configure Open VPN to automatically use a certain VPN for ONLY firefox, ONLY on a particular site? I don't want it to be applied system wide and screw up my IM client and all the sites that i have remembered passwords with, only for a site or 2 where there are regional restrictions.
View 1 Replies
View Related
Feb 18, 2010
Here's a strange one. On my internal network, there are two WinBlows boxes, both connected to my Linux Router/Firewall. Yesterday, I needed to download a file from http://www.freebsd.org. The 1st machine I tried, would not connect from FireFox. When I tried, on the 2nd, it connected immediately. So, I did all the usual "stuff" on the 1st one. Re-booted, as it's WinBlows, cleared browser cache, etc. etc. It still wouldn't connect. BTW, connecting to other web sites was no issue. Just FreeBSD.
So, just for grins, I ran a traceroute from both machines, and here's where it gets freaky. Here's the traceroute from the working machine code...
View 7 Replies
View Related
Jan 2, 2011
I am using Squid as a proxy server red hat Linux.I want to block some specific web sites like facebook,..... under squid .Please guide me that how can i do it and under which header should i write the script ?
View 14 Replies
View Related
Jul 28, 2010
There are a lot of boxes in this network and we have intranet site. If I connect computer directly to the network with everything set to automatic. I can see this intranet site. But I've installed a switch. One box has two net adapters and it takes internet, intranet and all from one adapter, the other adapter is connected to switch. Now, I have connected to this switch two computers. Internet is working fine. But I cannot get to this intranet site from these boxes. I can get into shares of other computers in the network but they cannot see me. Everything is hidden behind the gateway. But that's not the problem for me. All I want is to get to this intranet website. How can I do it?.
View 2 Replies
View Related
Dec 22, 2010
I am trying to open a site named [url] and it gives me error connection refused the network may be down.
I had checked that ip and it's pinging from my pc but the site is not opening
My internet server is red hat linux and i have done all the iptables thing but it's not working
View 5 Replies
View Related
Jan 12, 2010
I am running Ubuntu 9.04 on a laptop (Wireless) and Vista (plugged into router) on a multimedia center. I can watch tv shows from 2 out of the 3 tv network sites that i like. CTV and Global tv stream ok on both systems. however CBC won't work unless the pc is directly plugged in without the router.
View 1 Replies
View Related
Mar 23, 2010
Trying to access 67.15.245.6 (its a forum site). I can't get to it from home for over a month now. I can't ping it, but I can ping obvious things like google. Tracert isn't working at all. Once it hits the lightspeed.frokca.sbcglobal.net hop it just dies like ATT isn't allowing traceroutes. I've been using Tor as a work around. About 3 months ago I basically had the same issue with openbittorrent.com's site.
I have a linux server and windows XP box. I can't ping the above IP nor tracepath/traceroute to the IP from my linux box.
I have ATT uverse.
EDIT: The site is hometheaterlounge.com (The IP won't do you much and its just the IP of the site host).
View 5 Replies
View Related
Nov 3, 2010
running apache2, i have already created a working sites. using virtual name hosting.but my problem is, i cant access my other sites except my server's localhost from other computer. i dont know what seems to be the problem, can you guys point me where to start looking?
View 2 Replies
View Related
Mar 30, 2010
I find it hard to explain but I will try. I have a small network using CentOS 5.4 with a static ip and I am running a web server which has an local ip of 10.1.10.100 and has the domain name of www.inwoon.net.My problem is I have other computers on the same network and can only access the web server using 10.1.10.100 instead of www.inwoon.net. am finding it to be impossible to test my web site work using external links that call back to my site
View 8 Replies
View Related
Jan 23, 2011
So what is the term used when your web site is getting spammed from many different ip addresses, hits are minutes apart?
View 14 Replies
View Related
Jun 29, 2010
I've only installed Ubuntu 10.04 Server yesterday, and it was the first time I had ever used it. As far and I can tell I have my Apache server up and running. When I go to localhost I get the 'It works!' page.
I tried checking my port in Windows, after I have Xampp loaded up, it says the port is working fine, and the site loads up properly, which leads me to believe the problem not in my router.
I've installed ddclient and put the proper information in as far as I can see but it still doesn't work. I've been testing my port here: [url]
And here is what I have in my ddclient.conf:
View 1 Replies
View Related
Oct 29, 2010
How can I block access to a certain internet site using ufw? Let's say I want to block access to www.xxx.zzz (IP 1.2.3.4) to any program and user; using iptables I can do
sudo iptables -A OUTPUT -d 1.2.3.4 -j DROP how can I do that using ufw? if ufw can not do this, where should I put this rule to persist it over reboot, without interfering with ufw chains infrastructure?
View 5 Replies
View Related
Aug 8, 2011
I have developed a site in localhost in my laptop. Here are the specs: Ubuntu 11.04, Joomla! 1.7, Db Ver: 5.1.54-1ubuntu4, PHP Ver: 5.3.5, Web Server Apache/2.2.17
This laptop is connected to a wi-fi network. Task: I like to see this local site from my laptop to other desktop computers in the same network. I understand that I need to do some changes in /etc/hosts what changes I need to do to be able to see my localhost site in the network.
View 2 Replies
View Related
Apr 28, 2011
teste.domain.com:
Code:
<VirtualHost *:80>
ScriptAlias /cgi-bin/ /home1/_sites/teste/site/cgi-bin/
<Directory /home1/_sites/teste/site/cgi-bin/>
Options FollowSymLinks +ExecCGI
AllowOverride None
[Code]...
View 2 Replies
View Related
May 11, 2011
My config works fine when enabled but after an hour the site stops responding at all. When I restart, flush or disable iptables it works fine again. Wondered if anyone could see any glaring errors I've made
# Generated by iptables-save v1.3.5 on Tue May 10 17:06:48 2011
*mangle
:PREROUTING ACCEPT [6034:13920296]
[code]...
View 3 Replies
View Related
Jan 8, 2010
I'm a full-time developer in my day-job, I get paid real money for it and everything! Nowadays I generally write web-based business apps using VB.net and ASPX.net, but I'v recently been asked to come up with a social networking type site (something in-between Facebook and twitter) that will initially be used for training purposes... don't ask or I'll have to send the men in the dodgie overcoats round
Problem is, it is to be written like real social-networking site, I've no idea what I'm going to make it look like and was, more fundamentally, wondering what to write it in?I've written commercial systems using Perl, PHP, ASP and the .net (VB and C) stuff.
View 9 Replies
View Related
Nov 9, 2010
I'm running Debian server 5.0.6 and the latest stable version of Apache. I am hosting a website and it will stop responding after an unknown amount of time. In order to make the website work again I have to run /etc/init.d/networking restart. The server is running a static IP address and is not resetting when the website goes down. I don't know where to start looking.
View 4 Replies
View Related
Oct 13, 2010
How I can benefit from a public external IP? Do I need a public IP to access my computer from a remote site?run a tftp server ?
View 1 Replies
View Related
Dec 20, 2010
I have the problem with Ubuntu to access the local site within my company network. This network has access to Internet, but the company's site does not have a public address. It is like "http:e-learning.local". I can access this site from any windows machine, but I can't access it from ubuntu. Only if I use IP address, I can access it. However, I have normal access to other sites on the Internet.
Do you have any suggestion how to solve this problem?
View 9 Replies
View Related
