I have 1 root-server with 2 NICs, both having their own internet IP addresses:
Code: eth0 = 8x.x.x.183
eth2 = 8x.x.x.205 We only have one gateway on that network:
Code: gateway = 8x.x.x.1 We want to use eth2 for postfix + http, and eth0 for all the other stuff.
How can this be setup ? With route / ip route / iptables ?
I have installed fedora 11 64 bit on a new computer. I have no problems accessing the computers on my local network, but can not get past the gateway. The gateway is running windows XP with IP address 192.168.0.1 and is named "internet". When I boot the new computer in windows, there is no problem. Here is the output of some commands I saw in other posts with similar problems:
$ /sbin/ifconfig eth0
eth0 Link encap:Ethernet HWaddr 00:24:8C:7F:10:0C
inet addr:192.168.0.245 Bcast:192.168.0.255 Mask:255.255.255.0
inet6 addr: fe80::224:8cff:fe7f:100c/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
[Code]....
I have 17 system (sys1,sys2,sys3.....sys17) in my office, and i am willing to setup a dedicated system to act as a firewall for that i have selected sys1 with two NIC(eth0 for local network and eth1 for internet) and i have configured to access internet in my office for that i have opened a wellknown port 80.but my clients are not accessing the internet..
and please check my sample IP configuration !!!
interface : eth1 (ISP IP)just for example
IP :192.168.0.2
gateway:192.168.0.1
dns:202.56.230.5
dns:202.56.230.6
Interface : eth0 (my local lan )
192.168.1.1
255.255.255.0
IP address of xp clients ranges form 192.168.1.2 to 192.168.1.16 with default 255.255.255.0
my question is that which gateway address and dns i have to give to my clients for accessing internet ?...
I am wanting a computer with an external dialup modem (ppp0 modem through a com port /dev/ttys1) to act as a gateway to the internet, forwarding internet traffic through ethernet (eth0 is set to static 192.168.2.2) to a router (the router is 192.168.2.1) where it will be broadcast to other wireless computers like my laptop (192.168.2.3). I've had this setup until recently when the gateway computer (the one with the modem) died. Now I'm replacing that machine with another box and an install of Ubuntu 10.10 but so far things aren't working for me.
Success so far:I have dialup access working on the new box. Took me a while to work out the configuration for getting dialup working, though the IP address is Dynamic (or it won't stay connected), "Check carrier line" is off, and "Ignore Terminal Strings (stupid mode)" is on in order to successfully connect and stay connected to my ISP. I also had to make my normal (non-root) user "lancer" a member of the "pid" group (the reboot) in order to use gnome-ppp as non-root. The laptop (192.168.2.3) is successfully connecting to the router (192.168.2.1) as I can see the router configuration page when I type http://192.168.2.1 into the laptop's web browser. This setup is unchanged from how I had it before when this was previously working and I don't want to change how the router itself is set up. What I want is to know what to fix in the new box in order to get it connected to the router (through ethernet) and bridging the internet through.
My problem is that whenever I plug in the eth0 from the gateway (192.168.2.2) to the router (192.168.2.1), Ubuntu's automatic plug-me-in network detection kicks in and I find my dialup no longer working through some kind of IP conflict (at least that's what I think it is). Maybe I don't have the "gateway" correctly assigned? (in the gateway computer for the ethernet connection, I had it pointing to itself as I don't know what to put for "gateway IP" as that is automatic So, just to check my connection, here I am pinging google (from the gateway computer which has the dialup modem) once a dialup connection has been made.
Code:
lancer@lancer-desktop:~$ ping www.google.com
PING www.l.google.com (74.125.237.17) 56(84) bytes of data.
64 bytes from 74.125.237.17: icmp_req=1 ttl=55 time=179 ms
64 bytes from 74.125.237.17: icmp_req=2 ttl=55 time=176 ms
64 bytes from 74.125.237.17: icmp_req=3 ttl=55 time=158 ms
[Code]...
What do I need to do in order to make Ubuntu of my gateway computer stay connected to my dialup but also simultaneously share an ethernet LAN to my wireless router and feed traffic to the other computers from there? I have googled this but some of the most promising instruction (e.g. http://www.ubuntugeek.com/sharing-in...in-ubuntu.html) call for packages like dnsmasq or ipmasq which seem defunct now in Ubuntu 10.10. Other pages seem to suggest dual-networks "can't be done" in Ubuntu [URL].. (what!?! I had it before my other gateway died)
Running Ubuntu 9.10 Ive just got my wireless connection working after first having got the wired eth0 connection working.
With the wired connection I could SSH into my server through my firewall/router (via a forward). I can run up VNC, from there firefox, browse the web - all is well.
I have now setup the wireless connection, using a static IP, and I can likewise SSH into my server. I can run up VNC. I can ping my router. I can log onto it via VNC. I can browse to my router. But I cant browse the internet.
But I cant ping google.com. The reason is there is no host lookup service. Nslookup eventually says no servers could be reached.
So specifically, if I ping www.google.com Im told "unknown host". If I do an NSlookup on it I get timeout, no servers could be reached. However if I ping 66.102.11.104 I get responses.
I see no relevant entries in my firewall log.
Unfortunately I cant traceroute because the package isnt found - and of course I cant install it because I have no internet !
Strangely (to me at least !) if I then tunnel through SSH and browse the web, I have no problems. It works ? I know I am browsing through my SSH tunnel because whatsmyip gives the IP of my router at home, not where Ive SSHd in from. I can surf just fine.
why I cant do host lookups any more (and this did work with my wired connection, but whether its related to my change to wireless, or static IPs or both I cant be sure - it certainly appeared to happen at the same time). And, more to the point, what I need to look for/do to rectify it ?
As a bonus Id be interested in why I can SSH and browse via tunnelling but not direct from my server (via VNC). Just for interests sake !
if config reports :
wlan0 Link encap:Ethernet HWaddr 00:90:4b:27:ae:17
inet addr:192.168.1.69 Bcast:192.168.1.255 Mask:255.255.255.0
inet6 addr: fe80::290:4bff:fe27:ae17/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
[Code]....
I would like to set up a user account with no network access. Reason is that sometimes my little daughter plays with the computer (for example watching movies on dvd's) and I want to prevent internet access in case she plays unattended. Is there a simple way to do that? I am using ubuntu 10.04.
View 4 Replies View RelatedI'm trying to setup a Centos box to act as a backup server for our intranet between stores. I have two interfaces in it, the first one is currently connected to my local network and is using dhcp to get its ip address and such, the second one is set to a static ip address and is connected to an independent network that just has a DigiBoard Portserver hooked to it and no connection to the regular network. What I am doing is using ssh to portforward the telnet port on this box to the main server so when you telnet into the box from the second interface using the portserver you get connected to the main server.
I plan on using this over DSL lines as a backup when our main dervice goes out to allow the portservers at the remote locations to seemlessly connect to the main server by just moving the network cable from the local net to the backup server. My problem is that when I have the everything working I am able to ping the second interface ip address from the normal network even though the secondary card does not in anyway externally connect to the network, this is a problem.
Eventually I want to duplicate the main server address so that the normal portservers and other terminals on the remote site will not have to be reconfigured to access the backup server. All I want is to be able to tell the managers is to switch a cable while the main connection is down and not have to manage a bunch of config files to get the store back up. Right now if I duplicate the main server ip address and it is accessible through the first interface I'm guessing I'll see all kinds of problems relating to duplicate ip addresses on the network. I've tried some routing and iptable stuff but I'm not real familiar with either so I had no luck. Is there someway to block the internal connection between the two interfaces so the only thing that sees the duplicate ip address is the second interface?
My current setup is a slack based distro with Squid 3.0 running in transparent mode with WCCP. Web filtering and AV scanning works great but we need to go a step further and introduce port filtering into the setup. I can easily accomplish this with iptable entries but only if I point to the proxy directly; the goal is to do this completely by interception. So far I've had no luck doing this with iptable entries or with squid ACL's and I am wondering if there's something that I am missing or just not doing correctly. So far during testing I've just been testing with common IM chat ports such as MSN and Yahoo. I am currently trying to setup a test lab with squid and 2 NICs with one NIC connected directly to the internet but this is not a route I would like to go.
View 1 Replies View RelatedI installed and tested both Windows server 2003 and Red Hat 9.0 with vmware workstation7. After installing 2003 can access internet but Red Hat can't. I want to test squid proxy server, send mail server, webserver etc. So, I would like to know how to setup WMware's network configuration for Red hat can access internet.
Below link is the configuration of VMware network setup both Server 2003 and Red Hat.
Here is Red Hat Configuration:
http://i64.servimg.com/u/f64/11/74/16/17/linux10.jpg
Here is Windows Server 2003 configuration:
[url]
I am using wireless connection to access internet.
I have a CentOS 5.3 box with three network interfaces in it. Each interface is attached to a separate VLAN and I want traffic to stay on each network segment.What I can�t figure out is why I cannot get each interface to have its own gateway and everything gets sent through the default gateway.The basically takes my possible 3Gb total bandwidth and throws it down a single 1Gb pipe.Then on top of that, if I take down the interface (ifdown) that has the current default gateway,I loose contact to the other two interfaces.When I look at the routes, each one of the interfaces shows the gw as 0.0.0.0 and defers to the default route. So I delete the route and try to add a new route with:
[root@testsan ~]# ip route add 10.1.15.0/24 via 10.1.15.1 dev eth2
but end up with the error:
RTNETLINK answers: Network is unreachable
[root@testsan sysconfig]# cat network
NETWORKING=yes
NETWORKING_IPV6=no[code].....
I have Dlink Wireless G Access Point.
I can connect to my access point to surf internet. I setup my Dlink access point (password, network name, etc) in Vista by visiting "http://dlinkap/" in my web browser.
In ubuntu, I can connect and surf the web/internet but i cannot access the setup page.
When I try to type the "http://dlinkap/" to my browser then the browser will redirect it to google search.
I try 192.168.1.1, I can access my linksys router. but my dlink access point, i cannot access the setup page.
In one of our network we are using one firewall which works as gateway. All machines are able to access internet through this gateway. There is no filtering and any internet restriction. I would like to setup monitoring system which monitor and log bandwidth and sites access by client machine. Is there any tool which monitor internet access as well as sites which are access from client machines.
View 12 Replies View RelatedI am really bothered from this I cant configure the 2 nics to share the internet and I already changed the sysctl.conf file to
# Controls IP packet forwarding
net.ipv4.ip_forward = 1
I have one nic reeving the internet and working good and the other one cant see anything...
I have been looking for a solution for this but am not certain how to word it to get a viable answer.My scenario:
Athena
Win7/Ubuntu 11.04
eth0 10.11.12.100/16 gateway+dns: 10.11.12.1
[code]....
I've just installed Fedora 10 to basically work as a NAS for another machine - but also serve a couple of web pages. After having alot of issues with network manager (with it changing the subnet so nothing would work), I'm now almost there:
I have two network cards connected in the server:
1) eth0 connects to a switch that ultimately connects it to the net (on a 10.0.0.* network)
2) eth1 connects directly into another server for backups (192.168.0.* network).
Now when I setup eth0, I get network access can ping/ update/ surf the net - absolutely no problems, but when I connect eth1 in - the net dies and nothing works, I can ping devices on both the 10.0.* and 192.168.* networks, just nothing past the gateway. I presume this is either a route or DNS issue, but am unsure about where its falling foul - both the resolv.conf file looks fine as do the ifcfg-ethx scripts.
Im posting after reading through a lot of articles explaining the same thing on how to share an internet connection from a computer with two NICs.
I have the following simple setup
When I first followed this guide
I was able to ping between the GW and a client on the LAN but couldn't access the internet from it. So I started to configure different things to get it to work which failed.
Now I can't ping between GW and the LAN. I tried to follow the same guide over again and even flushing the tables but still...
These are my current settings (without any chains).
(this client also has a wireless connection displayed in 'ifconfig')
I recently set up a new web/file server with 9.10 server x64 with 2 NICs and I am trying to configure eth0 to respond to my LAN for internal samba filesharing and eth1 to handle website/ftp requests on my static IP, but whenever eth0 is up the server is not accessible at 173.XX.165.65 for web or ftp but both work fine at 10.1.10.100. When eth0 is down, public IP works fine. I have set /etc/network/interfaces like this:
Code:
# The primary network interface
auto eth0
iface eth0 inet static
address 10.1.10.100
[Code].....
I have installed Ubuntu 64 10.04 server. I have two nics and have set them up to both be static with their own IP with the correct gateway, network, broadcast, subnet and dns-nameserver. When I have both enabled, I can ping local pc's but I can't ping Internet sites like Google nor can I get out to the Internet with apt-get or Lynx.
If I disable one, then I am able to get out to the Internet. All my configs look good, and it does not matter which one I disable, just so long as there is only one NIC on, everything is good.
I have configured CentOS 5.4 as a router/firewall (iptables) as such, and it is working fine:
eth0 - Public IP/Intenet, DHCP
eth1 - 192.168.0.0 internal "net1"
eth2 -10.0.0.0 internal "net2"
I want to add a fourth NIC, eth3, which will be assigned its own Public IP/Internet address (thru DHCP; my ISP provides two). The purpose it to route all net1's internet-bound traffic through eth0, and all of net2's internet traffic to eth3. This allows me to use one router/firewall machine instead of two separate ones. I anticipate that without some specific routing instructions, the default route will be eth0 for all net1 and net2 internet traffic (eth3 will be ignored).
I thought of using just one NIC (eth0) but create an alias (eth0:0), but IPtables (and possible DHCP) can't differentiate between the two (besides, nics are inexpensive). Is there a way to do this through routing commands, or even use iptables prerouting/forward functions (or is using iptables problematic)?
I've been trying to setup an IPSec connection between two routers, but am having trouble with the actual packet routing.
My setup currently is two local networks (192.168.1.0/24[netLANA] and 192.168.0.0/24[netLANB]) that are connected to their own routers (192.168.1.1 and 192.168.0.1 respectively). The routers are both connected to the 194.26.1.0/24[netWAN] network. I wish to setup an IPSec connection between the two routers, to act in tunnel mode between the two local networks.
The first router is a linux box (on the netLANA network) that I am setting up using the ipsec-tools, and the other is a Netgear ProSafe FVS318G (on the netLANB). I've set them both up to have the same configuration for IPSec. Also, on the linux router I have setup a route like this:
Code:
$ route add -net 192.168.1.0/24 wlan0
So that all traffic destined for the netLANB network will be routed to the wlan0 interface (netWAN in this case, and therefore over the tunnel).
My problem is that if I ping from any host on netLANA, I can see the ICMP reply comes back to the linux router, but it doesn't get back to the original host.
From the linux router, here is the tcpdump of the ping:
Code:
$ tcpdump -n -S -i any
17:06:26.308353 IP 192.168.0.5 > 192.168.1.4: ICMP echo request, id 1036, seq 1, length 64
17:06:26.308780 IP 194.16.1.6 > 194.16.1.5: ESP(spi=0x0ea08914,seq=0x2f), length 116
17:06:26.316287 IP 194.16.1.5 > 194.16.1.6: ESP(spi=0x0be1036c,seq=0x2f), length 116
17:06:26.316287 IP 192.168.1.4 > 192.168.0.5: ICMP echo reply, id 1036, seq 1, length 64
[Code]....
I have setup a second machine with slackware 13.37, it is a "supermicro" which I picked up though my work. the idea was to set it up as a gateway and gradually expand my knowledge of sub networking, iptables, forwarding and the like. after a couple nights of forum searching and "o'reilly" book reading I am still unable to get a proper route working thru the "supermicro" to our dsl router.
What is setup?: I will start from my main machine simply calling it slackbox
slackbox: has two ethernet cards which i have given static ip's to
eth0 192.168.2.16 and eth1 192.168.3.11
eth0 (192.168.2.16) is connected to a switch and then to our dsl router, it is working, I am using right now to work on this forum.
eth1 (192.168.3.11) is connected to the "supermicro" thru a cross-over cable, it also is working, pinging the "supermicro" works.
default gateway on slackbox is set to be 192.168.3.10 (the supermicro)
I only set slackbox's default as 192.168.3.10 when testing to see if the supermicro gateway will work
supermicro: also has two ethernet cards which i have given static ip's to
eth0 192.168.3.10 (this is the card with the cross-over cable connected)
pinging 192.168.3.11 (the slackbox) works.
eth1 192.168.2.24 is connected to our switch as well, it is working, pinging our dsl router works.
default gateway on supermicro is set in rc.inet.conf to be 192.168.2.1 (which is our dsl router)
All my machines have two ethernet cards. This has just made it easy for me to test the setup while still having internet access on slackbox. Yet when testing the gateway from slackbox thru supermicro I am getting "Destination Host Unreachable".
setup 2 gateway in my email server(opensuse).
now i wan to setup 2 internet lines for my email server, which mean that either one of the line is down, i still can receive mail from another line.
Example
Internet line 1 = ISP1
Internet line 2 = ISP2
my email server got 3 nic which...
eth0 = 192.168.1.2 (255.255.255.0) (from ISP1 GW 192.168.1.1)
eth1 = 192.168.2.2 (255.255.255.0) (from ISP2 GW 192.168..2.1)
eth2 = 168.168.1.2 (255.255.0.0) (connect to local LAN)
now existing GW set on the server is 192.168.1.1, mail receive and send through ISP1. now we wish to set somethings that once the ISP1 line is down, the server will auto switch to ISP2 gateway and continue send and receive mail without manually change of settings
I have a temporary system up with wlan0 and eth2.
I want the eth0 address to be the gateway for accessing the internet on wlan0.
How do I setup static routes?
I'm not too keen with networking...
Code:
I have been searching google for a while now and have not found exactly what I am looking for. I would like to use my fresh install of ubuntu server 11.04 as my router/gateway for my home. I am not an expert at linux by any means but I can usually figure stuff out. I believe I need iptables, bind, and a few others probally. It eventually will also be a samba server but I have done a little with samba before. I do have 2 network cards, my router at the moment is starting to die and would love to have a more powerful router. I would also like to figure out how to do port forwarding in the router, as well as be able to see the load on the network cards. Maybe there is a program to show usage by user? As well as be able to do packet pritorization.
View 4 Replies View RelatedI'm trying to setup routes for a gateway that resides on a different subnet. Our ISP leased us a block of IPs and told us to route through the current gateway, which is on a different subnet than our current block of addresses. To test, I've enabled one of the new addresses on one of the existing machines, which works. That machine has an address on the same subnet as the gateway, however.
The gateway address is 24.111.1.177 One of the new addresses I'm trying to use is 96.2.192.130, netmask= 255.255.255.240, broadcast= 96.2.192.143 Obviously, I can't just specify that gateway in /etc/network/interfaces without some routing, which is where the trouble I'm having is. The machine I'm trying to set this up on is part of 2 networks - one internal, on two different NICs.
[Code]...
I just set up a linux server which is acting as an internet gateway. For specific reasons, clients first make a vpn connection trough the internet to the linux server.
CLIENT ---->Internet----->Linux VPN Server ------> Internet
On the linux server iptables is configured for NAT. The problem is that the internet speed becomes slower than expected. I used windows and RAAS and the speed was pretty good. The server has only 1 NIC(eth0) and an alias interface is added to eth0. The alias is eth:0 with ip address 192.168.0.253
iptables config is as follows:
iptables -P INPUT ACCEPT
iptables -F INPUT
iptables -P OUTPUT ACCEPT
iptables -F OUTPUT
iptables -P FORWARD DROP
iptables -F FORWARD
iptables -t nat -F
iptables -A FORWARD -d 192.168.0.0/24 -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -s 192.168.0.0/24 -j ACCEPT
iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -j SNAT --to MY_VALID_IP
Whenever i used to setup a new connection in Windows it would just ask me User name and password here i need to fill up something called as "Gateway" !? The connection won't be accepted unless i fill up something in there... So, what do i put in there? I'm on a LAN of 3 computers connected with a router.The router takes one wire as input from the modem(cable).
View 9 Replies View Relatedhave a netopia 3347-02 Wireless ADSL Gateway that i got from at&t. i am no longer with at&t.i switch over to cox. I have the cox modem. i also have cable on the modem. when i connect a ethnet cable from cox's modem to my laptop my internet works. but i want to use the netopia 3347-02 Wireless ADSL Gateway that i got from at&t cause of the wifi. when i login & connect to the netopia 3347-02 Wireless ADSL Gaut it in bridge mode.internet works fine, but im not able to use wifi, im also not able to login into the admin page. i have to do a factory reset on it so i can log back in. So how can i make it work with cox modem?
View 4 Replies View RelatedPreviously had 2 Ubuntu computers setup Computer A (192.168.1.101) <=> Computer B (192.168.1.100) -> Internet Computer B was the gateway, and it is dual boot, one drive Ubuntu, one drive XP. I'm using XP as the gateway now, but Computer A is extremely slow, virtually nothing getting through.
Have checked sysytem logs, verified /etc/hosts file, and all the network side of things. Can ping either IP adddresses from either computer. On the XP side, have modified hosts and lmhosts, and the XP computer has very fast internet connection.
Did have Commodo firewall running on the XP, disabled that, and checked that no Windooze firewall was running. Have restarted the network on both computers a number of times. Can't figure out what the problem is. It's obviously on the XP side, as when I booted to Ubuntu (previously) on Computer B, the gateway worked just fine. Have checked the whole tcp/ip side of things on XP; seems to be okay.
Since I have a new internetaccount, 2 days ago, I have a problem on my server [Fedora Core 8]. I use it as a router.
eth0 is for the internet.
eth1 is for my LAN.
But since my new internetaccount my server uses eth1 for the internet. This is a line from my syslog:
Code:
NetworkManager: <info> Policy set 'System eth1' (eth1) as default for routing and DNS. I killed the NetworkManager daemon and now it works but this must not be the way to do it? Where do I tell my server that I use eth0 for routing and DNS?