Re: routing







See ...this is my network.. Firewall
|
External ISP network-Internet Router ---Internet switch --Internal(LAN)
switch---proxy (both internal external nic is connected to lan
switch)..(internet switch also connected to firewall)

This is my lan configuration..
Internal card:( Figure 1)

Ip address: 132.149.2.75
subnet mask: 255.255.0.0
Gateway: 132.149.2.254

External card(Figure 2)

Ip address : 192.168.10.50
subnet mask : 255.255.255.0
Gateway : 192.168.10.101(firewall)

First I try this in my linux machine...I configured 192 series ip(As is
Figure 2)..I assigned DNS ip in etc/resolv.conf...
On that time i can able to access the internet through mozilla.

After that I removed the configuration...

Now I insert another network card...Now I had 2 cards..
I configured both cards(One is internal(as in Figure 1) another is
external(as in Figure 2).

Now I can able to ping my DNS ip 61.1.96.69..nslookup "www.yahoo.com"
working...all is working...

My squid is properly configured ..

Now from my client machine(any 132.149. series) I can t access the
internet...

It gives "Connection timed Out"

I think both nic is not communicating...I have enabled the IP
forwarding also...

What should i do?

Any Routing entry should be added?
Any firewall settings?



















ipnwsec wrote:
Hi,

I think you need to run NAT on the linux router so that it translates
your private ip address into public ip address.
if you can send ur ip address configuration on LAN side and firewall
side i can help you trouble shoot this.




On Nov 28, 10:10 am, "pandi" <k.pand...@xxxxxxxxx> wrote:
Hi Folks,

I have configured linux proxy server in kernel 2.4 (Redhat Linux 9).

I had 2 network cards..One is connected to lan other one is goes
through the firewall..

I can ping the dns ip. dig nslookup worked successfully for all sites.
But I can t able to access the websites through squid. Squid is working
fine.

that is I created routes for external network.. through rc.local.

Evenafter rebbooting the routes are not appear in IP Routing
Table.(route -n)

From lan I cannot access the internet..But if I configure one DMZ ip in my lan..I can access all websites...I
think the routing entry is problem..

This is scenario..

2 network cards..one for internal other for external..Both connected to
Lan switch...

Lan switch is connected to Internet Switch ...Internet switch connected
to firewall..firewall...

How to update kernel routing tables( I had done in
/etc/init.d/rc.local...but not in effect)

.



Relevant Pages

  • Re: Big hole??
    ... > firewall then even they can't get in, ... > supposedly safe SP2 for Windows XP invites any Internet ... > Connection Sharing of the PC has to be disabled. ... > in fact is a common configuration and not a rare sight. ...
    (microsoft.public.windowsxp.general)
  • Re: Remote Access and Outlook Web Access on SBS 2003
    ... SUMMARY OF SETTINGS FOR CONFIGURE E-MAIL AND INTERNET ... Internet Connection Wizard. ... network, firewall, secure Web site, and e-mail. ... NETWORKING CONFIGURATION SUMMARY ...
    (microsoft.public.windows.server.sbs)
  • Re: Big hole??
    ... >supposedly safe SP2 for Windows XP invites any Internet user to have a look around your PC. ... Internet Connection Sharing of the PC has to be disabled. ... >A number of test scans run by PC-Welt revealed that this in fact is a common configuration ... >network at home: Often, we did not even encounter password protection. ...
    (microsoft.public.windowsxp.general)
  • Re: Big hole??
    ... >supposedly safe SP2 for Windows XP invites any Internet user to have a look around your PC. ... Internet Connection Sharing of the PC has to be disabled. ... >A number of test scans run by PC-Welt revealed that this in fact is a common configuration ... >network at home: Often, we did not even encounter password protection. ...
    (microsoft.public.windowsxp.customize)
  • Re: Big hole??
    ... >supposedly safe SP2 for Windows XP invites any Internet user to have a look around your PC. ... Internet Connection Sharing of the PC has to be disabled. ... >A number of test scans run by PC-Welt revealed that this in fact is a common configuration ... >network at home: Often, we did not even encounter password protection. ...
    (microsoft.public.windowsxp.basics)