LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 10-18-2004, 12:58 PM   #1
mlitos
LQ Newbie
 
Registered: Oct 2004
Posts: 7

Rep: Reputation: 0
Configuration Help w/ Smoothwall 2.0 Express


If anyone can clue me in on what may be causing my "red" adapter to not work properly I would appreciate it.

I have setup a dedicated firewall CPU connected with the "green" adapter to my wireless router (Linksys BEFW11S4) through one of the LAN ports. I can connect to through my LAN using IE with another PC and configure Smoothwall. I have been able to successfully setup DHCP to assign IP addressed to the clients connected to the router both wired and wireless BUT:

I dont think that the "red" adapter is connected properly to my cable modem. How do I know if it is configured correctly?

I have setup the smoothwall firewall with the green + red configuration & have enabled DHCP on the red adapter to be assigned an IP by my ISP (Cox). I have a straight-thru cable from the cable modem to the "red" adapter. Is there any way of releasing/renewing the IP address through Smoothwall. I'm not convinced that I have any activity in/out of the "red" adapter. Could there somehow be a conflict with my router/AP & the firewall box configured as explained above?

Thanks all,
Manny
 
Old 10-18-2004, 02:23 PM   #2
phatboyz
Member
 
Registered: Feb 2004
Location: Mooresville NC
Distribution: CentOS 4,Free BSD,
Posts: 358

Rep: Reputation: 30
After reading your post it sounds like you have done this correctly. Have you tried powing down the cable modem? Lease time may be a factor. The IP has been leased by your windows box allready so its not going to send out another. You could wait a day and leave the smoothie up but not set to powerdown and reboot if not connected. I havn't messed with cable much except about 4 years ago I ran into the same problem when I tried to use two computers on the same cable connection

I have a smoothie with dsl and it works great. I have a static ip though.
 
Old 10-18-2004, 02:28 PM   #3
mlitos
LQ Newbie
 
Registered: Oct 2004
Posts: 7

Original Poster
Rep: Reputation: 0
I have powered off the cable modem & powered it back on. After doing that I have rebooted the firewall CPU. I quickly looked at the red adapter usage after my post and it shows that there was some outbound and a little inbound activity. However my CPU on the LAN could not connect to the internet.
 
Old 10-18-2004, 06:03 PM   #4
halo14
Senior Member
 
Registered: Apr 2004
Location: Surprise, AZ
Distribution: Debian | CentOS | Arch
Posts: 1,103

Rep: Reputation: 45
well from what is sounds like to me is that you have a Smoothwall box and a linksys router? This is not necessary and can obviously cause problems. The smoothwall is a fully functioning router/firewall.

Your setup should be similar to or equal to this.

[Internet] ==> [Cable Modem] ==> [SmoothWall "Red" Interface]

Then you should have:

[SmoothWall "Green" Interface] ==> [Any Port on a Switch/Hub (NOT A ROUTER), generally using port 1 is a good idea]

From here you can connect as many PCs as you have ports on the switch/hub

Ebay you linksys router man... if you got a smoothie up you don't need it...

If you're just using the wireless router to get network connectivity.. then trade someone for a wireless access point instead. They will be getting a deal, and you will be getting something that works better for your purposes...

Good Luck

Last edited by halo14; 10-18-2004 at 06:05 PM.
 
Old 10-18-2004, 06:57 PM   #5
mlitos
LQ Newbie
 
Registered: Oct 2004
Posts: 7

Original Poster
Rep: Reputation: 0
I'm using the router w/o the internet port (would that be the same as using it as a switch?). The smoothwall firewall is connected through one of the regular the LAN ports. Just to make sure it wasn't the router I connected the green adapter directly to my CPUs NIC (circumventing the router all together). Again I could connect to the smoothwall CPU (directly connected with a crossover cable) through the web interface but NO outside connection to the internet. I even reinstalled Smoothwall & swapped the red and greed adapters (assignment through the setup). No luck there either.

Frustrated
 
Old 10-19-2004, 12:07 AM   #6
RandomLinuxNewb
Member
 
Registered: Oct 2003
Distribution: Slackware
Posts: 101

Rep: Reputation: 15
You may need to use a crossover cable from your modem to the red nic. Also try connecting to your smoothie and going to the tools tab, then click the shell, login with the root account and try to ping kernel.org. If you recieve any replies back then your router is online, and it's some sort of configuration issue to why your desktop is not. While your in the shell enter setup and goto the dhcp configuration menu and make sure that the router IP is set to the primary DNS.
 
Old 10-19-2004, 05:49 PM   #7
halo14
Senior Member
 
Registered: Apr 2004
Location: Surprise, AZ
Distribution: Debian | CentOS | Arch
Posts: 1,103

Rep: Reputation: 45
yes... if you are not using the internet port on the router it should be performing as a switch...

Have you specified the DHCP ranges for the smoothie to assign to your internal network... I assume you are running Windows on the desktop... so do a "ipconfig" and see if the results are equal to what you should be recieving from your smoothie...

here's my setup..

Smoothie has a static internal IP of 192.168.0.1

and it runs DHCP releases on an hourly basis for IPs between 192.168.0.100 and 192.168.0.200...

I believe this is the default for smoothwall...

I don't know if you need a crossover coming from a cable modem... I don't think so... I know that I have to use a crossover from my T1 modem into the smoothwall...

Also... your smoothie may be instyalled correctly... but your Cable provider may lock on to the MAC address of the NIC from your desktop if you were originally connected through it... I know mine does... (INSIGHTBB) So you might have to call them... they do this to prevent people from swithing the internet between multiple computers... i don't get it..

most regular broadband routers like linksys and d-link offer mac address cloning but i haven't found that feature on smoothie yet... (the only i have found that i would have liked included) Check that stuff out.. and get back to me....

Good Luck
 
Old 10-20-2004, 08:20 AM   #8
mlitos
LQ Newbie
 
Registered: Oct 2004
Posts: 7

Original Poster
Rep: Reputation: 0
A crossover cable from the cable modem to the red NIC does not work. The lights on both the NIC and cable modem show that there is no connection.

The internal networking parameters are setup fine. I can see the other computers on the LAN when the green NIC is connected to a lan port on the switch (wired and wireless).

My ISP does not require you provide a MAC address to them.

Still lost
 
Old 10-20-2004, 02:47 PM   #9
halo14
Senior Member
 
Registered: Apr 2004
Location: Surprise, AZ
Distribution: Debian | CentOS | Arch
Posts: 1,103

Rep: Reputation: 45
Did your ISP specifically tell you that they don't require a MAC??

Mine does not... until you change computers without a router and then call them because you can't get online.

Generally, the first computer you hook up to the cable internet after it is installed is the MAC address that registers with the ISP... So that's why it's smart to use a router from the get-go to it binds to the routers mac address...

It's not a big deal... but perhaps you can phone your ISP tech support and ask them if they can see the connection... I did that with mine originally... as I was working out a bug with an old router actually ended up being burnt up..

I suggest giving them a call first and speaking with them..

AS A SIDE NOTE:

if you have a monitor and keyboard connected to the smoothie box... log in as root... then run "ifconfig" and see if your NIC have IP addresses... the green interface, generaly "eth1" should have a 192.168.*.* number...

the red interface or "eth0" should have an external IP address... post the results of ifconfig up here...

if you are getting an ip address from your ISP, then you could possibly give me that IP address at a given point in time and I could remotely log on to the smoothie and check any problems... PERHAPS... though you would have to give me user and PW.. just a thought... good luck... let me know the results...
 
Old 10-21-2004, 02:08 AM   #10
RandomLinuxNewb
Member
 
Registered: Oct 2003
Distribution: Slackware
Posts: 101

Rep: Reputation: 15
Have you tried going in through the shell and typing ifconfig? No need for a monitor and keyboard .
 
Old 10-21-2004, 06:54 AM   #11
halo14
Senior Member
 
Registered: Apr 2004
Location: Surprise, AZ
Distribution: Debian | CentOS | Arch
Posts: 1,103

Rep: Reputation: 45
i'm under the impression that he can't connect to it.. as that is essentially what this entire thread is about... (no internet connectivity)
 
Old 10-21-2004, 08:01 AM   #12
phatboyz
Member
 
Registered: Feb 2004
Location: Mooresville NC
Distribution: CentOS 4,Free BSD,
Posts: 358

Rep: Reputation: 30
Its all in the MAC address. I had this same problem a few years ago on cable. Just tell them that you NIC blew up and you replaced the card. No 2 cards have the same address. When they release it then the mac for the red interface will bind. It should work then.

Also with your cable modem can you put it into bridge mode? Then just have the smoothie to the PPP for you.

Matt

Last edited by phatboyz; 10-21-2004 at 08:03 AM.
 
Old 10-21-2004, 12:20 PM   #13
mlitos
LQ Newbie
 
Registered: Oct 2004
Posts: 7

Original Poster
Rep: Reputation: 0
My service is not locked to a MAC by my ISP; I emailed them today.

I am online now!

I had to reboot the modem to establish a connection with the new hardware (smoothwall NIC) then reboot smoothwall.

Thanks all for the help, I greatly appreciate it.
 
Old 10-21-2004, 02:21 PM   #14
sandromu
LQ Newbie
 
Registered: Oct 2004
Posts: 9

Rep: Reputation: 0
Where can I get Smoothwall?
 
Old 10-21-2004, 04:42 PM   #15
mlitos
LQ Newbie
 
Registered: Oct 2004
Posts: 7

Original Poster
Rep: Reputation: 0
Here:


http://smoothwall.org/get/
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Lan Express IEEE 802.11 PCI Adapter configuration bytesurfer Linux - Wireless Networking 4 03-28-2009 11:02 PM
smoothwall configuration sikkalgopal Linux - Networking 10 06-21-2005 07:13 PM
Smoothwall Express 2.0 - Configuration problems cgtueno Linux - Networking 2 06-17-2004 08:23 AM
Like Qutlook Express ramez Linux - Software 8 07-15-2003 06:19 AM
Smoothwall 2.0 configuration... PLZHELP~ VIVIDTRUTH Linux - Networking 2 02-28-2003 06:57 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 05:26 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration