MNF

comkid · 11-11-2004, 10:29 AM

I don't understand what's happening here.

I installed MNF to configure a DMZ for our Network, I have 3 NIC's Installed

eth0: LAN
eth1: WAN
eth2: DMZ

I have 3 servers I'm trying to put behind the DMZ, they consist of a DNS/FTP Server, IMap Server, WWW Server.

DNS/FTP = .2
WWW = .3
IMap = .4

When I first attempted it, I tried all three machines once, which didn't pan out.

Then I tried moving the least critical server (WWW), It moved just fine, I have it NAT'd and ProxyARP'd and all the required rules setup.

I then tried moving the IMap server, it appeared to work, but... From the LAN Zone, I can talk to it, and from WAN Zone I can talk to it if the machine trying to access it is on the network behind our Router and outside the firewall, but if a completely outside party tries to access the server, if gets no response. I'm at a complete loss... I fear that If I attempt to move the DNS/FTP Server I will have the same result.

I've tried several things (change NIC, Different Internal Address, Banging Head Against Wall), I've even allocated a test IP address of .10, which will work from everywhere, but as soon as I attempt to use .4 it will not work outside our Router... Has anyone else heard of this happening and how to resolve it, I can not change the IP address of these machines because of client configurations

Any Help is greatly appreciated.

Comkid

comkid · 11-15-2004, 10:55 AM

Please! Has Anyone had anything like this happen before?
Let me throw out a thought and see if it makes sense to anyone else,

I'm guessing that the .4 machine, because it almost always has connections to and from it, that when I went to switch it, there was an active connection through our router, and for some reason, the router associated that ip with the mac address on that machine, but when I try to move it to a different machine, that active connection screwed up the routing to the new location of the card. Which would explain that internal to the router being able to get to the new location, but external to the router, wouldn't be able to because it's looking at the wrong physical location.

It sounds crazy, but I'm running out of Idea. Any thoughts to this effect?

Comkid