LinuxQuestions.org
LinuxAnswers - the LQ Linux tutorial section.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - General
User Name
Password
Linux - General This Linux forum is for general Linux questions and discussion.
If it is Linux Related and doesn't seem to fit in any other forum then this is the place.

Notices

Reply
 
Search this Thread
Old 06-28-2002, 12:13 PM   #1
mohamed_linux
LQ Newbie
 
Registered: Jun 2002
Location: Ottawa, Ontario, Canada
Distribution: redhat 7.1
Posts: 9

Rep: Reputation: 0
unreachable


Hi

I have a LAN that is behaind a hardware firewall which has a built in dhcp. This firewall has a static external ip address. Also I setup a redhat 7.1 box outside the LAN with a separate statis ip address. This box will be the web, ftp and e-mail server. I already configured the ftp and web server, and when I try to access the server from anywhere in the world it is working ok, but from the LAN I CANNOT. When I do tcpdump on the server, I see that the server receives the requests from the lan fine, but when it tries to contact the lan it is "unreachable".

Regards and thanx in advance for help.
Mohamed
 
Old 06-28-2002, 01:33 PM   #2
#!
Member
 
Registered: May 2001
Distribution: RedHat, 'drake, suse, slack, gentoo, beehive, lfs...
Posts: 43

Rep: Reputation: 15
Need more info

Where are you running tcpdump - on the web/ftp server? I'm thinking 'yes' to that question, 'cos it makes the most sense.

Sounds like you're getting routed over to the web server from the lan just fine, but for one reason or another, the response packets are being dropped. In order for them to get through, you'll want to add a static route to the internal lan, using the firewall as a gateway. This will be separate from its default route - whatever that is. If it's not behind the firewall, then the firewall is not its default gateway, or that's my assumption... so just add another static route for the lan. Do a 'man route' to see how.

If your internal addresses are nonroutable and your firewall doesn't do NAT, you will have some big issues getting this to work. Does the firewall do NAT'ing? What kind of 'hardware firewall' is this?

Another way to maybe do this is if you have DNS set up you should be able to get to it by name. How is DNS set up?
 
Old 06-28-2002, 01:53 PM   #3
mohamed_linux
LQ Newbie
 
Registered: Jun 2002
Location: Ottawa, Ontario, Canada
Distribution: redhat 7.1
Posts: 9

Original Poster
Rep: Reputation: 0
Re: Need more info

Hi there,
Yes I am running tcpdump on the web/ftp server


I did not get what you meant by "add a static route to the internal lan, using the firewall as a gateway. This will be separate from its default route - whatever that is. If it's not behind the firewall, then the firewall is not its default gateway, or that's my assumption... so just add another static route for the lan. Do a 'man route' to see how. " The lan is behind the firewall, but the web/ftp server is not, and they both have different static ip addresses (from the isp directly).

Thanx
Mohamed
 
Old 06-28-2002, 04:32 PM   #4
Mara
Moderator
 
Registered: Feb 2002
Location: Grenoble
Distribution: Debian
Posts: 9,536

Rep: Reputation: 148Reputation: 148
In my opinion it's something with NAT (called also masquarade). Can the machines with dynamic ips connect other hosts (outside the firewall)?
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Network Unreachable? biledaemon Slackware 4 10-24-2005 02:05 PM
help ! Destination Unreachable ernvb Linux - Hardware 3 10-23-2005 11:09 PM
server unreachable... pimij Linux - Networking 4 09-29-2005 06:34 AM
network is unreachable renegade69 Linux - Networking 7 08-14-2003 02:23 PM
tftp - "Destination Unreachable" due to "Port Unreachable" renjithgopal Linux - Security 5 07-24-2003 10:36 AM


All times are GMT -5. The time now is 11:42 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration