|
|
Sponsored Content
Special Forums
IP Networking
Proxy Server
ISP VPS, routing traffic
Post 302909414 by solaris_user on Wednesday 16th of July 2014 06:16:39 PM
07-16-2014
Routing traffic from ISP datacenter to enterprise LAN
Hi guys
I need to setup server/router in my firm. We got from our ISP dedicated server in their data center. It has a static IP and it servers as replacement for out DSL connection. I configured our internal server to be border gateway and to connects to data center. "Remote" admin installed squid and IT staff can access to the websites but other can't. I want to remove that proxy server. I think I really don't need it.
Here is the picture how above situation looks
Server router has two NICs, one is connected to ISP router which we can't access, and one nic is connected to our private LAN. I use CentOS Linux 6.5 x64 to act as router. I added in iptables firewall to forward all traffic from eth0 to eth1 (from internal to public) and allowed traffic to leave server. All output traffic is nated.
Problem is on the other site. I'm not a network engineer but only with some knowledge in networking and formal IT education at the firm. My problem is I can't ping anything on the Internet while our VPS can. On that same server only port 80 and 22 are opened. People who setup proxy can connect to outside world but can't ping, can't use other networking software.
I have some questions:
How I can see my private LAN from ISP network, I will need to setup VPN in the short time ?
Is possible to avoid proxy and just with firewall NAT get data from the net back to the hosts in the private LAN ?
I am afraid to mess with ISP server because they administrate that server, we are and I really won't to understand how configure a network.
Thanks for reading and suggestions.
I need to setup server/router in my firm. We got from our ISP dedicated server in their data center. It has a static IP and it servers as replacement for out DSL connection. I configured our internal server to be border gateway and to connects to data center. "Remote" admin installed squid and IT staff can access to the websites but other can't. I want to remove that proxy server. I think I really don't need it.
Here is the picture how above situation looks
Server router has two NICs, one is connected to ISP router which we can't access, and one nic is connected to our private LAN. I use CentOS Linux 6.5 x64 to act as router. I added in iptables firewall to forward all traffic from eth0 to eth1 (from internal to public) and allowed traffic to leave server. All output traffic is nated.
Problem is on the other site. I'm not a network engineer but only with some knowledge in networking and formal IT education at the firm. My problem is I can't ping anything on the Internet while our VPS can. On that same server only port 80 and 22 are opened. People who setup proxy can connect to outside world but can't ping, can't use other networking software.
I have some questions:
How I can see my private LAN from ISP network, I will need to setup VPN in the short time ?
Is possible to avoid proxy and just with firewall NAT get data from the net back to the hosts in the private LAN ?
I am afraid to mess with ISP server because they administrate that server, we are and I really won't to understand how configure a network.
Thanks for reading and suggestions.
Last edited by solaris_user; 07-16-2014 at 07:26 PM..
|
|
8 More Discussions You Might Find Interesting
1. UNIX for Dummies Questions & Answers
I just moved away from a T3 line back to a dial up I just wanted to know would a P200 with 64meg and a 4 gig hard drive be ok for a linux server for an additional 3 pcs all running win98. I will be dialing into an isp using a 56k v90 modem.
Any support or help will be great. (3 Replies)
Discussion started by: izrailov
3 Replies
2. UNIX for Dummies Questions & Answers
I'm totally frustrated, my administrator has left the state and me high and dry! My modem cannot connect to my ISP all it does is start to ping and the a high pitched squeal for about a minute. I have logged on as the "root" in hope to get into my /etc/ppp/ppp.conf file however I get a... (8 Replies)
Discussion started by: coolteach
8 Replies
3. IP Networking
I am running Mandrake 8.0 (KDE ver 2.1.1) on a machine with 2 NICs. This is a college project. I am attempting to configure this machine as a firewall, and to pass packets from one network to another. Eth0 is on my external network. Eth1 is on my internal network. I set the gateway in "netconf"... (1 Reply)
Discussion started by: Deuce
1 Replies
4. UNIX for Dummies Questions & Answers
Hi,
I'm running user ppp on FreeBSD. I have an internet account which gives me the oppertunity to login for free (say €25 a month :)) during specific hours. Outside these hours I pay the normal fee. I also have another ISP which gives me the oppertunity to log in for a reduced fee all times.
... (2 Replies)
Discussion started by: Hansaplast
2 Replies
5. IP Networking
Hi. my english is not so good. sorry.
i have some problem. My isp give me second ip from subnet. One network is working, but secong don't.
fxp0 - my network
dc0 - network isp (that working)
re0 - network isp (don't working)
i try use ng_one2many, but it's don't working
ngctl mkpeer... (0 Replies)
Discussion started by: kil
0 Replies
6. IP Networking
Hi,
I would like to ask some networking solution regarding my work LAN and 3G usb network problem. I want to route my internet traffic to the 3G network and sometimes connect to some of my work network for ssh to configure some workstation or print something. Currently my problem is i can't... (0 Replies)
Discussion started by: jao_madn
0 Replies
7. Solaris
Solaris-9 server is having one primary IP 10.41.161.14 on qfe0 and 10.41.116.0 on qfe3:1. Traffic is going through virtual interface instead of physical interface. How should I force traffic to go with primary interface.
root@smtsrvn01:/# netstat -nr
Routing Table: IPv4
Destination ... (2 Replies)
Discussion started by: solaris_1977
2 Replies
8. IP Networking
Hello all my friends
see picture to understand my problem
http://www.imageurlhost.com/images/8mf8ni4btu6r4qy1rp9_Networking-photo.png
i want to know that how my company can connect multiple isp via switch and output from switch is directly connected to linux firewall.
Any help
Thanks (1 Reply)
Discussion started by: rink
1 Replies
LEARN ABOUT LINUX
pppoe-sniff
PPPOE-SNIFF(8) System Manager's Manual PPPOE-SNIFF(8) NAME
pppoe-sniff - examine network for non-standard PPPoE frames SYNOPSIS
pppoe-sniff [options] DESCRIPTION
pppoe-sniff listens for likely-looking PPPoE PADR and session frames and deduces extra options required for pppoe(8) to work. Some DSL providers seem to use non-standard frame types for PPPoE frames, and/or require a certain value in the Service-Name field. It is often easier to sniff those values from a machine which can successfully connect rather than try to pry them out of the DSL provider. To use pppoe-sniff, you need two computers, a DSL modem and an Ethernet hub (not an Ethernet switch.) If the DSL modem normally connects directly to your computer's Ethernet card, connect it to the "uplink" port on the Ethernet hub. Plug two computers into normal ports on the hub. On one computer, run whatever software the DSL provider gave you on whatever operating system the DSL provider supports. On the other computer, run Linux and log in as root. On the Linux machine, put the Ethernet interface into promiscuous mode and start pppoe-sniff. If the ethernet interface is eth0, for exam- ple, type these commands: ifconfig eth0 promisc pppoe-sniff -I eth0 On the other machine, start your DSL connection as usual. After a short time, pppoe-sniff should print recommendations for the value of PPPOE_EXTRA. Set this value in /etc/ppp/pppoe.conf. If pppoe-sniff indicates that something special is required in PPPOE_EXTRA, please e- mail this to pppoe@roaringpenguin.com along with the name of your ISP and the manufacturer and model number of your DSL modem. This infor- mation will be collated and provided on the PPPoE web page for users who do not have two computers. After pppoe-sniff finishes (or you stop it if it seems hung), remember to turn off promiscuous mode: ifconfig eth0 -promisc OPTIONS
-I interface The -I option specifies the Ethernet interface to use. Under Linux, it is typically eth0 or eth1. The interface should be "up" and in promiscuous mode before you start pppoe-sniff. -V The -V option causes pppoe-sniff to print its version number and exit. BUGS
pppoe-sniff only works on Linux. AUTHORS
pppoe-sniff was written by David F. Skoll <dfs@roaringpenguin.com>. The pppoe home page is http://www.roaringpenguin.com/pppoe/. SEE ALSO
pppd(8), pppoe(8), pppoe-sniff(8), pppoe-relay(8), /usr/share/doc/pppoe/README.Debian.gz 4th Berkeley Distribution 3 July 2000 PPPOE-SNIFF(8)