One VPN question - UNIX for Dummies Questions & Answers

tayyabq8 · #1 (**permalink**) 05-14-2006

Hi,

My setup is as follows:

1) HeadOffice----->Private subnet: 192.168.0.0
2) Branch1-------->Private subnet: 192.168.200.0

I'm connecting from branch1 to headoffice thru VPN and I'm able to access all PC's except SCO UNIXWARE 7.1.1 box.

I have made a search before posting this question and I saw one suggestion from RTM about /etc/hosts.allow & /etc/hosts.deny files, but I don't have these files.

Any idea.....

Regards,
Tayyab

jim mcnamara · #2 (**permalink**) 05-14-2006

Is thr SCO box on the same subnet - ie., 198.168.0

tayyabq8 · #3 (**permalink**) 05-14-2006

Yeah, SCO box is at the same subnet i.e. 192.168.0. Nodes at 192.168.200.0 can access every thing on subnet 192.168.0 except SCO box.

Edited: 15-05-2006 5:53 PM TZ=+3 GMT

I have searched thru SCO site and UNIX manuals and found that following files and services are needed to be configured, but how?

tcpd
/etc/inet/inetd.conf
/etc/inet/hosts.allow
/etc/inet/host.allow

Problem is that, right now, I want to allow only one branch thru VPN but that has dyanamic IP address, does windows NetBios hostname'll work only in this case?

Any help would be highly appreciated.

Regards,
Tayyab

tayyabq8 · #4 (**permalink**) 05-15-2006

I think following should work for me, since in.telnetd is the only service which I want to allow thru VPN, if I would add in my /hots/inet/hosts.allow file:

Code:

in.telnetd: ALL

Couldn't test it, but I'm hopeful that it should work.

Best Regards,
Tayyab

tayyabq8 · #5 (**permalink**) 05-16-2006

no, It didn't work. Any body can help me what else I have to do to access a SCO UNIXWARE box thru VPN except above. Regards,Tayyab

tayyabq8 · #6 (**permalink**) 05-16-2006

tcpdchk output:

Code:

# tcpdchk -v
>>> Rule /etc/inet/hosts.allow line 45:
daemons:  in.telnetd
clients:  ALL
access:   granted

But why still I'm unable to access this box from outside subnet? I would request moderators to move this thread to "Networking" forum, so that I can get reply early.

Regards,
Tayyab

tayyabq8 · #7 (**permalink**) 05-16-2006

Hi,

I just found another clue that if this problem is due to IPSec/IKE VPN type of connection? I'm not sure if all the IKE negotiations are being done at both VPN routers end or UNIX box also needs to understand the IPSec?

I'm not sure at all what I should do now? If this problem is due to, lack of IPSec support in SCO Unixware or it is something else.

Pls reply, if any body has knowledge about it.

Regards,
Tayyab

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode