Hi!

I have successfully installed IPCop. We are using RED,GREEN and BLUE interface now. I've find it really great. However, the Orange interface isn't working for me. Here's my IP Addressing:

Red : static IP Provided by my ISP
BLUE : 192.168.1.1
GREEN : 192.168.0.1
ORANGE : 192.168.2.1

Now, I've connected the orange eth2 to one of my PC using a crosscable. I've set the static IP of 192.168.2.2 on that PC. I've tried to ping the firewall but nothing happened. I've researched further and I found out that the DMZ can not possibly reach the Firewall for security reasons. Now, I turned on DMZ pinholes instructing the orange interface 192.168.2.2 to access my laptop with Apache turned on with an IP of 192.168.1.102. I opened up the browser on 192.168.2.2 and accessed 192.168.1.102 and still nothing happened. Hope someone can help me out on this. Here's my assumptions and queries:

1.) Orange zone should not be able to access the green network but they should have an access to the internet zone. If so, what will be my gateway and DNS for it to access the outside world?
2.) Green will have access to the orange network without the need for DMZ pinholes.
3.) For instance I have orange network on IPCop having the IP 192.168.2.1, without DHCP what address should I assign to the web server? What are my gateways and DNS?
4.) Please help me with the following constraints that the IPCop specified on their documentation:

Orange -> Firewall (Closed, Don't use IPCOP as DNS or DHCP Server for Orange)
Orange -> Red Open

If I will not be using IPCop as DNS then will I have to specify my ISP's DNS address on the webserver machine? My problem here is that I don't know what gateway to specify for it to access the DHCP server.

Please help me on this.

ok on Orange you will not have a DHCP unless it is outside of the IPCop.

the DNS will be running on the web server, well should be. a public DNS is 4.4.4.1 IIRC that is a free public DNS server or 4.4.4.2 and good luck with those for DNS servers. should work.

you should use the 192.168.2.1 as the gateway for orange.

i hope that helps, and i hope that is correct, should be.

lleb,

Well, I have my webserver's gateway to 192.168.2.1. I've tried to ping a static IP which belongs to our network but it won't respond. I understand that eventhough if it doesn't have a DNS, I must be able to ping a certain IP address if it's up. Now what I did was used the DNS of our ISP. But when I tried to ping www.yahoo.com, nothing happened. It seems that the webserver is not routing traffic to its gateway to the outside world. Any other suggestions? Thanks.

This is a follow up questions,

does the ipcop box should be able to ping the machines on the dmz's? Mine can't ping to the dmz machines. I don't understand what went wrong on the orange zone. All other zones are working perfectly except for the orange.

the DMZ can not ping any IP that is on your LAN, it is completly seperate from the LAN and is also on a seperate ipscheme.

try pinging 64.233.187.99 that is one of google.com's IP addresses.

also give a print out of the full ip stack on the web server. what distro is it, etc...

lleb,

Thanks. I was able to establish the orange zone. I used the DNS of our ISP and pointed my gateway to the IPCop's machine. Thanks for your help.

glad you got it up and running.

Hi Depam and lleb
I'm sorry, show me how to fix error of Depam.
I also setup a network include orange, green ,red. And from Orange Zone can't ping outside. i try to fix it but unsuccessful.

Hi dungphamquocdl,

Just use the DNS IP Addresses provided by your ISP and use IPCop's IP address as gateway. In my case, I use 192.168.2.1 which is the IP address of the IPCop Orange interface.

Okay, I am having the same problem. I have 3 NIC's on my IPCOP router.
1 NIC RED
2 NIC GREEN
3 NIC ORANGE

Green and red work fine no problems, etc. The orange is having alots of problems I can not ping out nor ping in. Can't SSH after port forwarding and Server can not ping anything. I have the following IP scheme

RED - ISP static
GREEN - 192.168.200.1
ORANGE - 192.168.2.1

I have three computers on GREEN. I have one Server on Orange used for website, etc. I have the one on Orange setup with the following IP scheme.

IP - 192.168.2.2
Gateway - 192.168.2.1
DNS 1 and 2 are ISP DNS servers. (should i set them up for IPcop 192.168.2.1?)

I have looked on my connection sheet and seen me trying to connect to it but no luck unreplied. I am wondering if I am doing something wrong and what?

The o/s running on webserver is CentOS 5.3 with Kernel 2.6.29 with Cross-over cable. This cable goes from Ethernet card to Orange Ethernet card. Everything works i had it set up on Green before but decided to move it to DMZ so there was no problems with Local network. Any advice and/or pointing me in the right direction would be helpfull. Thank you in advance for help me.

Hi,

I am new to IPCOP but trying to sort out one of my client's issue.
The client has a working system with GREEN and RED Network.
I need to configure ORANGE network for a DMZ requirement that has come up.

Now i added a new NIC to the existing IPCOP system and want to configure it.The new NIC is not showing up in the IPCOP system.
Please let me know if we have to follow some procedure for the configuration of NIC and the ORANGE network.

Hope i dont have to build the system from scratch.

Thanks
Akram

run setup, then change from reg/green to red/green/orange then it will ask what NICs to assign were. it will find the 2 you had originally installed, but will ask for what to do with the 3rd. it should then give you the option to scan and find drivers.

not sure if you figured things out or not, but point the orange DNS to the red gateway, not to your outside DNS, but you really should be running local DNS on the web server.

http://qmail.jms1.net/djbdns/

go there to read up on how to configure a much more secure DNS server then bind.

Hi,

That means when i run initial setup it will find my new NIC and i assign it to orange network.
I dont habe to install the whole thing again.Once i find my new NIC i will assign it to Orange network and stop my installation?

Please let me know.

Thanks
Akram

its just the setup, not the install. if the setup does not work, then yes you will have to fully install from scratch. at least it only takes like 5min. if you have custom iptables then make sure to back them up to a floppy or USB drive so you can restore them once the system is rebuilt.

sorry been a while so im shooting from the hip, but i think you should just be able to run setup from terminal (no the web GUI) as root and go from there.