I'm currently setting up a squid proxy which will be installed on a debian system configured as a bridge eth0/eth1 as br0. The problem I'm having is that port 80 requests are being proxied both ways where I only want the requests coming in via eth1 to be proxied.
Is there a way to do this? I've already tried changing the "-i br0" in the iptables redirection to "-i eth1" but no data appears to go through it.
I want to set up a bridge using bridge-utils within /etc/network/interfaces like is shown here in this guide: [URL] The problem is that, at the same time, I want eth0 to have a specific static IP address. Right now I have a configuration for eth0. This guide tells me that I should not configure eth0 outside of the br0 configuration.
View 3 Replies View RelatedI have laptop with Ubuntu wired to ferdora 12 server. Server RDP control to desktop is working.Laptop to server is not.See screen shots.I am thinking VNC server is not installed or configured properly on server.
View 14 Replies View RelatedI have been pouring over pages from some days over this one and come to my end.I have Meekat Guest, Xp host on Virtualbox; set up for folder share on virtual networking.Xp can see Linux shared folder, can withdraw to itself, yet cannot deposit to shared folder; error received "Disk write protected or in use"Linux access to 'workgroup' - xp machine is seen yet when clicked on returns the error of"Unable to mount location - failed to obtain share list from server"smb call from Host returns "Connection to STENCILCUP failed (Error NT_STATUS_UNSUCCESSFUL"
View 9 Replies View RelatedOk, here goes, I have a rdp server sitting at a remote store which is behind a router I do not control.
I might be able to get the phone company to add routing to it but at the moment I'd like to do this with ssh and reverse port routing, because I might need this for other ports later and I never know if the phone company wont break other routings already in place or just screw up the entire thing .
I am able to have a linux box at the site ssh into a server located where I'm at and reverse port forward port 3389 to that server. I can also then ssh into that server from my linux box and port forward 3389 to my box, under another port since my 3389 is already in use. Finally I can use rdesktop to rdp on the my local box which bounces it through the server and back to the linux box which forwards it to the rdp server (A Windows 2008 server to be exact). This is all well and good and works reasonably fast, but, I need to be able to have users on windows boxes at my site do this without all of the rigmarole. I need to, I guess, redirect a normal open port, or create one, on the server where I am so that it connects internally to the reverse forwarded port or open the internal port to the outside. So I guess I need to make it a 'gateway' for that one port, this way all I have to do is point the rdp clients at the main server and port to have it eventually connect to the rdp server in the remote store.
how to go about doing it. I guess I need an iptables entry forwarding the port but I'm not sure what is should be.
The other option is opening up the port 3389 to the outside but I'm not sure how to do that either. Right now I have no iptables entries at all but even if I turn off iptables completely port 3389 is not available if I try to use it from another pc on the network but I can rdp from the server itself using the 3389 port so I know it's working internally.
There is this server where in I want to use port redirection using iptables. For port redirection I have used nat table with PREROUTING chain and REDIRECT option. Like:
Code:
iptables -t nat -A PREROUTING -p tcp --dport pop3 -j REDIRECT --to-port 8110
It just does not work. I have tried to redirect other ports as well but nothing works.
[code]....
I am using squid proxy server in my Linux machine for caching. Now i want run my squid in transparent mode not set proxy settings in browsers.Like squid is running port 3128. If we redirect the port 80 packets to port 3128, looping is occurred.How to avoid looping?
View 5 Replies View RelatedI have been trying to achieve something through iptables but something is going wrong. I want connection/packets arriving to a specific computer (let's call it "server") from another specific computer ("client") inside the same network to be automatically redirected to a remote computer in the internet and vice-versa. I tried doing that using iptables with these commands on the "server" PC:
Code:
iptables -t nat -A PREROUTING --source 'client-ip' -j DNAT --to-destination 'remote-pc-ip'
iptables -t nat -A PREROUTING --source 'remote-pc-ip' -j DNAT --to-destination 'client-ip'
[code]....
I'm have a base level understand of linux at this point. I have Debian box that I am trying to do some port redirection with.
I have my external NIC as eth0 with an IP of x.x.250.5.
I have my internal NIC as eth1 with an IP of 192.168.1.1.
On the internal network I have a NAS box with a web interface at 192.168.1.100. What I need is to set it up so that a request to x.x.250.5:8080 will some how forward/redirect to the internal network NAS box at 192.168.1.100:80.
I have a machine with two network cards running linux mint 8 XFCE (which is compatable with Ubuntu Intrepid Ibex). eth0 gos out onto the network propper, has a static IP address of 10.10.10.10 and serves DHCP requests for the 10.10.10.x subnet.
eth1 is pluged into a PPPoE concentrator, and has a static address of 192.168.0.1 (I would have left it alone but pppoeconf wouldn't work unless it had an address).
ppp0 is the piont to piont over ethernet conection that is corectly created when I run pon. I have both guard dog and guide dog installed but they are both disabled.
Now, the weird part: I can ping the IP number of the machine at the other end of the pppoe conection (when it changes I can still ping the new number), the local IPs (10.10.10.x), but *nothing* else not even the DNS servers passed to the machine during ppp conection which are in the same sub net as the machine I can ping.
When I try to ping or trace the route I get an error message like: reply from 10.10.10.10: desination unreachable There is nothing wrong with the network at the other end, as I can make an Identical PPPoE connection from other machines on the network if the the concentrator is pluged into the hub (a rather unsafe place for it to be) and it all just falls into place.
What seems to be happening is that the machine is treating eth0 rather than ppp0 as the internet gateway, and passing the packets round in circles.
i have two ISP, and i want to bridge each IP. Here my example;
ISP one : 10.10.10.1/29
ISP two : 172.16.100.1/28
can we setup for two ISP with different gateway ??
I have 2 NIC's in a box. One of them is external and doesn't matter for this question I don't think.
The other NIC is 192.168.100.3. It hosts an iSCSI Target and SMB Share on my LAN. It's works great.
I have another PC that has NIC at 192.168.100.101 and it hosts my DHCP (Scope: 192.168.100.5-25) server for my LAN.
I have a hardware firewall at 192.168.100.1 and it serves inet to the LAN on a different external connection.
So...
I currently have a WAP (cheap p.o.s. netgear router in WAP mode that keeps overheating). I want to eliminate the WAP device and add a WiFi NIC to the Top PC above.
So, on the first system I would have:
NIC 1: External IP and External Gateway
NIC 2: Static IP 192.168.100.3
Proposed WiFi NIC 3: Static 192.168.100.4
Question:
If I bridge NIC 2 and NIC 3 like this:
# brctl addbr br0
# brctl addif br0 eth0
# brctl addif br0 eth1
Then I simply put the WiFi in Ad Hoc, will another WiFi in Ad Hoc (for example my laptop) be able to "see" 192.168.100.101 (DHCP) & 192.168.100.1 (Gateway) (via WiFI 192.168.100.4 through the bridge to 192.168.100.3 and on to the LAN)?
Also, can the two NIC's be bridge together even though they are the SAME subnet?
I tried google but without success. I have a small home network and one computer has to work as a bridge (comp1), it connects to the internet through wlan and is connected with cable to other computer (comp2), I would like to to make that second computer member of a local network with internet access.I was trying this:
Code:
ifconfig wlan0 0.0.0.0
ifconfig eth0 0.0.0.0
brctl addbr br0
brctl addif br0 wlan0
brctl addif br0 eth0
[Code]...
I have a Gateway laptop running ubuntu 10.04, and just now have a compaq desktop running windows 7, my laptop has wireless internet connection, it's the only way that i can get it in my room. my desktop has only ethernet plugin. My question is, If i plug my laptop up to my desktop using an ethernet cable, can i bridge that connection to get internet from my laptop(using the wireless) to my desktop(using the cable)
View 1 Replies View RelatedMy first, followed a couple of Ubuntu how tos and used LinuxFoundation bridge doc. I still have managed to mess it up! Here's the simple test network, First -- ALL hardware is fine, I have verified everything, to the last cable. In fact this is being written from the test network without the bridge running.
OK, I have a firewall that has dhcp server on board, I have a client workstation with dhcp enabled network card(eth1) (the one I current typing from). There are 2 switches between the firewall and the workstation (eliminate xover issues when testing) That's it. All is well. Now I want to place a computer in line between the firewall and the workstation. It is a 10.04 server install, no gui, minimal install. It has 3 network cards, One of these ports was used to set up the server. It is set up dhcp and it works just fine, I spent all kinds of time ssh'ing into the box, so the dhcp client is good to go.
I disconnected the cable to that interface and ran a cable from the firewall's switch to one free port(eth0) and a cable from the workstation switch to the other free port(eth2). From the console I do ifconfig -a and there are all 3 eth's, 0,1, and 2 I then open /etc/network/interfaces and to lo and eth1 I add this:
[Code]...
I am trying to connect networks connected via locked down wireless routers. Here is the setup:
Internet <-> eth0 - server - eth1 providing DHCP <-> hub <-> wired clients & to WiFi router with NAT & DHCP <-> WiFi clients.
I want the wired clients and the WiFi clients to be able to talk to each other directly, but the locked down WiFi router (meraki) is in the way. the wired clients get their IP address from the server, the wireless clients get theirs from the meraki WiFi router. I can't reconfigure the WiFi router to bridged mode without paying meraki a sizeable annual license fee. What options are out there to get through the WiFi router? I came across OpenVPN and ethernet bridging, but broke networking on the server when trying to configure the br0 interface. I followed these instructions: [URL]
I am using 3 machines in a LAN connected through a hub. My intention is to have a end-to-end connection between 2 machines so that I can control delay/loss rate. For that purpose, I am using a 3rd machine with 2 NIC and intend to use a bridge and installing Dummynet in this machine to control the traffic between the other 2 machines.I have successfully installed Dummynet in the bridge machine. Now I require to configure Ethernet bridge in the machine. What is the process? Do I need a kernel compilation or can be done without it? read somewhere that recent kernels can be configured without recompilation.I am using Mandriva 2010 with 2.6.31.5-desktop-1mnb kernel.
View 1 Replies View RelatedI have a hub with some VoIP phones attached as well as a machine that is used to record the calls. This all works fine as all packets coming to/from the voip phones are also seen by the recorder so it can process them as necessary.
What i want to do is put another machine between the hub and recorder and have it act as a transparent firewall. So far i've managed to successfully set up a bridge on ports eth1 and eth2 and all the packets destined for the recorder go through the bridge fine. The problem is that the bridge is acting as a switch so the packets from the phones are received on eth2 but don't get retransmitted on eth1. Is there any way to configure the bridge so that all packets received on eth2 are transmitted on eth1, i.e. have it act as a hub instead?
I have a LAN (2 PC !) wire connected and I use a Huawei e182e to join the internet (If you have problem to install the Huawei on Linux, don't install drivers proposed on forums or don't try to unlock it. It's not necessary, simply install a kernel > 2.6.34 and it will install itself as a perfect plug and play). On the unconnected machine, the Internet is accessible normally from the broadband dongle, but the connection stops when I plug the LAN cable. It's normal since the PC cannot use both network connections simultaneously without a previous configuration, and the question is precisely there !
Bridging could be a solution but mobile broadband uses ppp protocol that is not on the same layer as wired LAN. brctl refuses to add the key into the bridge configuration. Vtun seems a better approach since it works more independently from the protocols, but it must be installed on both sides and the broadband dongles does not accept software installation in it. Documentation from Huawei is quite inexistent. Actually the story could be the same for a computer connected to a wired LAN and using a wireless dongle, but here bridging is feasible (not tested by me) because they work on the same layer. I tried to deactivate LAN switching in the BIOS: no result static address with gateway pointing on the other device (I tried everything) no result. How to bridge a ppp dongle with a wired LAN?
I have a Windows 7 machine which is having issues with a Linksys Rangeplus wireless card, specifically kernel dumps every couple of hours. I have an old (really old) tower sitting in my room which I would like to turn into a wireless bridge so that I could connect the windows box to the internet without dealing with the blue screens. I plan on using Knoppix as I have it available already, but if it would be easier with another distro I can always download it. If this doesn't work I'm going to have to buy an old WRT54G offline and convert that with DD-WRT...
View 3 Replies View RelatedI want to implement the following scenario :-[workstation1] <--ETHERNET-->[device 1]<--SERIAL-->[device 2]<--ETHERNET-->[workstation2]In short, a LAN over Serial link (RS-232 for instance).If there is a utility that offers such functionality, kindly give me the name, i've googled a bit, and found ser2net, but that only works with TELNETing.. i want it work like a normal LAN like file-sharing n all but over Serial.If there is no such software, then obv i have to program myself. regarding which i have more questions
View 9 Replies View RelatedI have added a bridge "mybridge" using brctl bu not added any interfaces yet. Even the brctl show command looks: bridge name bridge id STP enabled interfaces mybridge 8000.0000000 no
Now I try to do: brctl delbr mybridge and it gives: bridge mybridge is still up: can't delete it
I performed ifconfig mybridge down but still the problem persists!
How to delete the bridge?
I've been reading for days now, but can't find an example to the following. I have an ubuntu server, with two KVM virtual machines running ubuntu jeos. I want each VM to have it's own static IP, plus one IP for the server. How on earth I do that? do I need to create two bridges, one for each machine? and if so, how do I assign static IP to each?
View 2 Replies View Relatedit's one of the first time I'm using linux! For a report I have to answer to the question (the title) but it's very strange! A packet has an ip address? or does it referer to the IP address of the destination? And in particular this is the output of tcpdump -en ip proto 1 (while I'm sending ping -sv remote_machine)which are:
What are IP and Mac andress of a packet that went from my machine to the bridge? and what are the IP and mac of a packet that went from the router to my partner's machine? And how could i find the average delay that a packet experience in the bridge?
[Code]...
I want to connect my dataone broadband connection in bridge mode in fedora 7. As i am currently using a bridge connection through this modem (smartAX MT882) in win XP, i want a bridge connection in fedora 7 too to access the internet from linux. I have gone through some forums discussing this issue. somewhere i have found the option "adsl - setup" and tried it in my fedora 7. But it is showing the message "adsl- command not found" on this issue. I need a detail step by step procedure for brigde connection using datone in fedora 7.
View 3 Replies View RelatedI'm trying to set up a Linux box with three ethernet interfaces as a bridge where I can do some packet filtering. I don't want this box to have any IP stack, packets that are allowed through the filter should be forwarded without changes just the way a switch would do it. I have build a kernel with ethernet support but no IP stack. It detects my interfaces, and I can bring them up with the ifconfig or ip commands. But when I try to start a bridge with brctl I get this error message:
can't setup bridge control: Address family not supported by protocol
A google search for that error message gave me no results at all. The command I used was "brctl addbr br", which does work on a full installation. Does brctl require IP support in the kernel? That would be a bit odd I think, since brctl doesn't do anything IP related, everything it does is at lower layers?
Does anybody know what the above message means, and what I might have been doing wrong?
What I am trying to do: bridge 2 NICs in my linux box eth0 connects to linsys router (which in turn connects to internet) eth1 connects to Xbox 360
What I did:
Code:
ifconfig eth0 0.0.0.0
ifconfig eth1 0.0.0.0
brctl addbr br0
brctl addif eth0
brctl addif eth1
[Code]...
I'm sure this is a bridging issue and there is just some option I'm not setting correctly. Also, the reason I'm connecting the Xbox 360 directly to the linux box and not to the router is for traffic monitoring purposes. Note that all connections and functionality work perfectly when the Xbox IS connected through the router.
I'd like to pass all traffic between bridge ports via the FORWARDING chain, so I changed following sysctl parameters:
Code:
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1
[code]...
I have spent the last 24 hours trying to work a wireless bridge (a D-Link DAP-1522) into my network configuration. It would connect to our gateway here at home (some 2WIRE piece of garbage AT&T hands out, but I digress), and two computers (an Ubuntu Desktop and an Ubuntu Server) would connect via the bridge.
The bridge SEEMS to connect to the router, and indeed, the Ubuntu Desktop PC is able to access the internet. The server, however, is not, and neither computer can communicate with the other (ping, SSH, etc.) furthermore, the router recognizes the presence of these two computers on some level, but does not seem to know their IP addresses (I assume this is related to the computers' inability to communicate).
Before I get too far into this, here are a few links/items for the sake of clarity. The first is a shoddy diagram of my (proposed) network topology, for all of you out there who, like myself, understand things visually:[url]
This is the output from running "ifconfig eth0" on the Ubuntu Desktop PC, which sits behind the bridge. The PC is connected, and can ping hosts across the Internet, but can only ping the router locally (that is, it can't ping any other device in the house, on either side of the bridge):
Code:
The router uses wireless encryption, not MAC addresses, to restrict access/traffic, and all wireless devices (including the bridge) have been provided with the proper credentials. There shouldn't be any devices being denied access on account of their MAC address. In fact, the router's control panel lists the PC and the Server among the recognized devices (even lists their MAC addresses), but provides no IP address and always considers the two computers to be "offline." And yet, I am writing this very post from the Ubuntu PC. Sigh.
I am very comfortable with computers, and reasonably comfortable with Ubuntu/Linux and the Linux command line -- I've been using the operating system for just over a year now -- but networking issues have always been perched right on the edge of my understanding. In short, it's likely this issue has more to do with me than it does with the hardware itself (although the more forums I browse, the more I start to doubt this bridge...).
I have a Ubuntu server with multiple NICs and I'm just thinking about a potential scenario that might come up soon.
Imagine I have a network on floor 1 with an independent cable connection to my Ubuntu server -> switch -> assorted devices, on the subnet 192.168.0.x Now imagine friends upstairs have another independent network with cable -> router -> assorted devices, on subnet 192.168.1.x.
How can I set up my server to provide access for the 1.x subnet to the 0.x and vice versa. Ideally the devices all access internet from their appropriate subnet. I've read something about bridging, is this what I need?
