LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Enterprise Linux Forums > Linux - Enterprise
User Name
Password
Linux - Enterprise This forum is for all items relating to using Linux in the Enterprise.

Notices


Reply
  Search this Thread
Old 02-24-2005, 03:00 AM   #1
backroger
Member
 
Registered: Dec 2004
Posts: 81

Rep: Reputation: 15
Internet Connection Sharing


I have this:

[Internet/University Firewall Server IP 10.10.255.254]
|
|
[3com Stack III 12-Port Fiber Switch HUB]
|
|
[RHEL AS 3.0 Server (eth0)]
[IP 10.10.1.2 /NM 255.255.0.0 /GW 10.10.255.254 /DNS 10.0.1.1]
[RHEL AS 3.0 Server (eth1)]
[IP 192.168.0.254 /NM 255.255.255.0 /GW 10.10.1.2 /DNS 10.0.1.1]
|
|
[D-Link 10/100 8-Port Switch Hub]
|
|
[Windows ME]
[IP 192.168.0.1/NM 255.255.255.0/GW 192.168.0.254/DNS 10.0.1.1]

I have set "enabled" the Firewall's NAT (Network Address Translation) on eth1 in the RHEL AS 3.0 to make IPv4 forwarding. Set the Network Proxy Server in RHEL AS 3.0 "proxy.xxxxxxx.xxx.xx:3128". I can ping RHEL AS 3.0 from WindowsME and vice versa. So there is a connection between the two.

[root@eapi root]# ifconfig
eth0 Link encap:Ethernet HWaddr 00:0A:5E:48:CA:2E
inet addr:10.10.1.2 Bcast:10.10.255.255 Mask:255.255.0.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:133 errors:0 dropped:0 overruns:1 frame:0
TX packets:114 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:16313 (15.9 Kb) TX bytes:12952 (12.6 Kb)
Interrupt:9 Base address:0xa400

eth1 Link encap:Ethernet HWaddr 00:60:08:67:A3:BB
inet addr:192.168.0.254 Bcast:192.168.0.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:1 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:2 carrier:2
collisions:0 txqueuelen:1000
RX bytes:10909 (10.6 Kb) TX bytes:0 (0.0 b)
Interrupt:9 Base address:0x9400

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:243 errors:0 dropped:0 overruns:0 frame:0
TX packets:243 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:16768 (16.3 Kb) TX bytes:16768 (16.3 Kb)

[root@eapi root]# route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
192.168.0.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
10.10.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth1
0.0.0.0 10.10.255.254 0.0.0.0 UG 0 0 0 eth0
[root@eapi root]#


Problem:

Now in WindowsMe...when I launched Internet Explorer....I have no internet access. I have Disable the "proxy setup" in Windows ME for a direct connection and still no internet access. Can anyone shed a light on this?

Thank you in advance

Last edited by backroger; 02-24-2005 at 10:52 AM.
 
Old 02-24-2005, 09:13 AM   #2
Capt_Caveman
Senior Member
 
Registered: Mar 2003
Distribution: Fedora
Posts: 3,658

Rep: Reputation: 69
Make sure that squid (proxy server) is running on the RH system (use netstat -pantu). Also, I think you likely have the NAT backwards. In most network topologies, you either IP masquerade or SNAT traffic going out the exteral interface (eth0).

If you still aren't able to get outside the LAN using the proxy server, run tcpdump on eth1 while a client tries to connect to the proxy. Check the output packets to verify that they are addressed to the proper port.
 
Old 02-24-2005, 10:34 PM   #3
backroger
Member
 
Registered: Dec 2004
Posts: 81

Original Poster
Rep: Reputation: 15
resolved!!!

I have re-configured the eth1's address and bam!!!

[root@eapi root]# tcpdump -i eth1
tcpdump: listening on eth1
12:25:16.630393 arp who-has 192.168.0.254 tell 192.168.0.2
12:25:16.630454 arp reply 192.168.0.254 is-at 0:a:5e:48:c9:bb
12:25:16.630741 192.168.0.2.1074 > 10.XXX.XXX.XXX.http: S 288709428:288709428(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
12:25:16.632956 10.XXX.XXX.XXX.http > 192.168.0.2.1074: S 3661149227:3661149227(0) ack 288709429 win 5840 <mss 1460,nop,nop,sackOK> (DF)
12:25:16.633453 192.168.0.2.1074 > 10.XXX.XXX.XXX.http: . ack 1 win 17520 (DF)
12:25:16.634358 192.168.0.2.1074 > 10.XXX.XXX.XXX.http: P 1:199(198) ack 1 win 17520 (DF)
12:25:16.635230 10.XXX.XXX.XXX.http > 192.168.0.2.1074: . ack 199 win 6432 (DF)
12:25:16.635759 10.XXX.XXX.XXX.http > 192.168.0.2.1074: P 1:191(190) ack 199 win 6432 (DF)
12:25:16.738018 192.168.0.2.1075 > proxy.xxxxxx.xxx.xx.squid: S 288796619:288796619(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)12:25:16.739511 proxy.xxxxxx.xxx.xx.squid > 192.168.0.2.1075: S 2841021943:2841021943(0) ack 288796620 win 5840 <mss 1460,nop,nop,sackOK> (DF)
12:25:16.739954 192.168.0.2.1075 > proxy.xxxxxx.xxx.xx.squid: . ack 1 win 17520 (DF)
12:25:16.743396 192.168.0.2.1075 > proxy.xxxxxx.xxx.xx.squid: P 1:255(254) ack 1 win 17520 (DF)
12:25:16.745195 proxy.xxxxxx.xxx.xx.squid > 192.168.0.2.1075: . ack 255 win 6432 (DF)
12:25:16.798648 192.168.0.2.1074 > 10.0.1.131.http: . ack 191 win 17330 (DF)
12:25:17.596882 proxy.xxxxxx.xxx.xx.squid > 192.168.0.2.1075: . 1:1461(1460) ack 255 win 6432 (DF)
12:25:17.598092 proxy.xxxxxx.xxx.xx.squid > 192.168.0.2.1075: . 1461:2921(1460) ack 255 win 6432 (DF)
12:25:17.600027 192.168.0.2.1075 > proxy.xxxxxx.xxx.xx.squid: . ack 2921 win 17520 (DF)

[root@eapi root]# netstat -pantua
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:32768 0.0.0.0:* LISTEN 2135/rpc.statd
tcp 0 0 127.0.0.1:32769 0.0.0.0:* LISTEN 2321/xinetd
tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN 2448/mysqld
tcp 0 0 0.0.0.0:139 0.0.0.0:* LISTEN 2487/smbd
tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN 2115/portmap
tcp 0 0 0.0.0.0:6000 0.0.0.0:* LISTEN 2583/X
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 2381/httpd
tcp 0 0 0.0.0.0:113 0.0.0.0:* LISTEN 2321/xinetd
tcp 0 0 192.168.0.254:53 0.0.0.0:* LISTEN 2290/named
tcp 0 0 10.10.1.2:53 0.0.0.0:* LISTEN 2290/named
tcp 0 0 127.0.0.1:53 0.0.0.0:* LISTEN 2290/named
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 2305/sshd
tcp 0 0 127.0.0.1:631 0.0.0.0:* LISTEN 2260/cupsd
tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 2350/sendmail: acce
tcp 0 0 127.0.0.1:953 0.0.0.0:* LISTEN 2290/named
tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN 2381/httpd
tcp 0 0 0.0.0.0:445 0.0.0.0:* LISTEN 2487/smbd
tcp 0 0 127.0.0.1:631 127.0.0.1:32772 ESTABLISHED 2260/cupsd
tcp 0 0 127.0.0.1:32772 127.0.0.1:631 ESTABLISHED 2701/eggcups
udp 0 0 0.0.0.0:32768 0.0.0.0:* 2135/rpc.statd
udp 0 0 0.0.0.0:32769 0.0.0.0:* 2290/named
udp 0 0 10.10.1.2:137 0.0.0.0:* 2492/nmbd
udp 0 0 0.0.0.0:137 0.0.0.0:* 2492/nmbd
udp 0 0 10.10.1.2:138 0.0.0.0:* 2492/nmbd
udp 0 0 0.0.0.0:138 0.0.0.0:* 2492/nmbd
udp 0 0 192.168.0.254:53 0.0.0.0:* 2290/named
udp 0 0 10.10.1.2:53 0.0.0.0:* 2290/named
udp 0 0 127.0.0.1:53 0.0.0.0:* 2290/named
udp 0 0 0.0.0.0:615 0.0.0.0:* 2135/rpc.statd
udp 0 0 0.0.0.0:111 0.0.0.0:* 2115/portmap
udp 0 0 0.0.0.0:631 0.0.0.0:* 2260/cupsd

Many...many thanks to Capt. Caveman!
 
Old 02-24-2005, 11:25 PM   #4
Capt_Caveman
Senior Member
 
Registered: Mar 2003
Distribution: Fedora
Posts: 3,658

Rep: Reputation: 69
Cool, glad you got it working. Off topic, I notice from the netstat output that you have a ton of services running on that system. You may want to turn off anything that you aren't using.
 
Old 02-25-2005, 12:26 AM   #5
backroger
Member
 
Registered: Dec 2004
Posts: 81

Original Poster
Rep: Reputation: 15
Yeap...I'll check on it....thanks so much again.

Quote:
Originally posted by Capt_Caveman
Cool, glad you got it working. Off topic, I notice from the netstat output that you have a ton of services running on that system. You may want to turn off anything that you aren't using.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Internet Connection Sharing explorer Mandriva 1 03-17-2005 06:25 PM
Internet connection sharing mark_booze Linux - Newbie 22 01-02-2004 12:37 AM
internet connection sharing Sathe Linux - Newbie 4 12-05-2001 08:59 PM
internet connection sharing Danobri Linux - Networking 14 07-21-2001 11:50 PM
Internet Connection Sharing qsilver Linux - Networking 1 07-19-2001 01:31 AM

LinuxQuestions.org > Forums > Enterprise Linux Forums > Linux - Enterprise

All times are GMT -5. The time now is 04:48 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration