LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 06-09-2007, 07:07 PM   #1
reckless2k2
LQ Newbie
 
Registered: Jul 2006
Location: Yardley, PA.
Distribution: Ubuntu, CentOS, Slackware, openSUSE
Posts: 25

Rep: Reputation: 0
DMZ to LAN rsync


My setup:

DMZ FTP server - 192.168.3.x (CentOS)

Smoothwall Firewall (in the middle with ports open between FTP and NAS)

LAN NAS - 192.168.0.x (Buffalo Linkstation)

I'm trying to setup my rsync backup that use to exist when my server was inside my LAN. Now that my server is on the DMZ, it can not communicate with my NAS on the LAN. My smoothwall firewall has everything open in the middle for the SMB sharing using ports 136:139 & 445 all TCP.

I think the issue is with the iptables on the server. This is an example of the opening I made for the ports on the FTP server on the DMZ:

iptables -A INPUT -s 192.168.100.50 -p tcp --dport 136:139 -j ACCEPT

It would seem that I still can not see the NAS on my LAN. What am I missing? I imagine it's a static route to the LAN. Not sure how to write it. Any help would be appreciated.
 
Old 06-09-2007, 08:46 PM   #2
Micro420
Senior Member
 
Registered: Aug 2003
Location: Berkeley, CA
Distribution: Mac OS X Leopard 10.6.2, Windows 2003 Server/Vista/7/XP/2000/NT/98, Ubuntux64, CentOS4.8/5.4
Posts: 2,986

Rep: Reputation: 45
I think the problem is that they are on 2 different networks (192.168.3.0 and 192.168.0.0). Make sure you have the correct gateway specified in the route. Also, I believe that SMB is non-routable, unless you use something like a VPN to connect to the other network. I'm not too familiar with SmoothFirewall so maybe it has this feature?

I forget how to use the route command off the top of my head, but you can look it up. Also make sure the rsync ports are open for rsync.

I would probably recommend using SSH to rsync between these two computers to the different network.

Not sure why you cannot see your NAS on your LAN. Have you tried pinging it?

Last edited by Micro420; 06-09-2007 at 08:50 PM.
 
Old 06-09-2007, 09:43 PM   #3
reckless2k2
LQ Newbie
 
Registered: Jul 2006
Location: Yardley, PA.
Distribution: Ubuntu, CentOS, Slackware, openSUSE
Posts: 25

Original Poster
Rep: Reputation: 0
I'm pretty sure it was saying that the host is not reachable when i try to ping from DMZ to LAN. For some reason I think i have to put a static route to/from each network in the iptables so my DMZ server knows how to communicate with the NAS on my LAN. I haven't even got to the rsync part yet. hahaha. First I have to able to connect from the DMZ server to my LAN NAS.
 
Old 06-09-2007, 11:01 PM   #4
Micro420
Senior Member
 
Registered: Aug 2003
Location: Berkeley, CA
Distribution: Mac OS X Leopard 10.6.2, Windows 2003 Server/Vista/7/XP/2000/NT/98, Ubuntux64, CentOS4.8/5.4
Posts: 2,986

Rep: Reputation: 45
Just temporarily disable iptables and start from there, get everything working, then start setting iptable rules.

I should have realized that if you only enabled ports 136:139 and 445, then all other packets will be dropped, including ping, unless you enable icmp (I think).

Last edited by Micro420; 06-09-2007 at 11:03 PM.
 
Old 06-10-2007, 06:16 AM   #5
reckless2k2
LQ Newbie
 
Registered: Jul 2006
Location: Yardley, PA.
Distribution: Ubuntu, CentOS, Slackware, openSUSE
Posts: 25

Original Poster
Rep: Reputation: 0
Once I've done that I get connection timeouts on port 445 or 139. Could be UDP? I have TCP ports specified. Maybe I need UDP as well.
 
  


Reply

Tags
dmz, iptables


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Bandwidth monitor in DMZ & LAN ziox Linux - Networking 3 06-07-2006 09:53 AM
Bandwidth monitor in DMZ & LAN paul_mat Linux - Software 0 06-03-2006 07:17 PM
Opening one TCP port from DMZ into LAN aaviad Linux - Security 2 06-17-2005 08:31 AM
DHCP Server for internal LAN and DMz NVETHIS Linux - Networking 1 07-11-2003 10:16 AM
IPTABLES - LAN can't get to DMZ with public IP dknell Linux - Security 4 02-28-2002 08:02 AM


All times are GMT -5. The time now is 11:13 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration