LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 07-31-2007, 02:24 PM   #1
lsteacke
Member
 
Registered: Jul 2007
Distribution: Ubuntu
Posts: 99

Rep: Reputation: 16
Linux server 2 NICs static routes?


Okay so this may be a little long, but I will explain the topology best I can and maybe someone has encountered something similar.

I have a linux box running fesity that is being used as a spam filter / internet tracking box. The box is running postfix/spamassassin, and squid with sarg for internet tracking. Also the server is running shorewall to redirect traffic through 3180 for squid. Now as it stands right now the network I am installing this linux server on, the default route on all the computers is a cisco 3550 catalyst switch, 192.168.0.254. There is a static route on that switch to 192.168.0.1 which is the PIX 506e. Now in order to get traffic routed through my box I wanted to reset the static route on the switch to forward everything to my box, then set a static route on my box to the pix. However this would require directly connecting one of my NICs to the pix, and forwarding traffic from eth0 to eth1, then eth1 to the PIX. Does anyone know if this is possible? If not do you see any other viable solutions? I have a couple other in mind, but both seem to require quite a bit of reconfiguration. For instance I could reset the IP's of the switches, and just set my eth0 IP to 192.168.0.254, then set a static route to the switch from there. Or I could set my eth0 to 192.168.0.1, and change the PIX IP and forward traffic to it. Anyway hope you didn't get too bored reading through this explanation and maybe someone can help.

Thanks
 
Old 07-31-2007, 03:14 PM   #2
Mara
Moderator
 
Registered: Feb 2002
Location: Grenoble
Distribution: Debian
Posts: 9,536

Rep: Reputation: 148Reputation: 148
Definitely possible. You have your reason to pass the traffic through the box, so I guess you want to modify it somehow. Then a simple redirect or bridge is not enough. It seems that you'd need to set up NAT on that box, but it shouldn't be a problem.
 
Old 07-31-2007, 03:25 PM   #3
lsteacke
Member
 
Registered: Jul 2007
Distribution: Ubuntu
Posts: 99

Original Poster
Rep: Reputation: 16
So a route add command will not suffice? Basically the traffic being routed through the server will be checked and modified by squid and spamassassin, all I really have to do is get the traffic to go through the server, and then through the PIX, and out to the internet. Will I NAT the traffic from eth0 as eth1? Right now I have static IP for eth0.

eth0: 192.168.0.75

This interface is connected to the switch, which is 192.168.0.254, which is also the default gateway for the network.

eth1 is not currently being utilized, but I want to connect it directly to the PIX, or if I don't have to, then I would just assume use eth0 and not eth1.
 
Old 07-31-2007, 04:17 PM   #4
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,398

Rep: Reputation: 1965Reputation: 1965Reputation: 1965Reputation: 1965Reputation: 1965Reputation: 1965Reputation: 1965Reputation: 1965Reputation: 1965Reputation: 1965Reputation: 1965
yeah this seems simple really. only thing i'd comment on is that if you have a decent switch there, use that better and have an 2 nic etherchannel connection using 802.1q vlans. that's bread and butter to any catalyst switch, and gives you the exact topology you want with improved resilience and flexibility. I assume there's no reason not to add a secondary LAN between the server and the pix? assuming that's there then yuo;ve an extremely simple topology, but if you so felt you could presumably still bridge two vlan interfaces on the server, but that's all getting a bit convoluted, and if you did want to bridge i'd probably look to take a step back and just use an inside and outside nic. not sure what you can really do transparently with ebtables and such though. i expect it's pretty comparable to standard iptables for redirections and such.
 
  


Reply

Tags
networking, routes, server


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
permanent static routes on CentOS/Red Hat Enterprise Linux whistl Linux - Networking 4 03-24-2009 12:30 PM
Problem with Static Routes kewlemer Linux - Networking 5 07-06-2006 01:18 AM
multiple default routes for dual nics alfman Linux - Networking 1 05-26-2006 09:26 AM
How do I config static routes? mikezang Linux - Networking 4 10-31-2005 10:29 AM
Contacting INTERNAL LAN server via domain name/full IP? STATIC ROUTES? Please Help!! Bungo2000 Linux - Networking 8 06-27-2003 10:27 AM


All times are GMT -5. The time now is 07:21 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration