we have a problem in accessing the site hosted on our web server from today.Till yesterday it worked fine. But when tried to access through domain name this morning it throws bad gateway error."The proxy server received an invalid response from an upstream server". this is the error i am getting.But it can be accessed fine using the ipaddress.All my dns entries are right.
View 2 RepliesI have been beating my head for the last few weeks on this problem, (although I have been taking the wrong approach, it seems).
I need a gateway to direct web traffic to three separate servers/domains. I have been trying to do this with both a dns server and , (seperatly), apache server to forward requests. The dns server was a no go, and <i can only get apache to redirect http and ftp.
After Googling this ALOT, I believe that what I need is a gateway server to redirect my traffic to the 3 different servers. I have been reading about using using nat and iptables for this and was wondering if anyone had any advice/suggestions on this. The other thought I had was to use something like pfSense to create the gateway, but I am still reading the documentation, and I am unsure if this approach will work.
On a remote system, when all you have is the ssh CLI -
How do you find out the ip addresses for:the Gateway
the DHCP server
the DNS server
Don't need to make any changes.
Which commands will display this info?
I want to configure an Internet Gateway with having proxy, firewall rule, bandwidth controller for an office containing 100 employee. can anyone suggest me which platform will be best and steps how can I implement it.
View 5 Replies View RelatedI got 2 servers, each on different locations (server 1 and server 2). I want all traffic on server1 included web browsing, applications etc., be always going through server2, like a gateway. I want the traffic to be encrypted (maybe use VPN?) So if I browse, or any logs pick up ip adresses from applications used by server1, I want it to display the IP address from server2 (Might be the wrong way to say it).
I always wants server2 to act as an firewall and logserver that logs all the traffic. I was thinking about using Snort for IPS/IDS solutions and OpenVPN for the traffic, but what can I use as a firewall? Most firewalls I find on google has its own OS/Distribution. Maybe Squid for logs? But squid does not support much protocols. Distribution on both servers are updated Debian/Ubuntu based.
I just set up a linux server which is acting as an internet gateway. For specific reasons, clients first make a vpn connection trough the internet to the linux server.
CLIENT ---->Internet----->Linux VPN Server ------> Internet
On the linux server iptables is configured for NAT. The problem is that the internet speed becomes slower than expected. I used windows and RAAS and the speed was pretty good. The server has only 1 NIC(eth0) and an alias interface is added to eth0. The alias is eth:0 with ip address 192.168.0.253
iptables config is as follows:
iptables -P INPUT ACCEPT
iptables -F INPUT
iptables -P OUTPUT ACCEPT
iptables -F OUTPUT
iptables -P FORWARD DROP
iptables -F FORWARD
iptables -t nat -F
iptables -A FORWARD -d 192.168.0.0/24 -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -s 192.168.0.0/24 -j ACCEPT
iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -j SNAT --to MY_VALID_IP
We are using Linux machine as a gateway server to connect our local network to wan. We use pptp vpn to connect our remote customers network, is it possible to connect VPN to the gateway and make local network to connect through it? So that there is no need to connect vpn in every local client.
View 3 Replies View Relatedsetup 2 gateway in my email server(opensuse).
now i wan to setup 2 internet lines for my email server, which mean that either one of the line is down, i still can receive mail from another line.
Example
Internet line 1 = ISP1
Internet line 2 = ISP2
my email server got 3 nic which...
eth0 = 192.168.1.2 (255.255.255.0) (from ISP1 GW 192.168.1.1)
eth1 = 192.168.2.2 (255.255.255.0) (from ISP2 GW 192.168..2.1)
eth2 = 168.168.1.2 (255.255.0.0) (connect to local LAN)
now existing GW set on the server is 192.168.1.1, mail receive and send through ISP1. now we wish to set somethings that once the ISP1 line is down, the server will auto switch to ISP2 gateway and continue send and receive mail without manually change of settings
I have configured bonding on 64 bit centos 5.4 I have to put the machine to a different VLAN for that i did the Ip change and restated the network. but i cant ping the gateway or any other server in that network. the cofig files are as follows
vi /etc/modprobe.conf
alias eth0 bnx2
alias eth1 bnx2
alias scsi_hostadapter aacraid
alias scsi_hostadapter1 ata_piix
alias usb-controller ehci-hcd
alias usb-controller1 uhci-hcd
alias bond0 bonding
options bonding mode=1 miimon=100
[Code].....
I have set up qmailtoaster as a gateway for exchange.
my smtproutes contain this:
thedomain.com:mail.exchange.com
and my rcpthosts contain:
thedomain
The problem I am facing now is, the exchange was able to send mails through me alright. But when mails come in, qmailtoaster is suppose to forward the mails to the exchange server but it is not, rather the mails are sitting in the toaster's queue.
Basically I'm working as part time administrator in a company, and still am at college. To keep the story short, the company I work with used to have a linux gateway, namely Untangle. We tried to upgrade to E-Box, which is supposed to have more options than Untangle, but it doesn't seem to work as it should. What I'm trying to ask here is this. I need a gateway system that handles QoS, Content filtering, Mail Filtering, DNS, Wan failover / load balancing, LOGS (important), Firewall and maybe the handling of separate users or groups. The ideal solution would be one that like the E-box, has a central control system, without the need to adjust code in CLI for configuration. I have some experience on CentOS and Fedora, so I am able to do some configuration, like installing Samba, DHCP and VNC.
View 2 Replies View RelatedI can very well configure squid transparent proxy on gateway server.But i want the squid transparent proxy on non-gateway system as i already have hardware firewall installed.i.e i want to redirect all the traffic coming through my gateway (hardware firewall) 192.168.200.1 to my squid server 192.168.200.3 on port 3128.How it is possible? Without transparent proxy by directly giving proxy ip in browser i can access internet but how to do it in transparent mode?
View 8 Replies View RelatedCan any one suggest which versions and flavour of linux is best suitable for GATEWAY server or in which version and flavour of linux this gateway server is available, which is used for internet management with MAC locking.
View 7 Replies View RelatedI have been searching google for a while now and have not found exactly what I am looking for. I would like to use my fresh install of ubuntu server 11.04 as my router/gateway for my home. I am not an expert at linux by any means but I can usually figure stuff out. I believe I need iptables, bind, and a few others probally. It eventually will also be a samba server but I have done a little with samba before. I do have 2 network cards, my router at the moment is starting to die and would love to have a more powerful router. I would also like to figure out how to do port forwarding in the router, as well as be able to see the load on the network cards. Maybe there is a program to show usage by user? As well as be able to do packet pritorization.
View 4 Replies View RelatedI want to do is setup a gateway(or router, idk what Ubuntu refers to it as.). So my set up would be Modem>Server>Switch>Router. I know that I need to set up it up as a DHCP server as well. I would also like to setup it up as a firewall too. I already have two Gbit cards that are already configured. So how do I do this? I already tried one tutorial, but it was old and was for Debian. I also installed ebox, but I couldnt figure that out either.
View 2 Replies View RelatedI posted it on another forum, but could not get response,So I have this cenOS, Ubuntu and windows operating system running on virtual machines.Now I gave them manual ip address, both ubuntu and windows machines can ping the default gateway, but not the CentOS.It should forward 0.0.0.0. to my cisco router address(192.168.5.254),
View 4 Replies View RelatedI haven't worked with linux before, I am a network administrator, mostly working with cisco routers and windows 2003 server configured with ISA, I want to shift to linux, since its a free OS, offers more than windows 2003 server, and I have the time and resources to test it at my work place, I want to give it a try. Now ... this is what I want:
I want to use Linux OS (server or desktop editions) as Internet Gateway, I have less than 50 hosts (internet users) on my network, and I simply want to know what is the most convenient linuxs distro for me to work with as a beginner to install, configure and administrating a linux OS(working as an Internet Gateway).
Its a simple network, 50 users connected to a switch, the switch to a server (where I will run the linux OS), the server to a cisco router, the router to the internet line. (Any tips on what do I need to be able to configure firewall rules and user activity monitoring like I am used to do with ISA on windows server 2003).
I have installed dhcp-server on ubuntu. And server is providing ip address to clients (Window machines) but not default-gateway but I have another network in my network and same configuration and same dhcp-server provides every information.
View 5 Replies View RelatedSince I have a new internetaccount, 2 days ago, I have a problem on my server [Fedora Core 8]. I use it as a router.
eth0 is for the internet.
eth1 is for my LAN.
But since my new internetaccount my server uses eth1 for the internet. This is a line from my syslog:
Code:
NetworkManager: <info> Policy set 'System eth1' (eth1) as default for routing and DNS. I killed the NetworkManager daemon and now it works but this must not be the way to do it? Where do I tell my server that I use eth0 for routing and DNS?
I have setup an ubuntu gateway server by using four NIC cards.
eth0 :210.212.235.107 is connected to the internet
eth1 :192.168.1.222 is connected to the local network
eth2 :192.168.2.222 is connected to another network
Here 192.168.1.222 is the gateway for 192.168.1.0 network and 192.168.2.222 is the gateway for 192.168.2.0 network.These network configurations are working fine, but i want to block inter network communication ie from 192.168.1.0 network to 192.168.2.0 network,i want to block the communication for securing the local networks more.I know iptable rule is enough for this purpose .But i cant find the apt rule for this purpose.
setting up my ubuntu server I would also like to run ubuntu desktop for the GUI.
setting up the static ip address with a 2wire gateway from att.
What I need is some information to be studied and learned by me in order to be able to create with Ubuntu Server an Internet Gateway Server. From my ISP I get about 50 public routable IPs through DHCP. Into my LAN I need to forward this public routable IPs to machines but I want to be able to manage bandwidth and also to be able to enable or disable Internet access for every client machine. Maybe with subnets? Maybe with dchp really? It would be nice if it would possible through DHCP!
View 2 Replies View RelatedI am looking for some advice on how best to lock down our office network to keep our employee's from wasting time on sites like facebook and ...... This will be my first time setting up a server as a gateway in a production environment so I thought I should get some suggestions on what the best packages would be to do this.
I essentially need to lock down our network so that i can monitor what everyone is doing on the Internet and block it if needed. it doesn't have to be web based or have a bunch of gui's, im fine with command line, configs and log files, but it would be nice.
I'm interested in commercial products as well as long as they are linux based.
i did install opensuse and everything ok; i did configure it to be the server and gateway for a little office network Everything seems to be ok most of the time but sometimes (usually between 5 and 7 pm each day) internet stops working and there is no way to let it start again. So i turn off the suse, switch all cables to the old fedora server, just turn it on fedora and internet works. Turn off fedora, connect suse, let it start and everythng ok...it happens all the times
View 9 Replies View RelatedI need to place an Ubuntu machine on a network where I have a DHCP server which does not configure the Degault Gateway parameter (we don't want ordinary users to browse the internet). Is it possible to leave the machine using DHCP and define the Default Gateway manually (as in Windows XP i.e.)? How?
View 1 Replies View RelatedI've set a two-node cluster using Pacemaker/OpenAIS. I have only one network and if I break this one, the communication between node is interrupted ... With a ClusterIP resource, when network is breaked, then each node start the ClusterIP => 2 same IP .. Is there a way to define the prefered location of a resource when connection between these nodes is broken ?
A <==> B
If one of the node lose the network, then follow a previously written rule : start resource on A (for example). B will know than it's not the prefered node and so, will stop to serve. Possible ? This is because if both node are connected, but a problem between these node occur and client can join both node ... then the split brain is problematic ... A better solution is to add a rule when the split-brain occurs : all node wich can't reach the gateway have to stop all resources ... And so, if it's A wich lose the network, service will start on B and only B without any problem ...
I have openSUSE 11.2 installed and i need to create a gateway server that allows virtual private network connections. I want to play with my friends some lan games, but we are in different networks, so i want to create this gateway server so we can connect with VPN clients to this server and play freely.
View 7 Replies View RelatedOur primary mail server is Exchange 2003 Standard on Windows Server 2003 Standard - don't shout at me; I inherited it already set up this way.I have a couple of hardware identical redundant servers (HP ML350 boxes), all with very fast 2 or 4 disk arrays, multiple core CPUs and plenty of memory, and I am looking at two potential new additions to the infrastructure.
A secondary mail server is high on my list of priories. I've been well and truly bitten by Exchange in the past and given that this particular box has been running four years straight and that it's mail store is dangerously large, having a secondary mail server in place suddenly makes a lot of sense.
A new Exchange 2010 box is currently being set up, but the secondary mail server will remain in place even when the new Exchange server is brought online, so this won't be a wasted exercise.... I also want a gateway box in place to filter and relay mail to the primary server, or to the secondary server if the primary is unavailable. Currently our outer perimeter is:
ISP supplied CISCO router
Draytek VigorPro 5510 UTM
Untangle running in bridged mode (primarily used for SPAM filtering, URL blacklisting, and very little else) Exchange 2003 sits behind the Untangle box. This is how I want to end up:
CISCO >> Draytek >> Ubuntu gateway >> Exchange/secondary mail server
I know I could replace/remove the Draytek but I want it to remain for several reasons, including lots of VPN dial-in users already configured and that it offers us an additional layer of email antivirus scanning before things hit the Exchange box. No point switching all of our remote workers over to new tunnels unnecessarily...
I have done some research and have started testing a pilot secondary mail server using Ubuntu/postfix DNS is properly set up and MX records and reverse PTR records are all present and correct, and things are looking encouraging so far. Before I go out over deep waters and start to flounder, has anyone who has done something like this got any obvious howlers I should be looking to avoid ?
Back in April I set up a Ubuntu DHCP server and a multiple VLAN network [URL] to migrate our various servers, workstations, etc off the 192.168.1.1 /24 network that everything was on because we where running out of address space. I built out the new network and everything worked great except our AD server would never get an IP address from the DHCP server (static reservation) and even if I set the IP statically on the AD server it couldn't ping the gateway and noone could log in. After several attempts to resolve this, including bringing in outside help, we where never able to figure out what the problem was.
Now 6 months later I have time to revisit the issue without effecting the live network. I used Acronis and imaged the AD server last Friday, cloned it on to another box with the same hardware, and put it up on the new network that's been sitting unused for the last 6 months. Today when I statically set the IP on the AD server (which is what I want) it connects and I can ping it's gateway 192.168.1.1 and all the way across vlans to a test sales agent workstation at 192.168.8.xxx on vlan 800 but only if I statically assign the agents station an IP address. When I try to get an IP address via DHCP it fails as destination unreachable. Nothing has changed in the last 6 months on the DHCP server but now it for some reason can't ping its default gateway 192.168.1.1. All of the config files are the same as they where left from the post linked above aside from the vlan id's used where changed from 1's to 100's (i.e. vlan 3 is now vlan 300) /etc/network/interfaces
Code:
auto lo
iface lo inet loopback
auto vlan100
iface vlan100 inet static
[code]....
why it can't reach the gateway, when I do a tcpdump I can see the DHCP requests come in on eth0 but the server never responds and I'm pretty sure its because it isn't "seeing" them since it thinks there isn't a network connection but I don't know how to trouble shoot to find out where the problem lies.
Back in April I set up a Ubuntu DHCP server and a multiple VLAN network [URL] to migrate our various servers, workstations, etc off the 192.168.1.1 /24 network that everything was on because we where running out of address space. I built out the new network and everything worked great except our AD server would never get an IP address from the DHCP server (static reservation) and even if I set the IP statically on the AD server it couldn't ping the gateway and noone could log in. After several attempts to resolve this, including bringing in outside help, we where never able to figure out what the problem was.
Now 6 months later I have time to revisit the issue without effecting the live network. I used Acronis and imaged the AD server last Friday, cloned it on to another box with the same hardware, and put it up on the new network that's been sitting unused for the last 6 months. Today when I statically set the IP on the AD server (which is what I want) it connects and I can ping it's gateway 192.168.1.1 and all the way across vlans to a test sales agent workstation at 192.168.8.xxx on vlan 800 but only if I statically assign the agents station an IP address.
When I try to get an IP address via DHCP it fails as destination unreachable. Nothing has changed in the last 6 months on the DHCP server but now it for some reason can't ping its default gateway 192.168.1.1. All of the config files are the same as they where left from the post linked above aside from the vlan id's used where changed from 1's to 100's (i.e. vlan 3 is now vlan 300) /etc/network/interfaces
Code:
auto lo
iface lo inet loopback
auto vlan100
[code]....
why it can't reach the gateway, when I do a tcpdump I can see the DHCP requests come in on eth0 but the server never responds and I'm pretty sure its because it isn't "seeing" them since it thinks there isn't a network connection but I don't know how to trouble shoot to find out where the problem lies.