PHWinfo banniere

Titres
PORTAIL ANNUAIRE ARTICLES COMPARATEUR HÉBERGEURS DEVIS FORUMS RÉDUCTEUR D'URL
Précédent   PHWinfo > Forums Hébergement > Forum Serveur - Sécurité et techniques > linux.debian.user > setting-up a dmz
S'inscrire FAQ Membres Recherche Messages du jour Marquer les forums comme lus
linux.debian.user debian-user@lists.debian.org.

setting-up a dmz

Réponse
 
LinkBack Outils de la discussion
Vieux 24/02/2007, 18h50   #1
mess-mate
Aucun Avatar
 
Messages: n/a
Hébergeur:
Par défaut setting-up a dmz

Hi list,
tought isn't easy setting-up a dmz ?
Well..nor at all (for me)

My config is as follows:
modem--->boxA=router/firewall/proxy---->switch---->mylan
and also from boxA----->dmz--->web-server.

boxA is equiped with 3 ethernet-cards: ppp0--->eth0, eth1, eth2.

The modem is initialised from boxA with pppoe.
The firewall is disabled for testing/setup purposes but can do dmz.
(arno-iptables-firewall)
All cables are straigted except the one connected from boxA to the
server (dmz) = crossed cable.

On boxA:
-/etc/network/interfaces:
auto lo
iface lo inet loopback
auto eth1
iface eth1 inet static
address 192.168.1.10
netmask 255.255.255.0
network 192.168.1.0
broadcast 192.168.1.255
dns-nameservers xxxxxxxxx
dns-search yyyyyyy
auto eth2
iface eth2 inet static
address 192.168.2.254
netmask 255.255.255.0
network 192.168.2.0
broadcast 192.168.2.255
dns-nameservers xxxxxxxxx
dns-search yyyyyyy
auto orange
iface orange inet ppp
provider orange # is setup in /etc/ppp
pre-up /sbin/ifconfig eth0 up # line maintained by pppoeconf

-ifconfig shows lo eth1 and ppp0.
-route shows the route to internet-provider

A '/etc/init.d/networking start' give an error about eth2:
eth2: ERROR while getting interface flags: No such device.

The 'lsmod' give : mii 5536 via_rhine, 8139too, 3c59x
The 3 cards works.

The internet connection seems on (checked syslog).
but can't establish a connection 'links www.debian.org' nor from any
other workstation.

What did i wrong ??

Thanks for your in advance
best regards
mess-mate
--

Today is the tomorrow you worried about yesterday.


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
  Réponse avec citation
Vieux 24/02/2007, 19h10   #2
Roberto C. Sanchez
Aucun Avatar
 
Messages: n/a
Hébergeur:
Par défaut Re: setting-up a dmz

On Sat, Feb 24, 2007 at 06:22:30PM +0100, mess-mate wrote:
>
> What did i wrong ??
>

No use shorewall? Not provide any actual log messages?

Regards,

-Roberto
--
Roberto C. Sanchez
http://people.connexer.com/~roberto
http://www.connexer.com

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFF4Itj1snWssAFC08RAkglAJ9qjPe9r5oU6BntR8sXDB/x7wm8/QCfWdGJ
nXe4eydAwRGmkaNsGJY8vNA=
=KUXN
-----END PGP SIGNATURE-----

  Réponse avec citation
Vieux 24/02/2007, 19h20   #3
Franck Joncourt
Aucun Avatar
 
Messages: n/a
Hébergeur:
Par défaut Re: setting-up a dmz

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

mess-mate wrote:
> Hi list,


Hi,

> A '/etc/init.d/networking start' give an error about eth2:
> eth2: ERROR while getting interface flags: No such device.
>


What about dmesg | grep eth2 ? Does it give to you more information on
the interface ? Are you sure, eth2 is used by your card. I mean, it may
be possible that this one is used by another ressource.

> The 'lsmod' give : mii 5536 via_rhine, 8139too, 3c59x
> The 3 cards works.
>
> The internet connection seems on (checked syslog).
> but can't establish a connection 'links www.debian.org' nor from any
> other workstation.
>
> What did i wrong ??
>


- --
Franck Joncourt
http://www.debian.org
http://smhteam.info/wiki/
GPG server : pgpkeys.mit.edu
Fingerprint : C10E D1D0 EF70 0A2A CACF 9A3C C490 534E 75C0 89FE
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFF4I0PxJBTTnXAif4RAlQzAKDNAfBnFgbaqnh2xu/MUFzq7O052gCfUdts
ym7cuXsAgrslMB2RFOLt+fg=
=GKgO
-----END PGP SIGNATURE-----




__________________________________________________ _________
All new Yahoo! Mail "The new Interface is stunning in its simplicity and ease of use." - PC Magazine
http://uk.docs.yahoo.com/nowyoucan.html


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
  Réponse avec citation
Vieux 24/02/2007, 22h10   #4
pinniped
Aucun Avatar
 
Messages: n/a
Hébergeur:
Par défaut built-in ethernet?


If you have a built-in ethernet, make sure it is activated in the BIOS. Older versions of the kernel will not activate a device disabled by BIOS (but newer versions will give you an option). Otherwise, check the 'dmesg' logs as already suggested to see what the device drivers print out.


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
  Réponse avec citation
Vieux 24/02/2007, 23h30   #5
mess-mate
Aucun Avatar
 
Messages: n/a
Hébergeur:
Par défaut Re: setting-up a dmz

Roberto C. Sanchez <roberto@connexer.com> wrote:
| On Sat, Feb 24, 2007 at 06:22:30PM +0100, mess-mate wrote:
| >
| > What did i wrong ??
| >
| No use shorewall? Not provide any actual log messages?
|
No shorewall, i prefer a own debian iptables firewall
The only bad error messages are these i mentioned.

But i've seen now after a reboot, just before grub come up,
a message from 3Com to do the choice of MBA (?) and choosing XPE or
TCP/IP, local..netware... and so what.Has to little time to see it
exactly.
What does that mean ? Did a bought a netboot card ??
Is a 3com detected as a RTL8139 by the kernel but with the 3C59x
driver.

best regards
mess-mate
--

You feel a whole lot more like you do now than you did when you used to.


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
  Réponse avec citation
Vieux 24/02/2007, 23h40   #6
mess-mate
Aucun Avatar
 
Messages: n/a
Hébergeur:
Par défaut Re: setting-up a dmz

Franck Joncourt <joncourt_franck@yahoo.co.uk> wrote:
| mess-mate wrote:
| > Hi list,
|
| Hi,
|
| > A '/etc/init.d/networking start' give an error about eth2:
| > eth2: ERROR while getting interface flags: No such device.
| >
|
| What about dmesg | grep eth2 ? Does it give to you more information on
| the interface ? Are you sure, eth2 is used by your card. I mean, it may
| be possible that this one is used by another ressource.
|
A dmesg|grep eth give :
eth1: VIA Rhine at 0x1e800, 00:80:c8:ec:92:b5, IRQ 10.
eth1: MII PHY found at address 8, status 0x7809 advertising 05e1
Link 0000.
eth2: RealTek RTL8139 at 0xec00, 00:e0:29:3c:34:bd, IRQ 12
eth2: Identified 8139 chip type 'RTL-8139A'
( remark: 3C59x driver )
eth1: link up, 10Mbps, half-duplex, lpa 0x0000
eth0: setting half-duplex.
ADDRCONF(NETDEV_UP): eth0: link is not ready
eth1: no IPv6 routers present
eth1: link up, 10Mbps, half-duplex, lpa 0x0000
eth1: no IPv6 routers present

Eth0 is normally connected to the modem but had to put the cable t
another router to communicate. This is why the link of eth0 is not
ready.

See also my previous post as a reply to Roberto.

best regards
mess-mate
--

Your domestic life may be harmonious.


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
  Réponse avec citation
Vieux 25/02/2007, 00h10   #7
Joe Hart
Aucun Avatar
 
Messages: n/a
Hébergeur:
Par défaut Re: setting-up a dmz

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

mess-mate wrote:
> Franck Joncourt <joncourt_franck@yahoo.co.uk> wrote:
> | mess-mate wrote:
> | > Hi list,
> |
> | Hi,
> |
> | > A '/etc/init.d/networking start' give an error about eth2:
> | > eth2: ERROR while getting interface flags: No such device.
> | >
> |
> | What about dmesg | grep eth2 ? Does it give to you more information on
> | the interface ? Are you sure, eth2 is used by your card. I mean, it may
> | be possible that this one is used by another ressource.
> |
> A dmesg|grep eth give :
> eth1: VIA Rhine at 0x1e800, 00:80:c8:ec:92:b5, IRQ 10.
> eth1: MII PHY found at address 8, status 0x7809 advertising 05e1
> Link 0000.
> eth2: RealTek RTL8139 at 0xec00, 00:e0:29:3c:34:bd, IRQ 12
> eth2: Identified 8139 chip type 'RTL-8139A'
> ( remark: 3C59x driver )
> eth1: link up, 10Mbps, half-duplex, lpa 0x0000
> eth0: setting half-duplex.
> ADDRCONF(NETDEV_UP): eth0: link is not ready
> eth1: no IPv6 routers present
> eth1: link up, 10Mbps, half-duplex, lpa 0x0000
> eth1: no IPv6 routers present
>
> Eth0 is normally connected to the modem but had to put the cable t
> another router to communicate. This is why the link of eth0 is not
> ready.
>
> See also my previous post as a reply to Roberto.
>
> best regards
> mess-mate


Are you sure you're using the correct module for the card?

My system has 1 Intel 8139B network card and 1 Intel 8139C network card.
They both use the 8139too kernel module. Perhaps you need to use that
module as well for your 8139A card.

I'm not positive, but it might be worth investigating.

Joe
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFF4NMXiXBCVWpc5J4RAmbcAKCh+VVR8IF0F1mulmucli 4/WAHYawCeKI3m
Wrs8sbJetb87KATlpuG0f7o=
=5+3/
-----END PGP SIGNATURE-----


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
  Réponse avec citation
Vieux 25/02/2007, 04h20   #8
Raquel
Aucun Avatar
 
Messages: n/a
Hébergeur:
Par défaut Re: built-in ethernet?

On Sat, 24 Feb 2007 22:48:45 +0100 (CET)
pinniped <cirilo_bernardo@yahoo.com> wrote:

>
> If you have a built-in ethernet, make sure it is activated in the
> BIOS. Older versions of the kernel will not activate a device
> disabled by BIOS (but newer versions will give you an option).
> Otherwise, check the 'dmesg' logs as already suggested to see what
> the device drivers print out.
>
>


When you respond to a message, would you please quote the message
you're responding to and quit changing the subject line?

--
Raquel
================================================== ==========
To be nobody - but - yourself ... in a world which is doing its best
night and day, to make you everybody else ... means to fight the
hardest battle which any human being can fight; and never stop
fighting.
--e. e. cummings


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
  Réponse avec citation
Réponse


Outils de la discussion

Règles de messages
Vous ne pouvez pas créer de nouvelles discussions
Vous ne pouvez pas envoyer des réponses
Vous ne pouvez pas envoyer des pièces jointes
Vous ne pouvez pas modifier vos messages

Les balises BB sont activées : oui
Les smileys sont activés : oui
La balise [IMG] est activée : oui
Le code HTML peut être employé : non
Trackbacks are oui
Pingbacks are oui
Refbacks are oui


Fuseau horaire GMT +1. Il est actuellement 23h43.


Édité par : vBulletin® version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Search Engine Friendly URLs by vBSEO 3.2.0 RC5 Tous droits réservés.
Version française #16 par l'association vBulletin francophone
PHWinfo est un site Éducation Sans Frontières ©2000-2008
Ad Management by RedTyger
©Tous droits réservés par les parties respectives
Page generated in 0,18689 seconds with 16 queries