Server :: Giving SSH Access To Machines On LAN From Internet?
Mar 7, 2011
I am having a server in a corporate data centre. There are some virtual machines running on it.The main server is accessible from internet via SSH. There are some people who within the lan access the virtual machines whose IPs on LAN are
Quote:
192.168.1.1
192.168.1.2
192.168.1.3
192.168.1.4
from internet only one host is allowed SSH. This machine has public IP and is also connected to LAN on the IP 192.168.1.50. Tunnel is not allowed on our network.So now I am came across a solution as explained on this link. I am not clear with on which machine .ssh/config file I add following
Code:
Host securehost.example.com ProxyCommand ssh user1@insidemachine.com nc %h %p Should above be done on gateway where public IP and ssh is allowed or client on internet who has to login. Do I need to create separate accounts on the gateway also so that the users who can SSH to gateway then are forwarded to inside machines? Or one account on gateway is sufficient for different people logging in via internet to my gateway and then forwarded to internal machine?
Then do I need to create an account user1 on the gateway also?
1) What is the correct syntax for ProxyCommand on gateway's .ssh/config should I use
Code:
ProxyCommand ssh user1@inside.machine nc %h %p
or I should use
Code:
ProxyCommand ssh user1@gateway.com in nc %h %p
2) Should I create new user accounts on gateway also which exist on internal machine?
View 4 Replies
ADVERTISEMENT
Aug 26, 2010
I have a linux box (fedora) with two ethernet cards eth1 and eth2. On eth1 I successfully configured a PPPOE internet connection. Such that from the server I can browse the internet. On eth2 I wired it to a wireless router essentially to provide the wireless cloud. On eth2 I also configured dhcp, such that the Linux box is both PPPOE and DHCP server.However my clients on the LAN cannot access the Internet.
On passing the routing command I get
Destination Gateway Iface
196.44.x.y 0.0.0.0 ppp0
192.168.1.0 0.0.0.0 eth2 (my subnet)
0.0.0.0 0.0.0.0 ppp0.
The router (functioning as a wireless access point mainly) has a fixed IP address of 192.168.1.2 and eth2 has IP address 192.168.1.1. The dhcp file running on Linux has been set with option router (Gateway) 192.168.1.1. I cannot figure out how to correctly set the routing table such that my clients on wireless can access the internet cloud. I googled and googled but no solid solution. Any suggestions?
View 3 Replies
View Related
Oct 8, 2009
Yes, I know this is not a good practice, and this is only a short-term solution.I have a server with a web-file-server daemon running internally as root, so the permissions for all files it transfers/creates have a uid/gid of 0:0.This is fine for the daemon, but I would like to manage those files from another workstation - actually a few workstations on a very limited LAN subnet - through NFS. How would it be possible to have users from a certain subnet mount NFS with root read/write abilities?I have seen the anonuid/anongid options (for the /etc/exports file), but I'm not so sure this is the right way to go.
View 5 Replies
View Related
Jul 19, 2010
I installed a server called Oracle VM Manager, which is actually a web based application to manage Oracle VM server.After successfully installed everything, it suppose to be access by browser using But strange thing is, I can see web pages from the server itself with but any other machines to access it with hostname or ip address all failed.
View 2 Replies
View Related
Nov 10, 2009
in my network, users has total access to their PCs, so theres a problem to filter (URL, ports,etc.) their virtual machines installed (they can assign self any IP, e.g.)
Id thought about use the MAC prefix in VMware VMs (00:0c:29:*), but i can only found a way through DHCP, and this isn't a good solution (they can assign a static IP to workaround...)
It will be better using firewall (iptables), but I don't found the way to add rules based in MACs with wildcards.
View 2 Replies
View Related
May 29, 2011
I have an USB drive and I made a share with samba and accessed it from windows computer. I've been using openSUSE 11.3 with no problems.
Recently, I've installed openSUSE 11.4. Now I can't write to my USB Disk through samba.
It is formatted as ntfs.
samba log tells a lot of things.... for eg.:
Code:
[2011/05/30 11:46:54.148085, 2] smbd/trans2.c:5531(smb_set_file_dosmode)
smb_set_file_dosmode: file_set_dosmode of 1 failed (Permission denied)
[2011/05/30 11:46:54.148163, 3] smbd/error.c:80(error_packet_set)
[Code]....
View 9 Replies
View Related
May 5, 2011
If I have a desktop with a USB wifi adapter connected to the internet through an ethernet cable, is it possible to create a wireless network using the adapter that will allow other users to connect to the internet through mine? I'm in a fairly low-tech place for the next few weeks and getting a router isn't likely.
If it's possible, anyone have links or instructions for how to do it?
View 7 Replies
View Related
Aug 4, 2010
Is there any way to install .deb packages without giving root access?That it, I have root access, but I dont to give root access to the .deb package.This is for instance to install the .deb of SipderOak online backup took, or to install the .deb of openofficeWhenver available, I compile from sources, but sometimes only the .deb is available.
View 13 Replies
View Related
Aug 4, 2010
Is there any way to install .deb packages without giving root access?That it, I have root access, but I dont to give root access to the .deb package.This is for instance to install the .deb of SipderOak online backup took, or to install the .deb of openoffice.Whenver available, I compile from sources, but sometimes only the .deb is available.
View 14 Replies
View Related
Oct 1, 2009
In my computer networking class I have the option of doing a project where I set up a dns server for our classroom network. The problem is that this network is totally separate from the school network and we aren't allowed to connect it to the internet. I want all the machines to ping each other by name instead of ip using dns instead of host files on all 20 computers. I read on a site somewhere that you cannot do this because the dns queries will always go to the root servers. Is this correct? Is there some way I can do this using dns? The machine in question is using Ubuntu 9.04.
View 1 Replies
View Related
Nov 2, 2010
Ok i want to access my server from internet, ok I have checked with my mobile internet provider (3) they say they dont block any ports, is it just a case of letting the firewall let external access to pc? ( no router just mobile dongle)And do i just ssh into external ip on ssh port
View 2 Replies
View Related
Jul 15, 2010
Is there a safe way for me to configure my server for access from any internet connection as well as from my home/office LAN? I'd like to be able to access file shares, webmin, the router console behind my Gateway for maintenance purposes. Access to Server Desktop itself would be a bonus.
View 12 Replies
View Related
May 20, 2011
I am using a CentOS 5.4 server for Snort (it's actually using the easyIDS config). I'm trying to modify some things, and I've noticed that I can't seem to download any files. WGET, FTP, etc... all just time out. It's not a network firewall issue, as I've been monitoring the logs and see no blocked traffic, and other machines on the subnet can get outside with no problems. I checked the Cent firewall using the setup command, and it says it is disabled as well. I'm very new to linux, so I'm wondering how I can troubleshoot this? The wget and ftp errors just say the connection timed out, but I'm not sure why.
View 2 Replies
View Related
Jul 29, 2011
Wvdial give me this error
PHP Code:
--> WvDial: Internet dialer version 1.60--> Warning:
section [Dialer Defaults] does not exist in wvdial.conf.
--> Cannot open /dev/modem: No such file or directory
--> Cannot open /dev/modem: No such file or directory
--> Cannot open /dev/modem: No such file or directory
View 1 Replies
View Related
May 31, 2011
I got an update notification from update manager just now and tried to update (internet working perfectly) but before it finishes downloading it gives an error of "check internet connection" constantly
View 8 Replies
View Related
Aug 10, 2010
I need to give a user write access to /var/www and its subdirectories. The current directory permissions are as follows:rwx r-x r-x root root
I added the user to the root group but that didn't seem to help.I read I could chmod -R to change the access to write for the www directory and subdirectories but I don't want to change things and mess up the website. How can I give the user access to write to the www directory and subdirectories without messing anything up? Would changing the www directory group owner to his group cause an issue anywhere?
View 3 Replies
View Related
Jun 19, 2011
I have a server that was set up by a friend so I have a location to save all my documents for work in a RAID array.
It is on a static IP address, I can ping the hub and other computers on the network absolutely fine.
I can't connect to the internet, the router in question is a Netgear CG3101D. Logging into the router I can see that the server is a trusted device and in all the parameters are the same as other computer running Ubuntu Studio.
Does anyone have any tips of how I can find out how to find what is wrong?
It is Ubuntu 10.04.2 LTS (Lucid).
View 3 Replies
View Related
Jul 8, 2011
First off - I'm running 11.04 as a VPS on an OpenVZ.
I've set up a very basic environment of LAMP + mail server. Installing apache, php, mysql and proftpd all went fine, but whenever I install iRedMail (which is postfix + dovecot + clamav and few more packages) I lose the internet connection.
Although the server is easily reachable by ssh and http, I can't connect anywhere from the server. At first I thought it only had issues with resolving domain names, but now I see it doesn't even ping IPs as well.
Code:
# ifconfig
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
[Code]....
View 1 Replies
View Related
Jan 15, 2011
I have install centos 5 in my dell laptop, now i want to configure and run wifi to access internet through wireless.
View 5 Replies
View Related
Jan 2, 2011
I'm setting up an old box as a dedicated file-sharing server on the LAN as well as an internet web server for my personal web site but I have no network connection. My computer is connected to a router which is connected to my DSL modem. The router has the Ubuntu box's MAC address as well as a Win7 box, which connects to the internet fine.
Here is what I've tried:
1. Check routing table
Code:
2. Try to add a default gateway to the internet on eth2, this happens:
Code:
3. I edited resolv.conf, which was empty, adding:
4. I edited /etc/network/interfaces as follows:
Code:
Then I type the following:
Code:
And it keeps doing this endlessly because it's not finding the DHCP server, presumably...? This didn't solve the problem and so I attempted another configuration:
Code:
Still, not internet connection and no ability to apt-get anything (says packages not found)
So, this didn't work either. What I've tried should work, especially the route command. Now why won't it work?
View 13 Replies
View Related
Apr 28, 2010
Centos 5.4 distro using on remote machine. I have remote site where internet access given via squid proxy. So when we enter in browser it start working internet fine. But on command line (bash shell prompt terminal) like wget, ping, nslookup, traceroute etc., these commands does not work.
View 6 Replies
View Related
Jul 24, 2010
I've a SQUID proxy server installed in SUSE 9.0 ES server. I've created cache dirs on seperate partitions for better caching. Its working fine. But since last 15-20 days, i've experienced very slow net access to clients. I've gone through the /var/log/messeges file, it generates a two line error messeges
client read request fd602 invalid request
parse http request: unsupported method;HET
This messege increases as the number of clients increates (for internet access). The apperance of error messege lowering down as soon as the number of clients reduces.
As the count of clients increases error messeges increases, internet access getting slower and slower.
View 1 Replies
View Related
Feb 20, 2010
I have configured squid server and it is working fine. I want that only specific ip addresses in my LAN should be able to access internet and for that I have given these entries in access control lists in squid.conf file:
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443
acl Safe_ports port 80
acl Safe_ports port 21
acl Safe_ports port 443
acl Safe_ports port 70
acl Safe_ports port 210
acl Safe_ports port 1025-65535
acl Safe_ports port 280
acl Safe_ports port 488
acl Safe_ports port 591
acl Safe_ports port 777
acl CONNECT method CONNECT
acl QUERY urlpath_regex cgi-bin ?
acl apache rep_header Server ^Apache
acl our_networks src 192.168.0.181/255.255.255.0 192.168.0.182/255.255.255.0
And in http access I have given this:
http_access allow our_networks
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost
http_access deny all
In this I want that only 192.168.0.181 and .182 should be able to access internet but Now the problem is that all the IPs in the LAN like 192.168.0.20 are also able to access internet. What changes I need to do to allow access to specific IP addresses. I am not using any firewall or iptables entries and i am manually changing in the firefox at client side to access internet.
View 3 Replies
View Related
Sep 29, 2010
Am using Suse 10.2 for internet and e-mail server. currently all my users have access to the internet if they know how to setup their web browsers. how do i deny some users internet access so that a user can only access his/her e-mail but not internet.
View 1 Replies
View Related
Dec 14, 2010
I was having a hard time configuring ubuntu server with command line so this is the steps I did to install the GUI;
Code:
then
Code:
then
Code:
The GUI started up fine and I logged in as root, then I tried Update Manager and received this error message:
Requires installation of untrusted packages
I tried this in terminal window
Code:
and got
W: Failed to fetch [url]........(-5 - No address associated with hostname
So I did System Testing and got the result that my network was fine but my internet failed!
I could do command line update no problem before installing GUI. I can see it on the network on another computer though.
Trying to setup without the GUI is starting to look easier than with.
View 10 Replies
View Related
Apr 21, 2009
We have Apache installed on CentOS 5.3 in our laboratory. Indeed the server is running fine for almost two years since it is actually the first CentOS 5 that was released just regularly updated. Now, most of our applications are custom made PHP applications and until now we somehow managed to avoid using PHP to fetch files that are on the internet itself. But now we are desperate because we need to allow PHP to fetch files through Apache but it seems as if Apache is not allowed to make a connection to the outer world. Additionally we use a proxy server to connect to the outer world so right at the beginning http_proxy is used to set that environmental variable. And for the root user it all works fine after that but it seems as if the apache user is not allowed to access the internet. Just to make a remark our web server can be accessed from the outer world so its a one way street for now.
View 1 Replies
View Related
Feb 15, 2010
i want to buy a pci weasel, people told me i will have access to the server over internet with this board.Does anyone have any experience with this kind of card?How can i have access to server over internet to the bios,etc.
View 1 Replies
View Related
May 28, 2010
I am getting an access denied when trying to log in via SSH to my home server with putty(windows) over the internet. I can use any user including root and get the same result. If I use my Android phone with the ssh terminal command I am able to successfully log in and use the server.
View 1 Replies
View Related
Jan 7, 2010
i have successfully setup PPTPD on my server and I can open a VPN tunnel but my clients can only ping the server's IP, they don't have access to the internet through the VPN.
i have searched different forums and understand that I have to create a route on the server to route packets between the VPN interface and my internet gateway, but I didn't manage to get this work.
here is what my setup looks like:
Code:
root@r31495:~# ifconfig
eth0 Link encap:Ethernet HWaddr 00:1c:c0:c7:13:35
inet addr:94.23.197.XX Bcast:94.23.197.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
[Code]....
View 9 Replies
View Related
Apr 28, 2010
Ubuntu lts server distro using on remote machine. i have remote site where internet access given via squid proxy. so when we enter in browser it start working internet fine. but on command line(bash shell prompt terminal) like wget,ping,nslookup,traceroute etc these commands does not work.
View 3 Replies
View Related
