search for: subnet1

Hi there. Currently, our network design has two ISP lines and 3 subnets for LAN. Below are some details :- eth0 - isp1 eth1 - isp2 eth2 - subnet1 eth3 - subnet2 eth4 - subnet3 What i wanted to do is to assign incoming port 80 to our local squid server running on the firewall itself and assigned it to eth0(ISP1). I think it shouldnt be a problem as /etc/shorewall/rules provides a sample of the rule. For ISP2, i wanted to assign yahoo msgr, m...

Hi all, I would like to do something like this at Samba level: hosts allow = subnet1/mask1 subnet2/mask2 etc hosts deny = * But this doesn't seem to work (machine that are not in subnet1 and not in subnet2 still have access) I think the * is not understood by Samba, I tried ALL, this didn't work either. I'm gonna check the samba source code but if I could get an expe...

Hi! I have a problem with samba, that I don't know if it's possible to solve. This is my network: <Subnet1>-Ethernet-<Gateway>-Ethernet-<Subnet2>-Internet Subnet1 is my own local network (bcast 192.168.1.255), Gateway is my own gateway machine (FreeBSD4.4, IPs: 192.168.1.1 and 193.13.35.101), Subnet2 is my neighbours (bcast 193.13.255.255). I can configure all machines at Subnet1 and th...

...outer behind it. I''d like to create multiple default classes: 1: + |\_ 1:10 default, ceiling 100000kbit, rate 96000kbit | |\_ 1:11 ceiling 2048kbit, rate 2048kbit | | | |\_1:110 ceiling 2048kbit, rate 1536kbit | \_1:111 ceiling 2048kbit, rate 512kbit (default subnet1) | \_ 1:12 ceiling 2048kbit, rate 2048kbit | |\_1:120 ceiling 2048kbit, rate 1536kbit \_1:121 ceiling 2048kbit, rate 512kbit (default subnet2) I want to use 1:110 for subnet1 sport 3389 I want to use 1:111 for subnet1 (the rest) I want to use 1:120 for subnet2 spo...

good morning all, i have an interesting issue with browsing. details: i have three subnets. (subnet1, subnet2, and subnet3) i have a samba server on each subnet. (samba1, samba2, and samba3) i have a windows 2000 server on subnet1. (m$1) samba1 is the domain master and wins server with ip 192.168.0.1 win2k clients authenticate to their local server and wins is set to 192.168.0.1. when i run a ne...

...rver in each subnet? How does samba fare in this role? If I make each samba server a wins server, how does it know on which interface to operate - each server has one interface that connecets to a central backbone network and obviously I don't want ALL my servers to be a wins on that subnet. subnet1 ------- subnet1 server ---------- backbone network -------------- subnet2 server ------------- subnet 2 All one domain About 17 of the subnets connecting to backbone network through their linux server / router Need to be able to browse accross subnets users on subnet1 sometimes need to access &quo...

...rvers have 655 open to internal ips only. With LocalDiscovery (as well as IndirectData = yes on "non-public" servers) this works work pretty well, as far as I can tell. But it wouldn't solve the inner-Google traffic between subnets since Google Subnet0 would talk over public to Google Subnet1. What's the best way of doing something like this? I was thinking maybe 2 instances of tinc on the "public" boxes, but Google servers only have a single interface, eth0, that has the internal IP, so I couldn't listen on the external and internal IPs separately. Thanks! ----------...

...tell me how to realize my idea. We have a data-server which is used by different subnets in our company. now I want wo put a linux-box in front the dataserver which control traffic usage to the different subnet´s. is it possible to do this transparent and dynamic? linux bridge? UserPC | | Subnet1 ---- Router ------100Mbit--- | switch <-100MBit --> Linux-Box <--- 100MBit ----> Dataserver | Subnet2 ----------- 100MBit------------ | | UserPC Subnet 2 should have 80% of capacity. Subnet 1 the leftover. and perhaps it is possible to to speed u...

...y /etc/shorewall/rfc1918 to pass traffic to/from remote RFC1918 networks. III. The requirement to avoid masquerading traffic through tunnels means that you can''t cleanly define a VPN hub. You would want to be able to have an entry in /etc/shorewall/masq as follows: <ext if>:!<subnet1>,<subnet2>,... <local if> Where <subnet<n>> are the remote networks that you are tying together. Shorewall currently doesn''t support such entries. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall....

...group in each subnet. My aim is to have users being able to view and access shares on both workgroups. I have a Samba server in each subnet/workgroup, configured as both the domain and local master for each workgroup. Each server is also the WINS server for its subnet. The setup is like this: Subnet1: network - 192.168.10.0/24 server IP - 192.168.10.254 workgroup - Group1 Subnet2: network - 192.168.20.0/24 server IP - 192.168.20.254 workgroup - Group2 The two servers are configured identically, except for the information above, so the smb.conf for the Group1 server looks like this: [global]...

...the asterisk server, nor upgrade the firmware to the latest (1.41) i'm still using 1.37. The packets are traversing the router, going into the other subnet, hitting the asterisk box, but not actually making it to asterisk. Nothing in the asterisk logs, but tcpdump on all three interfaces (subnet1, subnet2, asterisk box) all see the packets coming and going. What's even better is when I set the IAX2 ports to use 4569, it seems to try and connect to port 6001... has anyone successfully gotten these phones to work with either sip or iax, and have instructions on updating the firmware p...

... forwardable = true  allow_weak_crypto = true [realms]  EXAMPLE.COM = {    default_domain = example.com    master_kdc= domserver1.example.com    kdc=domserver1.example.com    kdc=domserver2.example.com    admin_server=domserver1.example.com  } [domain_realm]  example.com = EXAMPLE.COM  subnet1.example.com = EXAMPLE.COM  .subnet1.example.com = EXAMPLE.COM  subnet2.example.com = EXAMPLE.COM  .subnet2.example.com = EXAMPLE.COM [appdefaults]  pam = {    debug = false    ticket_lifetime = 10h    renew_lifetime = 7d    forwardable = true    krb4_convert = false    validate = true  ...

...rnal ips only. With LocalDiscovery (as well as IndirectData = yes on >> "non-public" servers) this works work pretty well, as far as I can tell. >> But it wouldn't solve the inner-Google traffic between subnets since Google >> Subnet0 would talk over public to Google Subnet1. What's the best way of >> doing something like this? I was thinking maybe 2 instances of tinc on the >> "public" boxes, but Google servers only have a single interface, eth0, that >> has the internal IP, so I couldn't listen on the external and internal IPs >...

...</controller> <controller type='pci' index='0' model='pci-root'> <alias name='pci0'/> </controller> <interface type='network'> <mac address='52:54:00:cf:a2:22'/> <source network='Subnet1'/> <target dev='vnet1'/> <model type='virtio'/> <alias name='net0'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x03' function='0x0'/> </interface> <seri...

In my /var/log/messages file, in recent days I have been receiving numerous messages such as: Jun 23 15:02:50 OUR-HOST named[577]: sysquery: nslookup reports danger (dns.SUBNET1.OTHER.DOMAIN.AAA.BBB.CCC.in-addr.arpa) Jun 23 15:02:51 OUR-HOST named[577]: sysquery: nslookup reports danger (HOST2.SUBNET2.OTHER.DOMAIN.AAA.BBB.CCC.in-addr.arpa) Jun 23 15:02:51 OUR-HOST named[577]: sysquery: nslookup reports danger (dns.SUBNET3.OTHER.DOMAIN.AAA.BBB.CCC.in-addr.arpa) Jun...

...Hello, I''m trying to setup a central IPSEC-Gateway with several ipsec tunnels. Some are to be routed over one leased line, some over the other leased line. Both leased lines have their own public ip adress. The setup looks kinda like this: eth1(ipsec0)--ISP0--Internet--eth1-Linux1-eth0--Subnet1 / (ipsec-tunnel0) Intranet--eth0-Linux-HQ \ (ipsec-tunnel1) eth2(ipsec1)--ISP1--Internet--eth1-Linux2-eth0--Subnet2 I wanted to use the advanced routing features (ip command) of the linux kernel to solve the routing issues. When...

...to > internal ips only. With LocalDiscovery (as well as IndirectData = yes on > "non-public" servers) this works work pretty well, as far as I can tell. > But it wouldn't solve the inner-Google traffic between subnets since Google > Subnet0 would talk over public to Google Subnet1. What's the best way of > doing something like this? I was thinking maybe 2 instances of tinc on the > "public" boxes, but Google servers only have a single interface, eth0, that > has the internal IP, so I couldn't listen on the external and internal IPs > separately....

...to > internal ips only. With LocalDiscovery (as well as IndirectData = yes on > "non-public" servers) this works work pretty well, as far as I can tell. > But it wouldn't solve the inner-Google traffic between subnets since Google > Subnet0 would talk over public to Google Subnet1. What's the best way of > doing something like this? I was thinking maybe 2 instances of tinc on the > "public" boxes, but Google servers only have a single interface, eth0, that > has the internal IP, so I couldn't listen on the external and internal IPs > separately....

...rvers have 655 open to internal ips only. With LocalDiscovery (as well as IndirectData = yes on "non-public" servers) this works work pretty well, as far as I can tell. But it wouldn't solve the inner-Google traffic between subnets since Google Subnet0 would talk over public to Google Subnet1. What's the best way of doing something like this? I was thinking maybe 2 instances of tinc on the "public" boxes, but Google servers only have a single interface, eth0, that has the internal IP, so I couldn't listen on the external and internal IPs separately. >> >> T...

Hi, Is there a way in Linux to do NAT with a pool of outside addresses such that each connection to the outside resource gets a different IP address?? I don''t want 1:1 NAT as I have some thousands of IP addresses on one side of the LARTC router that _may_ need to access a resource on the other side... The resource needs to see a different IP address for each active call, but these