Netgear router + linuxbox problem

simouzino · 06-26-2006, 11:47 PM

hi i have the following question.
a netgear adsl router dg834G has lan ip 10.0.0.138 and wan Ip xxx.xxx.xxx.xx
a gentoo linuxbox has ip 10.0.0.2
from netgear firewall rules all incoming request forwarded to internal 10.0.0.2
the linuxbox has gw 10.0.0.138 ,DNS and of course has full access to the internet
also runs apache2 & ssh services
the netgear router provides NAT to the 10.0.0. network

my question is simple and - i hope not stupid ....

why i cant access the linux services thru the xxx.xxx.xxx.xx ip ?

#ifconfig
eth0 Link encap:Ethernet HWaddr 00:20:ED:7B:B0:05
inet addr:10.0.0.2 Bcast:10.0.0.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:3021 errors:0 dropped:0 overruns:0 frame:0
TX packets:3238 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:250912 (245.0 Kb) TX bytes:1344942 (1.2 Mb)
Interrupt:185 Base address:0x4000

minoan ~ # route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
10.0.0.0 * 255.255.255.0 U 0 0 0 eth0
loopback localhost.local 255.0.0.0 UG 0 0 0 lo
default 10.0.0.138 0.0.0.0 UG 0 0 0 eth0
minoan ~ #

tia for any reply
simouzino

cdhgee · 06-27-2006, 02:42 AM

Probably you haven't configured the firewall on your linux box to allow the services in. To check the firewall rules (as root):

Code:

iptables -L -v

simouzino · 06-27-2006, 03:00 AM

Quote:

Originally Posted by cdhgee

Probably you haven't configured the firewall on your linux box to allow the services in. To check the firewall rules (as root):

Code:

iptables -L -v

there are'nt rules currently !!

sonajiso · 06-27-2006, 03:41 AM

Try to make 10.0.0.2 a DMZ
Some (most?) netgear routers have very poor NAT and routing capabilities and if you have both a DMZ and port forwarding active, neither might work. Try taking upnp off as well.

simouzino · 06-27-2006, 04:01 AM

Quote:

Originally Posted by sonajiso

Try to make 10.0.0.2 a DMZ
Some (most?) netgear routers have very poor NAT and routing capabilities and if you have both a DMZ and port forwarding active, neither might work. Try taking upnp off as well.

thank you, i ll try it and i will post the results ...

>>netgear routers have very poor NAT and routing capabilities

that's really pretty strange,cause actually that netgear model is running a linux with iptables :-)

fotoguy · 06-27-2006, 09:59 PM

also check the /etc/hosts.deny and /etc/hosts.allow files on your linux box, this will effect all tcp connections.
If you have ALL:ALL in your hosts.deny file you will need to put something in the hosts.allow file to allow the tcp connections, somthing similiar too:

sshd:ALL
httpd:ALL

Its been a while so hopefully these rules are correct.

simouzino · 06-29-2006, 02:33 PM

for the replies... so far nothing !!!!
i sent an email to Netgear and wating for answer...
thanks again, i soon as i ll have news i ll post it here.