LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 05-26-2008, 07:24 AM   #1
tincs
LQ Newbie
 
Registered: May 2008
Posts: 3

Rep: Reputation: 0
Desktops behind Linux getway cannot FTP and resolve names (squid works)


I am a linux newbie, but have an understanding of networking concepts

I have an unusual setup at a client where there is an internet connection through a router, which is connected to a switch for the local area network.

All PCs (windows and a linux supposed "gateway") are connect to the switch.

The router only allows connection from the linux box (checks by IP).

The PCs(all running windows) share the same subnet mask as the router and the Linux "gateway"

The Linux Gateway has one network card. This is why I think there is this strange insecure setup.

The linux box is running Squid and users can browse well through HTTP.

The problem is that you cannot FTP from a user's PC to an FTP site outside location

I assumed this has to do with translating the network address or name resolution. I think this is the case because when I ping from the windows desktops, I get the error
Quote:
Ping request could not find hostname.com. Please check the host name and try again :
I thought maybe the DNS records were not being sent/shared with the desktops since people can access websites (HTTP)

I have gone through the net and have come accross making use of IP tables. They all seem to make use of 2 network cards and not the one I have in this setup.

Bear in mind that:

1) I didnt set it up and I dont have/ cannot influence a decision on what is best practice. i.e. I cannot make them purchase a second network card.

2) I am supposed to just teach them how to use FTP then move on. I can only point out the problem with the setup but we need to get this working

3) I do have administrative access, so at least I can work from there.


Thank-you for this good resource!

And "hi all!!!!", by the way
 
Old 05-26-2008, 08:13 AM   #2
watcher69b
Member
 
Registered: Nov 2007
Location: /home/watcher69b
Distribution: RH, Fedora & CentOS
Posts: 544

Rep: Reputation: 40
Yea make them spend the $30 on a new network card...

i would...
change your layout to be
<www> --- <Router> --- <Squid> --- <Switch> --- <Clients>
(assuming your switch is a dumb-switch)
 
Old 05-26-2008, 08:51 AM   #3
Nathanael
Member
 
Registered: May 2004
Location: Karlsruhe, Germany
Distribution: debian, gentoo, os x (darwin), ubuntu
Posts: 940

Rep: Reputation: 33
you could start off trying if passive ftp connections fail also!
 
Old 05-26-2008, 08:54 AM   #4
ilikejam
Senior Member
 
Registered: Aug 2003
Location: Glasgow
Distribution: Fedora / Solaris
Posts: 3,109

Rep: Reputation: 96
I wouldn't expect ping to work - external addresses (and external DNS) shouldn't be visible to the clients. And only having one network card on your proxy host is fine.

2 questions:

1) Are the FTP clients set up to use the proxy?
2) Is squid set up to allow FTP proxying?

Dave
 
Old 05-26-2008, 09:48 AM   #5
tincs
LQ Newbie
 
Registered: May 2008
Posts: 3

Original Poster
Rep: Reputation: 0
Quote:
Originally Posted by Nathanael View Post
you could start off trying if passive ftp connections fail also!
thanks for replying

how do i test if passive ftp connections fail?

how do I configure them?
 
Old 05-26-2008, 09:55 AM   #6
tincs
LQ Newbie
 
Registered: May 2008
Posts: 3

Original Poster
Rep: Reputation: 0
Quote:
Originally Posted by ilikejam View Post
I wouldn't expect ping to work - external addresses (and external DNS) shouldn't be visible to the clients. And only having one network card on your proxy host is fine.

2 questions:

1) Are the FTP clients set up to use the proxy?
2) Is squid set up to allow FTP proxying?

Dave
thanks for replying

To answer you,

1) I have setup the FTP clients to use the proxy.

2) How do I set up or check if squid allows FTP proxying?
 
Old 05-26-2008, 10:06 AM   #7
ilikejam
Senior Member
 
Registered: Aug 2003
Location: Glasgow
Distribution: Fedora / Solaris
Posts: 3,109

Rep: Reputation: 96
OK. You should have something like:

acl Safe_ports port 21

in your squid.conf (the exact syntax will depend on the rest of the configuration, but it should be reasonably obvious what's going on). This allows connections out to port 21 (FTP).

Dave
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Linux/Samba PDC can't resolve windows names wbacon Linux - Networking 0 02-21-2008 09:42 AM
Resolve PC names to IP Andy@DP Linux - Server 5 06-29-2007 03:51 PM
DNS, Linux doesnt resolve domain names for me ikk Linux - Networking 6 08-28-2005 03:35 PM
DNS, Linux doesnt resolve domain names for me ikk Linux - Newbie 6 08-28-2005 03:29 PM
Linux gateway computer can't resolve names krsnendu Linux - Networking 4 12-17-2003 09:30 AM


All times are GMT -5. The time now is 10:06 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration