<br><br><div class="gmail_quote">On 6 December 2010 17:19, Alan Buchel <span dir="ltr"><<a href="mailto:alan@communitytechnology.org.uk">alan@communitytechnology.org.uk</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
Thanks Peter. Yes I have quadruple-checked the Smoothie and the configuration is fine, and works perfectly as long as the gateway for the server is set as the Smoothwall box.<div><div></div><div class="h5"><br></div></div>
</blockquote><div><br></div><div>In otherwords you want two gateways? </div><div><br></div><div>One for the box to get to the internet and one for the internet to get to the box?</div><div><br></div><div>Which can be done. but if I remember correctly you need to use ip not route. where you can do lost of fun and intresting things that you can't normally do with route. (Such as use two gateways and two internet connections if you wish)</div>
<div><br></div><div>Peter.</div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><div><div class="h5">
<br>
On 06/12/10 17:02, Peter Childs wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
On 6 December 2010 16:27, Alan Buchel<<a href="mailto:alan@communitytechnology.org.uk" target="_blank">alan@communitytechnology.org.uk</a>>wrote:<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Hi All,<br>
<br>
I have a slightly complicated situation with a routing requirement, have<br>
RTFM's till my brain hurts and hope someone can help...<br>
<br>
We have a Server inside a private network which routes out through a WLAN<br>
switch as it's main uplink to the internet. It syncs with other servers over<br>
this network. For reasons beyond my control, the server is only allowed 1 IP<br>
address. Now we want to expose some of the services on this server such as<br>
www (80) to the outside world via a broadband line, and such a facility is<br>
unavailable via the WLAN.<br>
<br>
So I thought: just put in a smoothwall box, RED NIC on the ADSL, GREEN on<br>
the same IP subnet as the Server, forward the required ports to Server and<br>
job done. Oh no, not a bit...<br>
<br>
While the server WILL respond to www requests (like wget and telnet)<br>
directly FROM the smoothwall box, it will, not respond to www requests that<br>
come from clients on the RED side of smoothwall. The portforwarding on the<br>
smoothie works fine, and I know this is so because if I set the default<br>
gateway for the Server to be that of the Smoothwall GREEN. Then the port<br>
forward works just fine...<br>
<br>
</blockquote>
<br>
<br>
Sounds like a problem with the Smoothwall Box.<br>
<br>
You need to check the port forwarding from the Red NIC to the Green, Just<br>
because the IP Masquerading works does not mean that the port forwarding it<br>
correct. You need an extra rule in IP Tables to do that. No matter what you<br>
write to route will change anything you need to set the iptables rules<br>
correctly.<br>
<br>
I've not used Smoothwall but I could probably come up with an IP tables rule<br>
to do that with a bit of work, but I'm guessing Smoothwall might well have a<br>
User Interface to do it in......<br>
<br>
Hope that at least gives you some ideas<br>
<br>
Peter.<br>
<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<br>
So I guess the problem is with routing, we need to figure out how to tell<br>
the server to use SMOOTHWALL GREEN as the gateway for requests coming from<br>
SMOOTHWALL GREEN and to use WLAN for the rest.<br>
<br>
Does anyone have any ideas how to go about this, or have another idea on<br>
how to achieve what we need? (have been trying route add -net %$^%^&%^&<br>
till I am blue in the face and mostly only seeing syntax errors)<br>
<br>
Alan<br>
<br>
<br>
<br>
<br>
<br>
_______________________________________________<br>
Kent mailing list<br>
<a href="mailto:Kent@mailman.lug.org.uk" target="_blank">Kent@mailman.lug.org.uk</a><br>
<a href="https://mailman.lug.org.uk/mailman/listinfo/kent" target="_blank">https://mailman.lug.org.uk/mailman/listinfo/kent</a><br>
<br>
</blockquote>
<br>
<br>
<br>
_______________________________________________<br>
Kent mailing list<br>
<a href="mailto:Kent@mailman.lug.org.uk" target="_blank">Kent@mailman.lug.org.uk</a><br>
<a href="https://mailman.lug.org.uk/mailman/listinfo/kent" target="_blank">https://mailman.lug.org.uk/mailman/listinfo/kent</a><br>
</blockquote>
<br>
<br>
_______________________________________________<br>
Kent mailing list<br>
<a href="mailto:Kent@mailman.lug.org.uk" target="_blank">Kent@mailman.lug.org.uk</a><br>
<a href="https://mailman.lug.org.uk/mailman/listinfo/kent" target="_blank">https://mailman.lug.org.uk/mailman/listinfo/kent</a><br>
</div></div></blockquote></div><br>