A gateway solution ?
Hi debian list users;
I have a little problem called lack of knowledge. Apart from being the
kernel virgin man, I also am the unexperienced in many aspects. Lack of
knowledge is nasty, because if I knew what programs to use for what and
when, then I would be able to do some more. I'll completely explain the
problem here, in hope that someone can orientate me a little regarding
this little gateway problem I have.
Let's see. I have an internal network here with a possibility of having
up to 250 computers for example. Currently we only have 25 internal
machines for office work
excluding the linux box. The list would be something like this :
Machine Operating System IP Address Subnet
--------------------------------------------------------------
Gateway Debian GNU/Linux 2.1 192.168.1.1 255.255.255.0
neil Windows 95 192.168.1.2 255.255.255.0
intranet1 Windows NT Server 192.168.1.3 255.255.255.0
and_so_on Whatever 2000 192.168.1.4 255.255.255.0
Now, the question would be the Gateway Machine. I have a machine
here with 32Mb, a boot partition of 150 Mb as root file system, a 100 Mb
partition mounted as /var and all the rest as swap partition (about 500
Mb). It has a trident VGA card, and three ISA
network ethernet cards.
Currently installed is Linux, with it's base files from the 7
base
install disks. Apart from that, it has installed an iomega zip drive for
backups and the first ISA network ethernet card. This ethernet card is
configured for the internal network, so it's IP is 192.168.1.1
My next step, which unfortuantly I still haven't been able to
install,are the other two ethernet cards. The second ethernet card which
has to
be installed has to have 10.20.10.10 as it's IP address with subnet
being 255.255.255.0 Hmmm, better still, look at the diagram bellow:
eth irq io ip_addr subnet purpose
-----------------------------------------------------------------------
eth0 0x300 5 192.168.1.1 255.255.255.0 Internal Network
eth1 0x340 11 10.20.10.10 255.255.255.0 External Network
eth2 0x280 15 192.168.1.255 255.255.255.0 Maintenance Entry
So, I suppose that you can guess what would need to be done. I
don't know what package I have to install in order to to make this linux
box a
gateway from an internal network, to an external network. I am not sure
if it is done by configuring the routing table or what, but I need help
here, I am about to get hanged. What would happen is that an internal
machine asks for a web page, and it goes to the default gatway through
eth0, then it get directed through eth1 to internet, and comes back in
the same way.
My next step would be to have ipchains or ipmasquerading or both in
one....arghh I have allready written out my rules for the network and
that, so all I
need to do is just insert these rules when all is done. So, I hope I am
not completely boring you to the floor
ae, adduser, apt, base-files, base-passwd, bash, bsdutils, debianutils,
diff, dpkg, dpkg-multicd, e2fsprogs, elvis-tiny, fdflush, fdutils,
fileutils,
findutils, gettext, grep, gzip, hostname, isapnptools, kbd, kbd-data,
ldso, libc6,
libgdbmg1, libncurses4, libreadlineg, libstdc++2.9, lilo, locales,
login, makedev, mawk,
modconf, modutils, mount, netbase, newt0.25, ncurses-bin, passwd,
perl-base, ppp,
pppconfig, procps, sed, setserial, shellutils, slang1, syslogd,
syslinux, sysvinit, tar, telnet, textutils, timezones, update,
util-linux, whiptail.
These are in alphabetical order, and they are the only debian
packages currently installed in the system. They come in the base
installation. I now have the first ethernet card installed (eth0). It's
IP Address is 192.168.1.1 and name is gate.lander.es with subnetmask
255.255.255.0 and no default gateway. This ethernet card will accept
connections from the internal machines. I'll set a clear example.
I, from my computer (192.168.1.232) open an email program, and
conect to mail.alfa.org to recieve my mail. So, my machine is making a
connection to the default gateway on port 110. Now, my default gateway
(192.168.1.1) has to forward that connection to mail.alfa.org on port
110. So, I would have to forward 2 things here. DNS Server, since
mail.alfa.org has to be translated, and a pop3 connection to the
outside.
I really do hope that I am not breaking your head with all of this
stuff. I am just so stuck. People say that someone gets stuck because of
lack of knowledge. You see, if I knew what programs to use for what and
when, then I wouldn't be so lost in all of this :(((
Thanks thanks and very very big thanks in advance. . .
Neil
Reply to: