LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 06-23-2005, 05:58 PM   #1
zoffmann
Member
 
Registered: Jun 2005
Posts: 60

Rep: Reputation: 15
Unhappy router/firewall can't use local network


Hi, i need some help to configure firewall/router in Mandriva Linux.

I have installed Mandriva Linux on a machine which is suposed to be router
/firewall. I installed even shorewall during the installation of the system (i was asked if my computer was firewall computer). I use only text based installation of the Linux because I don't have appropriate graphic card and for me this is not very important. I have two network cards eth0 and eth1 in the router/firewall computer. The Mandriva firewall computer is connected to internet with eth1, and for local networking i used eth0.

The problem is: eth1 works fine and I got IP address from my internet provider but I can't "ping" computers in the local networks they don't have connection for some reason through eth0 card.

I have two questions:
1. how to configure local network?
2. how to dedicate ip addresses to computers in the local network so that they "remember" their ip addresses after they reboot?

I am very beginner and any answer is appreciated.
 
Old 06-23-2005, 06:03 PM   #2
rkettle
Member
 
Registered: Jun 2005
Posts: 204

Rep: Reputation: 30
I would stongly recommend using webmin on headless boxes.

I run mandrake, redhat, deb servers and use it on them all.

REally nice to solve problems like this.

Regards
Richard
 
Old 06-23-2005, 06:07 PM   #3
zoffmann
Member
 
Registered: Jun 2005
Posts: 60

Original Poster
Rep: Reputation: 15
Please explain little bit more is webmin some program and where to find it?

What do you mean "headless boxes"? I am not native english speaker so it is new expression:
 
Old 06-27-2005, 03:20 PM   #4
SlipAway172
Member
 
Registered: Jun 2004
Location: GA
Distribution: Latest ubuntu
Posts: 172

Rep: Reputation: 30
look around for webmin in the package installer. and i cant remeber but once installed go to you browser and type something LIKE localhost:100000 . i know i may be wrong there. and it will ask you to login and click on what every you want and configure to your likings
 
Old 06-27-2005, 03:51 PM   #5
Sharaz
Member
 
Registered: Jun 2005
Location: Dallas, TX
Distribution: Fedora 11,12, RedHat4,6, CentOS4,5, FreeBSD7,8
Posts: 70

Rep: Reputation: 16
headless means no video, keyboard or mouse plugged in.

www.webmin.com. you can use the wget command to pull the file down once you finally get to the link with the file.

ok, now to your problem, which im not quite understanding whats wrong here.

are you saying, the firewall cannot ping hosts on your local network, or are you saying that hosts cannot ping each other on your local network? you might want to do an

iptables -L

and post us the output.

can hosts ping the eth0 interface ip? (hosts *do* have ip addreses, yes?)
do hosts have the eth0 ip set as their default gateway?
can the firewall ping out to the internet?
 
Old 06-28-2005, 08:30 AM   #6
zoffmann
Member
 
Registered: Jun 2005
Posts: 60

Original Poster
Rep: Reputation: 15
I am using "shorewall"; now I can ping eth0, eth1 on Linux - firewall computer from my windows xp computer, i can ping from the Linux computer to the windows computer, i can start "Lynx" text webbrowser and go to the internet from the Linux computer but I can't reach the Internet from the windows computer : ( This is the last problem which I have to solve.

Any suggestions?
 
Old 06-28-2005, 08:59 AM   #7
celejar
Member
 
Registered: Oct 2003
Location: New York
Distribution: Debian Sid
Posts: 185

Rep: Reputation: 30
The linux / shorewall box has to be configured to forward ipv4 packets, and you will also need to enable NAT (called masquerading by shorewall). shorewall has very good documentation (sometimes in a shorewall-doc type package) There's an explanation for a standard 2-nic setup. and an explanation of NAT (masq) setup.
 
Old 06-28-2005, 09:17 AM   #8
zoffmann
Member
 
Registered: Jun 2005
Posts: 60

Original Poster
Rep: Reputation: 15
I have tried 2 network adapters example for shorewall but it didn't worked so something is missing.
 
Old 06-29-2005, 02:24 PM   #9
celejar
Member
 
Registered: Oct 2003
Location: New York
Distribution: Debian Sid
Posts: 185

Rep: Reputation: 30
Is IPv4 forwarding configured?
 
Old 06-29-2005, 04:33 PM   #10
zoffmann
Member
 
Registered: Jun 2005
Posts: 60

Original Poster
Rep: Reputation: 15
I don't think so, I have used basic example of router with two adapters
 
Old 06-29-2005, 07:21 PM   #11
celejar
Member
 
Registered: Oct 2003
Location: New York
Distribution: Debian Sid
Posts: 185

Rep: Reputation: 30
You will need to enable it; search the shorewall docs for the apropriate config file setting (I'm not at my system now), or for a quick and dirty test, "echo 1 > /proc/net/..." (I don't recall the precise name of the ipv4 flag in the proc filesystem).
 
Old 06-30-2005, 02:51 AM   #12
zoffmann
Member
 
Registered: Jun 2005
Posts: 60

Original Poster
Rep: Reputation: 15
there is a file which is called "masq" in the etc/shorewall catalogue and settings are as they are in the manual, but now I have another problem, when booting I got the message "shorewall version 1.2.12 does not work with kernel 2.2.20" now I use Debian, which version of shorewall do I need?
 
Old 06-30-2005, 04:17 AM   #13
TheAce
LQ Newbie
 
Registered: Jun 2005
Location: Indonesia
Distribution: Mepis, Debian Sarge
Posts: 15

Rep: Reputation: 0
with debian you get Iptables for both firewall and NAT. That does a fine job.

If you are using KDE, Guarddog is an excellent gui for the firewall setup while Guidedog sets up the NAT (IP Masquerading) quite easily.

for text mode, search for how tos on Iptables or ipchains (for debian with older kernels)
 
Old 07-02-2005, 01:53 PM   #14
zoffmann
Member
 
Registered: Jun 2005
Posts: 60

Original Poster
Rep: Reputation: 15
I have tried

echo 1 > proc/sys/net/ip4/ip_forward

but nothing happened
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Home network setup with network firewall/router Gates1026 Linux - Networking 4 01-17-2005 08:26 PM
Suse 9.2 firewall prevents 'ping' on local network? Steerpike Suse/Novell 5 11-27-2004 05:56 PM
Mandrake Firewall/router networked to US Robotics 8000A router jrzplace Linux - Networking 0 11-17-2003 04:48 PM
sniffing network traffic, linux server between firewall and router, only want http sabah Linux - Networking 2 10-20-2003 12:47 PM
Problems gettting to local network after setting firewall vendemmian Linux - Networking 0 05-21-2001 11:34 AM


All times are GMT -5. The time now is 09:00 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration