LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 07-02-2005, 02:59 PM   #1
maku99
LQ Newbie
 
Registered: Jul 2005
Distribution: rh7.3,man9.0,suse9.3pro
Posts: 6

Rep: Reputation: 0
Angry yast2 firewal query


after many faithful years my mandrake 366mhz gateway has died, i have d/ld suse 9.3 and installed it into an old p4 1.7ghz m/c
the problem..
on my old box the only config i had was to setup my adsl (btbroadband),ok
then su in and echo 1 ip_forward and then add iptable -t nat -A POSTROUTING -s 192.xxx.xxx.xxx/24 Masquerade and same but on eth0 to allow other machines on network to see the gateway at 192.xxx.xxx.xxx as their gateway and dns.

New box connects to the web ok and i can ping the static eth1 address and its act light blinks.
but no internet access.

have tried all i can browsed till my fingers bled!!

is there something dumb that im missing .
ppl seem to be mentioning yast2 firewall and ive been there so here is my settings:

dsl0 BTbroadband no zone selected
eth0 allied telesyns 2500 external (#to the dsl line)
eth1 hp 10/100 internal static ip

any help pls.
 
Old 07-04-2005, 07:01 AM   #2
Capt_Caveman
Senior Member
 
Registered: Mar 2003
Distribution: Fedora
Posts: 3,658

Rep: Reputation: 69
Usually this is pretty easy to setup using the Yast2 firewall administration module. Once you start it, make sure that you've selected the proper interfaces for your internal and external networks and make sure to select the "enable forwarding and do masquerading" option. Then save the settings. That will enable port forwarding and perform NAT (masquerading).
 
Old 07-05-2005, 10:16 AM   #3
maku99
LQ Newbie
 
Registered: Jul 2005
Distribution: rh7.3,man9.0,suse9.3pro
Posts: 6

Original Poster
Rep: Reputation: 0
re:yast2

spent 3hrs playing with yast2 settings both in securityandusers>firewall and in system>firewall>susefirewall2 have got eth0 on dhcp (to bt broadband modem) voyager205 ok.
eth1 private internal network.
crazy i no but i can ping 192.168.0.1 gateway addr on eth1 ttl64 ok.
then i use ifconfig to get eth0 dhcp addr ext eth 192.168.1.3 i can ping that too.
then i ping an external ftp server on 210.xxx.xxx.xxx ttl32 ok.
but when i try and ping www.yahoo.com i get unreachable and no internet.

my old machine mandrake 9.0 new psu works fine this is nutz.
any help and thanks for post.
 
Old 07-05-2005, 10:29 AM   #4
Capt_Caveman
Senior Member
 
Registered: Mar 2003
Distribution: Fedora
Posts: 3,658

Rep: Reputation: 69
In that case (you can ping by IP address but not hostname) it sounds like the problem is DNS related and your internal host is not resolving hostnames. Check /etc/resolv.conf and make sure that the entries for your ISPs DNS servers are there.
 
Old 07-05-2005, 05:07 PM   #5
maku99
LQ Newbie
 
Registered: Jul 2005
Distribution: rh7.3,man9.0,suse9.3pro
Posts: 6

Original Poster
Rep: Reputation: 0
re:dns entries

may sound thick but could i use the entries in tne mandrake resolv. file as the onesd to enter in the suse file?

i read in an iptables setup about resolv file entries i will try what should i be looking at please.

Many thanks again i want this to work Ms$ is a neccessary evil to many but i think linux is the future.

Regards
 
Old 07-05-2005, 07:09 PM   #6
Capt_Caveman
Senior Member
 
Registered: Mar 2003
Distribution: Fedora
Posts: 3,658

Rep: Reputation: 69
That may work, depending on how often your ISP changes the IP address of its nameservers. If they change often, then you'll have problems resolving hostnames and have to update the IPs manually. Is this happening on the internal machines or on the gateway host?
 
Old 07-06-2005, 11:20 PM   #7
Sharad9988
LQ Newbie
 
Registered: Jul 2004
Location: INDIA
Posts: 3

Rep: Reputation: 0
i m new for su se Pl . tel me more abou firewll for suse
 
Old 07-07-2005, 02:40 PM   #8
maku99
LQ Newbie
 
Registered: Jul 2005
Distribution: rh7.3,man9.0,suse9.3pro
Posts: 6

Original Poster
Rep: Reputation: 0
firewalls issue 4 sharaad

sharaad try this site for iptables /firewall rules etc. please post a new thread for all future queries best of luck. maku99,(http://iptables-tutorial.frozentux.net/)


now where was i, capt caveman , local (internal network works fine on old gateway . talking to you now. New gateway can browse ,post, email, p2p ok but internal network gets nada.

I agree must be DNS problem but not knowing is a real pain ive checked all cables changed network cards over done hardware stuff .

Thanks for your time , its really appreciated , ive spent lots of time spreading the linux word , its nice to see im not alone..

regards maku99
 
Old 07-07-2005, 06:43 PM   #9
Capt_Caveman
Senior Member
 
Registered: Mar 2003
Distribution: Fedora
Posts: 3,658

Rep: Reputation: 69
So just to get this straight, you can ping hosts from the internal network by IP address but not by hostname? Try yahoo for example; 'ping 68.142.226.33' works but 'ping www.yahoo.com' does not?
 
Old 07-08-2005, 11:22 AM   #10
maku99
LQ Newbie
 
Registered: Jul 2005
Distribution: rh7.3,man9.0,suse9.3pro
Posts: 6

Original Poster
Rep: Reputation: 0
ping by no. only

yep, spot on i can ping from any local internal machine to ip address fine but not by name , i have been reading up on dns and have looked at resolv.conf in etc and also in dhcpd as the forums here at linuxquestions have threads on resolv probs and dns errors. some suggest adding lo to the resolv.conf file other say to create a script of my own to point to dns also there are issues when your isp renews your lease ip and it doesnt update via this.

also there are some abscure refs to named and possible missing entries here too.

this is giving me bags under the eyes and a headache gonna beat it tho.
thanks.
 
Old 07-08-2005, 06:46 PM   #11
Capt_Caveman
Senior Member
 
Registered: Mar 2003
Distribution: Fedora
Posts: 3,658

Rep: Reputation: 69
I'd take a look at the /etc/resolv.conf of the gateway system that has working DNS and copy the nameservers from there into the internal hosts /etc/resolv.conf file. If that doesn't work, you may need to run dhcpd on the gateway and have the internal clients grap the IPs and nameservers from there.
 
Old 07-09-2005, 06:28 PM   #12
maku99
LQ Newbie
 
Registered: Jul 2005
Distribution: rh7.3,man9.0,suse9.3pro
Posts: 6

Original Poster
Rep: Reputation: 0
success

Capt Caveman , thought i would share the solution and the problem with you, after all without you id have had a nervous break down by now.

I wiped server and installed mandrake it worked but only with old bt flat fish modem in situ at old server cupboard. I looked at new "modem" voyager 205 , on box it says router so i look at web searches for routers these send a dns address to the machine telling it that it deals with any dns resloution. so im trying to reroute dns through my server then reresolve through the router duh!

simply cchange client networking to dns of router and bingo linux port forwards and router dns .

aaahhh!! the smell of success.

many thanks again you are a star for stickin with me.

any help i can offer is yours..

good travels and be lucky!
 
Old 07-10-2005, 12:14 PM   #13
Capt_Caveman
Senior Member
 
Registered: Mar 2003
Distribution: Fedora
Posts: 3,658

Rep: Reputation: 69
Interesting, I haven't come across a router/modem that does it that way. Nice job on troubleshooting the problem.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
trying to setup linux firewal/dhcp server but its not sharing the internet connection abefroman Linux - Networking 4 05-01-2005 04:39 AM
yast2 theeidolon Linux - General 7 10-14-2004 01:01 PM
Firewal-Jay + Debian = Error ahoy! Beccara Linux - Networking 0 04-14-2004 04:29 PM
RedHat Network and Firewal Question Hevener Linux - Newbie 2 11-13-2002 07:36 AM
Router/NAT/Firewal Bluee Linux - Networking 4 02-28-2002 11:01 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 07:48 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration