LinuxQuestions.org
Did you know LQ has a Linux Hardware Compatibility List?
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices

Reply
 
Search this Thread
Old 08-13-2006, 10:26 PM   #1
depam
Member
 
Registered: Sep 2005
Posts: 829

Rep: Reputation: 30
Question on IPCop Orange Interface


Hi!

I have successfully installed IPCop. We are using RED,GREEN and BLUE interface now. I've find it really great. However, the Orange interface isn't working for me. Here's my IP Addressing:

Red : static IP Provided by my ISP
BLUE : 192.168.1.1
GREEN : 192.168.0.1
ORANGE : 192.168.2.1

Now, I've connected the orange eth2 to one of my PC using a crosscable. I've set the static IP of 192.168.2.2 on that PC. I've tried to ping the firewall but nothing happened. I've researched further and I found out that the DMZ can not possibly reach the Firewall for security reasons. Now, I turned on DMZ pinholes instructing the orange interface 192.168.2.2 to access my laptop with Apache turned on with an IP of 192.168.1.102. I opened up the browser on 192.168.2.2 and accessed 192.168.1.102 and still nothing happened. Hope someone can help me out on this. Here's my assumptions and queries:

1.) Orange zone should not be able to access the green network but they should have an access to the internet zone. If so, what will be my gateway and DNS for it to access the outside world?
2.) Green will have access to the orange network without the need for DMZ pinholes.
3.) For instance I have orange network on IPCop having the IP 192.168.2.1, without DHCP what address should I assign to the web server? What are my gateways and DNS?
4.) Please help me with the following constraints that the IPCop specified on their documentation:

Orange -> Firewall (Closed, Don't use IPCOP as DNS or DHCP Server for Orange)
Orange -> Red Open

If I will not be using IPCop as DNS then will I have to specify my ISP's DNS address on the webserver machine? My problem here is that I don't know what gateway to specify for it to access the DHCP server.

Please help me on this.
 
Old 08-14-2006, 01:23 AM   #2
lleb
Senior Member
 
Registered: Dec 2005
Location: Florida
Distribution: CentOS/Fedora
Posts: 2,565

Rep: Reputation: 475Reputation: 475Reputation: 475Reputation: 475Reputation: 475
ok on Orange you will not have a DHCP unless it is outside of the IPCop.

the DNS will be running on the web server, well should be. a public DNS is 4.4.4.1 IIRC that is a free public DNS server or 4.4.4.2 and good luck with those for DNS servers. should work.

you should use the 192.168.2.1 as the gateway for orange.

i hope that helps, and i hope that is correct, should be.
 
Old 08-14-2006, 01:40 AM   #3
depam
Member
 
Registered: Sep 2005
Posts: 829

Original Poster
Rep: Reputation: 30
lleb,

Well, I have my webserver's gateway to 192.168.2.1. I've tried to ping a static IP which belongs to our network but it won't respond. I understand that eventhough if it doesn't have a DNS, I must be able to ping a certain IP address if it's up. Now what I did was used the DNS of our ISP. But when I tried to ping www.yahoo.com, nothing happened. It seems that the webserver is not routing traffic to its gateway to the outside world. Any other suggestions? Thanks.
 
Old 08-14-2006, 03:06 AM   #4
depam
Member
 
Registered: Sep 2005
Posts: 829

Original Poster
Rep: Reputation: 30
This is a follow up questions,

does the ipcop box should be able to ping the machines on the dmz's? Mine can't ping to the dmz machines. I don't understand what went wrong on the orange zone. All other zones are working perfectly except for the orange.
 
Old 08-15-2006, 12:32 PM   #5
lleb
Senior Member
 
Registered: Dec 2005
Location: Florida
Distribution: CentOS/Fedora
Posts: 2,565

Rep: Reputation: 475Reputation: 475Reputation: 475Reputation: 475Reputation: 475
the DMZ can not ping any IP that is on your LAN, it is completly seperate from the LAN and is also on a seperate ipscheme.

try pinging 64.233.187.99 that is one of google.com's IP addresses.

also give a print out of the full ip stack on the web server. what distro is it, etc...
 
Old 08-16-2006, 02:35 AM   #6
depam
Member
 
Registered: Sep 2005
Posts: 829

Original Poster
Rep: Reputation: 30
lleb,

Thanks. I was able to establish the orange zone. I used the DNS of our ISP and pointed my gateway to the IPCop's machine. Thanks for your help.
 
Old 08-16-2006, 01:29 PM   #7
lleb
Senior Member
 
Registered: Dec 2005
Location: Florida
Distribution: CentOS/Fedora
Posts: 2,565

Rep: Reputation: 475Reputation: 475Reputation: 475Reputation: 475Reputation: 475
glad you got it up and running.
 
Old 11-23-2008, 10:03 PM   #8
dungphamquocdl
LQ Newbie
 
Registered: Nov 2008
Posts: 1

Rep: Reputation: 0
Quote:
Originally Posted by depam View Post
lleb,

Thanks. I was able to establish the orange zone. I used the DNS of our ISP and pointed my gateway to the IPCop's machine. Thanks for your help.
Hi Depam and lleb
I'm sorry, show me how to fix error of Depam.
I also setup a network include orange, green ,red. And from Orange Zone can't ping outside. i try to fix it but unsuccessful.
 
Old 11-25-2008, 11:07 AM   #9
depam
Member
 
Registered: Sep 2005
Posts: 829

Original Poster
Rep: Reputation: 30
Hi dungphamquocdl,

Just use the DNS IP Addresses provided by your ISP and use IPCop's IP address as gateway. In my case, I use 192.168.2.1 which is the IP address of the IPCop Orange interface.
 
Old 05-16-2009, 08:38 PM   #10
tdog89
LQ Newbie
 
Registered: May 2009
Posts: 14

Rep: Reputation: 0
Okay, I am having the same problem. I have 3 NIC's on my IPCOP router.
1 NIC RED
2 NIC GREEN
3 NIC ORANGE

Green and red work fine no problems, etc. The orange is having alots of problems I can not ping out nor ping in. Can't SSH after port forwarding and Server can not ping anything. I have the following IP scheme

RED - ISP static
GREEN - 192.168.200.1
ORANGE - 192.168.2.1

I have three computers on GREEN. I have one Server on Orange used for website, etc. I have the one on Orange setup with the following IP scheme.

IP - 192.168.2.2
Gateway - 192.168.2.1
DNS 1 and 2 are ISP DNS servers. (should i set them up for IPcop 192.168.2.1?)

I have looked on my connection sheet and seen me trying to connect to it but no luck unreplied. I am wondering if I am doing something wrong and what?

The o/s running on webserver is CentOS 5.3 with Kernel 2.6.29 with Cross-over cable. This cable goes from Ethernet card to Orange Ethernet card. Everything works i had it set up on Green before but decided to move it to DMZ so there was no problems with Local network. Any advice and/or pointing me in the right direction would be helpfull. Thank you in advance for help me.
 
Old 04-26-2010, 04:12 AM   #11
Aks
LQ Newbie
 
Registered: Apr 2010
Posts: 4

Rep: Reputation: 0
Ipcop

Hi,

I am new to IPCOP but trying to sort out one of my client's issue.
The client has a working system with GREEN and RED Network.
I need to configure ORANGE network for a DMZ requirement that has come up.

Now i added a new NIC to the existing IPCOP system and want to configure it.The new NIC is not showing up in the IPCOP system.
Please let me know if we have to follow some procedure for the configuration of NIC and the ORANGE network.

Hope i dont have to build the system from scratch.

Thanks
Akram
 
Old 04-27-2010, 01:55 PM   #12
lleb
Senior Member
 
Registered: Dec 2005
Location: Florida
Distribution: CentOS/Fedora
Posts: 2,565

Rep: Reputation: 475Reputation: 475Reputation: 475Reputation: 475Reputation: 475
Quote:
Originally Posted by Aks View Post
Hi,

I am new to IPCOP but trying to sort out one of my client's issue.
The client has a working system with GREEN and RED Network.
I need to configure ORANGE network for a DMZ requirement that has come up.

Now i added a new NIC to the existing IPCOP system and want to configure it.The new NIC is not showing up in the IPCOP system.
Please let me know if we have to follow some procedure for the configuration of NIC and the ORANGE network.

Hope i dont have to build the system from scratch.

Thanks
Akram
run setup, then change from reg/green to red/green/orange then it will ask what NICs to assign were. it will find the 2 you had originally installed, but will ask for what to do with the 3rd. it should then give you the option to scan and find drivers.
 
Old 04-27-2010, 01:57 PM   #13
lleb
Senior Member
 
Registered: Dec 2005
Location: Florida
Distribution: CentOS/Fedora
Posts: 2,565

Rep: Reputation: 475Reputation: 475Reputation: 475Reputation: 475Reputation: 475
Quote:
Originally Posted by tdog89 View Post

I have three computers on GREEN. I have one Server on Orange used for website, etc. I have the one on Orange setup with the following IP scheme.

IP - 192.168.2.2
Gateway - 192.168.2.1
DNS 1 and 2 are ISP DNS servers. (should i set them up for IPcop 192.168.2.1?)

I have looked on my connection sheet and seen me trying to connect to it but no luck unreplied. I am wondering if I am doing something wrong and what?
not sure if you figured things out or not, but point the orange DNS to the red gateway, not to your outside DNS, but you really should be running local DNS on the web server.

http://qmail.jms1.net/djbdns/

go there to read up on how to configure a much more secure DNS server then bind.
 
Old 04-28-2010, 01:54 AM   #14
Aks
LQ Newbie
 
Registered: Apr 2010
Posts: 4

Rep: Reputation: 0
Quote:
Originally Posted by lleb View Post
run setup, then change from reg/green to red/green/orange then it will ask what NICs to assign were. it will find the 2 you had originally installed, but will ask for what to do with the 3rd. it should then give you the option to scan and find drivers.
Hi,

That means when i run initial setup it will find my new NIC and i assign it to orange network.
I dont habe to install the whole thing again.Once i find my new NIC i will assign it to Orange network and stop my installation?

Please let me know.

Thanks
Akram
 
Old 04-29-2010, 12:11 AM   #15
lleb
Senior Member
 
Registered: Dec 2005
Location: Florida
Distribution: CentOS/Fedora
Posts: 2,565

Rep: Reputation: 475Reputation: 475Reputation: 475Reputation: 475Reputation: 475
Quote:
Originally Posted by Aks View Post
Hi,

That means when i run initial setup it will find my new NIC and i assign it to orange network.
I dont habe to install the whole thing again.Once i find my new NIC i will assign it to Orange network and stop my installation?

Please let me know.

Thanks
Akram
its just the setup, not the install. if the setup does not work, then yes you will have to fully install from scratch. at least it only takes like 5min. if you have custom iptables then make sure to back them up to a floppy or USB drive so you can restore them once the system is rebuilt.

sorry been a while so im shooting from the hip, but i think you should just be able to run setup from terminal (no the web GUI) as root and go from there.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
green pc's can't access name-based web/mail virtual hosts on ipcop orange zone (dmz) rcrreyes Linux - Security 3 06-21-2006 08:30 PM
IPcop Orange and Green problem Es-web Linux - Security 1 09-17-2005 02:37 PM
ipcop, block icmp on red interface webstuff Linux - Security 9 04-18-2005 10:43 PM
multiple computers on IPCop 13? on orange ac3kid Linux - Networking 2 01-14-2005 12:32 AM
ipcop - can't access web interface esears Linux - Software 0 06-03-2004 07:14 AM


All times are GMT -5. The time now is 12:20 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration