Linux - GeneralThis Linux forum is for general Linux questions and discussion.
If it is Linux Related and doesn't seem to fit in any other forum then this is the place.
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
I have a LAN that is behaind a hardware firewall which has a built in dhcp. This firewall has a static external ip address. Also I setup a redhat 7.1 box outside the LAN with a separate statis ip address. This box will be the web, ftp and e-mail server. I already configured the ftp and web server, and when I try to access the server from anywhere in the world it is working ok, but from the LAN I CANNOT. When I do tcpdump on the server, I see that the server receives the requests from the lan fine, but when it tries to contact the lan it is "unreachable".
Where are you running tcpdump - on the web/ftp server? I'm thinking 'yes' to that question, 'cos it makes the most sense.
Sounds like you're getting routed over to the web server from the lan just fine, but for one reason or another, the response packets are being dropped. In order for them to get through, you'll want to add a static route to the internal lan, using the firewall as a gateway. This will be separate from its default route - whatever that is. If it's not behind the firewall, then the firewall is not its default gateway, or that's my assumption... so just add another static route for the lan. Do a 'man route' to see how.
If your internal addresses are nonroutable and your firewall doesn't do NAT, you will have some big issues getting this to work. Does the firewall do NAT'ing? What kind of 'hardware firewall' is this?
Another way to maybe do this is if you have DNS set up you should be able to get to it by name. How is DNS set up?
Yes I am running tcpdump on the web/ftp server
I did not get what you meant by "add a static route to the internal lan, using the firewall as a gateway. This will be separate from its default route - whatever that is. If it's not behind the firewall, then the firewall is not its default gateway, or that's my assumption... so just add another static route for the lan. Do a 'man route' to see how. " The lan is behind the firewall, but the web/ftp server is not, and they both have different static ip addresses (from the isp directly).