[clug-talk] ipcop access to orange

[Goran Poprzen]

BTW, here is what IPCop's "orange mantra" says:

. Orange must be on a separate physical wire from Green (not on same
hub/switch)
. Orange must be on a separate logical subnet.
. Orange cannot send nor respond to ICMP. (ie., PING).
. Orange must always use ISP DNS for name resolution.
. Orange must always point to the IPCop Orange interface as its gateway.
. Orange can be accessed from Green ONLY by it's internal IP address unless
/etc/hosts on IPCop is editted.
. Orange cannot access Green unless pinholes are opened.
. Orange can be port-forwarded to in exactly the same manner as Green.

I solved my problem with fourth point :)

On 7/4/06, Goran Poprzen <poprzen at gmail.com> wrote:
>
> When I setup my web server on orange interface, I had different problem:
> wasn't able to access internet from the box. Problem was that dns pointed to
> ipcop - had to be pointed to shaw dns servers. Regarding your problem there
> is a thread on http://www.ipcops.com/index.php?name=PNphpBB2&file=viewtopic&t=6817&sid=ffcefba9889cd835e4a96b44b7a85493
>
>
> I didn't go deep into this, you should check it. Hope this helps.
>
>
> On 7/4/06, Gustin Johnson <gustin at echostar.ca > wrote:
> >
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> >
> > Does anyone here have much experience with ipcop and an Orange (DMZ)
> > interface?  The problem I am having is that one of the file servers is
> > in the DMZ, but none of the hosts in the green network can access the
> > file server (either with ping/icmp or by mounting drives as usual).
> >
> > I have disabled all but the openvpn plugins.
> >
> > Any ideas?
> > -----BEGIN PGP SIGNATURE-----
> > Version: GnuPG v1.4.2.2 (GNU/Linux)
> > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
> >
> > iD8DBQFEqwR8wRXgH3rKGfMRAsMmAJ9QyQmB0+ygbyP+LREKYt7kV6WyTwCaAoYw
> > 9Ihb5RBDht6HnQtzZn78syw=
> > =zlgr
> > -----END PGP SIGNATURE-----
> >
> > _______________________________________________
> > clug-talk mailing list
> > clug-talk at clug.ca
> > http://clug.ca/mailman/listinfo/clug-talk_clug.ca
> > Mailing List Guidelines ( http://clug.ca/ml_guidelines.php)
> > **Please remove these lines when replying
> >
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: /pipermail/clug-talk_clug.ca/attachments/20060704/e249d6f9/attachment.html