* [LARTC] I need some advise from a routing Guru !!
@ 2001-04-18 11:27 Krepper Guillermo
2001-04-19 13:44 ` Ramin Alidousti
2001-04-19 15:53 ` billy
0 siblings, 2 replies; 3+ messages in thread
From: Krepper Guillermo @ 2001-04-18 11:27 UTC (permalink / raw)
To: lartc
[-- Attachment #1: Type: text/plain, Size: 2763 bytes --]
Hi, let's get to bussisnes ...
This is what I have
+--------------------------+
eth0 ----------------- | |
| LINUX | ---------------- eth1
eth2 ----------------- | |
| SUPER | ---------------- eth4
eth3 ----------------- | |
| ROUTER |
+--------------------------+
Internet Connections:
eth0: 200.1.1.0/24
eth2: 200.2.1.0/24
eth3: 200.3.1.0/24
from 3 diferent carriers
Private LAN:
eth1: NAT --> 192.168.1.0/24
192.168.2.0/24
192.168.3.0/24
Internet Services (DNS, WEB, MAIL, etc)
First of all I'll say that Traffic Controller works 10 points !!!!!
Routing is doing ok, but I'm not shure if it's here were I'm making all the trouble. So here is how I do it.
ip rule add from 192.168.1.0/24 table 1
ip route add 192.168.1.0/24 via 192.168.1.254 dev eth1 table 1 ( so machines can ping eachother )
ip route add default via 200.1.1.254 dev eth0
ip rule add from 192.168.2.0/24 table 2
ip route add 192.168.2.0/24 via 192.168.2.254 dev eth1 table 1 ( so machines can ping eachother )
ip route add default via 200.1.2.254 dev eth2
ip rule add from 192.168.3.0/24 table 3
ip route add 192.168.3.0/24 via 192.168.1.254 dev eth1 table 1 ( so machines can ping eachother )
ip route add default via 200.1.3.254 dev eth3
I think this is ok, it worked, but .......
Well here is my problem on eth4 I would like to put a dns, httpd, smtp, pop and a proxy. All of this have IP that are part of (eth0).
DNS1 = 200.1.1.1 DNS2 = 200.1.1.2
I made all connections work with this DNS but when someone querys the dns, the paket goes to the Internet an then comes back. Is there a way of redirecting or routing it to eth0 before it goes to take a trip?
I tested with iptables DNAT, ip route add 200.1.1.1/36 dev eth4 ..... and did not work.
Can somebody give me an advise or a clue on how should I do something like this? an with the proxy? how can I specify on witch eth to go out depending from where it came from TOS Mark?
I olso would like a recomendation on some good books, please.
That's all folks,
well thank you verry much for the advise.
Krepper Guillermo (Billy)
[-- Attachment #2: Type: text/html, Size: 8779 bytes --]
^ permalink raw reply [flat|nested] 3+ messages in thread* Re: [LARTC] I need some advise from a routing Guru !!
2001-04-18 11:27 [LARTC] I need some advise from a routing Guru !! Krepper Guillermo
@ 2001-04-19 13:44 ` Ramin Alidousti
2001-04-19 15:53 ` billy
1 sibling, 0 replies; 3+ messages in thread
From: Ramin Alidousti @ 2001-04-19 13:44 UTC (permalink / raw)
To: lartc
Hello,
I'm also new to this concept but from what I understand:
1) If you query from 192.168.1.0/24 it works fine. Doesn't it?
2) From 192.168.2.0/24 and 192.168.3.0/24, the packets go to the
Internet and come back through your first carrier to hit your
DNS servers. Is this right?
If these two assumptions are correct, then your problem is those
default routes per private /24's. I think that you need to set
static routes to your DNS servers in tables 2 and 3.
This might or might not be the solution to your problem. If so,
glad to have been able to help; if not, sorry but I also said
that I was new to all these.
Ramin
On Wed, Apr 18, 2001 at 08:27:09AM -0300, Krepper Guillermo wrote:
> Hi, let's get to bussisnes ...
> This is what I have
>
> +--------------------------+
> eth0 ----------------- | |
> | LINUX | ---------------- eth1
> eth2 ----------------- | |
> | SUPER | ---------------- eth4
> eth3 ----------------- | |
> | ROUTER |
> +--------------------------+
>
>
> Internet Connections:
> eth0: 200.1.1.0/24
> eth2: 200.2.1.0/24
> eth3: 200.3.1.0/24
> from 3 diferent carriers
>
> Private LAN:
> eth1: NAT --> 192.168.1.0/24
> 192.168.2.0/24
> 192.168.3.0/24
>
> Internet Services (DNS, WEB, MAIL, etc)
>
> First of all I'll say that Traffic Controller works 10 points !!!!!
>
> Routing is doing ok, but I'm not shure if it's here were I'm making all the trouble. So here is how I do it.
>
> ip rule add from 192.168.1.0/24 table 1
> ip route add 192.168.1.0/24 via 192.168.1.254 dev eth1 table 1 ( so machines can ping eachother )
> ip route add default via 200.1.1.254 dev eth0
>
> ip rule add from 192.168.2.0/24 table 2
> ip route add 192.168.2.0/24 via 192.168.2.254 dev eth1 table 1 ( so machines can ping eachother )
> ip route add default via 200.1.2.254 dev eth2
>
> ip rule add from 192.168.3.0/24 table 3
> ip route add 192.168.3.0/24 via 192.168.1.254 dev eth1 table 1 ( so machines can ping eachother )
> ip route add default via 200.1.3.254 dev eth3
>
>
> I think this is ok, it worked, but .......
>
> Well here is my problem on eth4 I would like to put a dns, httpd, smtp, pop and a proxy. All of this have IP that are part of (eth0).
> DNS1 = 200.1.1.1 DNS2 = 200.1.1.2
>
> I made all connections work with this DNS but when someone querys the dns, the paket goes to the Internet an then comes back. Is there a way of redirecting or routing it to eth0 before it goes to take a trip?
> I tested with iptables DNAT, ip route add 200.1.1.1/36 dev eth4 ..... and did not work.
> Can somebody give me an advise or a clue on how should I do something like this? an with the proxy? how can I specify on witch eth to go out depending from where it came from TOS Mark?
> I olso would like a recomendation on some good books, please.
>
> That's all folks,
>
>
> well thank you verry much for the advise.
>
> Krepper Guillermo (Billy)
>
>
>
--
Ramin Alidousti ramin@UU.NET
Advanced Development tel +1 703 886 2640
UUNET, A WorldCom Company fax +1 703 886 0536
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/2.4Routing/
^ permalink raw reply [flat|nested] 3+ messages in thread
* RE: [LARTC] I need some advise from a routing Guru !!
2001-04-18 11:27 [LARTC] I need some advise from a routing Guru !! Krepper Guillermo
2001-04-19 13:44 ` Ramin Alidousti
@ 2001-04-19 15:53 ` billy
1 sibling, 0 replies; 3+ messages in thread
From: billy @ 2001-04-19 15:53 UTC (permalink / raw)
To: lartc
First of all thanks for you answer
-----Mensaje original-----
De: Ramin Alidousti <ramin@UU.NET>
Para: Krepper Guillermo <billy@ciudadglobal.com.ar>
CC: lartc@mailman.ds9a.nl <lartc@mailman.ds9a.nl>
Fecha: Jueves, 19 de Abril de 2001 10:48 a.m.
Asunto: Re: [LARTC] I need some advise from a routing Guru !!
>Hello,
>
>I'm also new to this concept but from what I understand:
>
>1) If you query from 192.168.1.0/24 it works fine. Doesn't it?
No, actually none of the NATs classes (192.168.1.0; 192.168.2.0;
192.168.3.0) can query the dns. They can't ping it. But using iptables DNAT
i could do some thing like check mail, telnet, etc. the problem is that the
dns and the mail server must go out to the internet to do there work.
I'll explain a little more
eth4: 192.168.10.254 (on the linux machine)
eth0: 200.1.1.1 -->DNAT --to 192.168.10.1
200.1.1.2 -->DNAT --to 192.168.10.2
the dns server is configured with eth1: 192.168.10.1; 192.168.10.2
Here is the DNAT command I'm using, maybe my error is here.
iptables -A PREROUNTING -t nat -d 200.1.1.1 -j DNAT 192.168.1.1
(should I use "-i" option, here ?)
>
>2) From 192.168.2.0/24 and 192.168.3.0/24, the packets go to the
> Internet and come back through your first carrier to hit your
> DNS servers. Is this right?
>
>If these two assumptions are correct, then your problem is those
>default routes per private /24's. I think that you need to set
>static routes to your DNS servers in tables 2 and 3.
>
>This might or might not be the solution to your problem. If so,
>glad to have been able to help; if not, sorry but I also said
>that I was new to all these.
>
>Ramin
>
>On Wed, Apr 18, 2001 at 08:27:09AM -0300, Krepper Guillermo wrote:
>
>> Hi, let's get to bussisnes ...
>> This is what I have
>>
>>
+--------------------------+
>> eth0 ----------------- |
|
>> | LINUX
| ---------------- eth1
>> eth2 ----------------- |
|
>> | SUPER
| ---------------- eth4
>> eth3 ----------------- |
|
>> | ROUTER |
>>
+--------------------------+
>>
>>
>> Internet Connections:
>> eth0: 200.1.1.0/24
>> eth2: 200.2.1.0/24
>> eth3: 200.3.1.0/24
>> from 3 diferent carriers
>>
>> Private LAN:
>> eth1: NAT --> 192.168.1.0/24
>> 192.168.2.0/24
>> 192.168.3.0/24
>>
>> Internet Services (DNS, WEB, MAIL, etc)
>>
>> First of all I'll say that Traffic Controller works 10 points !!!!!
>>
>> Routing is doing ok, but I'm not shure if it's here were I'm making all
the trouble. So here is how I do it.
>>
>> ip rule add from 192.168.1.0/24 table 1
>> ip route add 192.168.1.0/24 via 192.168.1.254 dev eth1 table 1
( so machines can ping eachother )
>> ip route add default via 200.1.1.254 dev eth0
>>
>> ip rule add from 192.168.2.0/24 table 2
>> ip route add 192.168.2.0/24 via 192.168.2.254 dev eth1 table 1
( so machines can ping eachother )
>> ip route add default via 200.1.2.254 dev eth2
>>
>> ip rule add from 192.168.3.0/24 table 3
>> ip route add 192.168.3.0/24 via 192.168.1.254 dev eth1 table 1
( so machines can ping eachother )
>> ip route add default via 200.1.3.254 dev eth3
>>
>>
>> I think this is ok, it worked, but .......
>>
>> Well here is my problem on eth4 I would like to put a dns, httpd, smtp,
pop and a proxy. All of this have IP that are part of (eth0).
>> DNS1 = 200.1.1.1 DNS2 = 200.1.1.2
>>
>> I made all connections work with this DNS but when someone querys the
dns, the paket goes to the Internet an then comes back. Is there a way of
redirecting or routing it to eth0 before it goes to take a trip?
>> I tested with iptables DNAT, ip route add 200.1.1.1/36 dev eth4 ..... and
did not work.
>> Can somebody give me an advise or a clue on how should I do something
like this? an with the proxy? how can I specify on witch eth to go out
depending from where it came from TOS Mark?
>> I olso would like a recomendation on some good books, please.
>>
>> That's all folks,
>>
>>
>> well thank you verry much for the advise.
>>
>> Krepper Guillermo (Billy)
>>
>>
>>
>
>--
>Ramin Alidousti ramin@UU.NET
>Advanced Development tel +1 703 886 2640
>UUNET, A WorldCom Company fax +1 703 886 0536
>
>_______________________________________________
>LARTC mailing list / LARTC@mailman.ds9a.nl
>http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO:
http://ds9a.nl/2.4Routing/
>
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/2.4Routing/
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2001-04-19 15:53 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2001-04-18 11:27 [LARTC] I need some advise from a routing Guru !! Krepper Guillermo
2001-04-19 13:44 ` Ramin Alidousti
2001-04-19 15:53 ` billy
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox