Intranet/Internet Gateway - Intranet requests to Internet ip time out

From: Thomas Dimson (tdimson_at_gmail.com)
Date: 09/19/05

  • Next message: John Do: "Re: Skipping/Stuttering Sound in XMMS" 
    Date: Mon, 19 Sep 2005 00:18:47 -0400
To: freebsd-questions@freebsd.org

    Hi,

    I've posted here about getting a gateway working and everyone was a
    great help. There is just one thing left to fix before everything
    works 100%.

    I have my routes set up as thus: any requests to 127.97.0.0 is routed
    through network card #2, (127.97.245.108) within my university
    network for high speeds. Any other traffic is routed through network
    card #1 (192.168.1.110) to 192.168.1.1, which is a router with a cable
    modem attached. Everything works beautifully - my original problem was
    that natd wasn't enabled on my university network IP.

    Here is my problem: whenever a person on the internal network tries to
    connect to my web server (or anything else) on my public IP, the
    request times out. I type in www.presidenturkel.com (my domain name)
    on any computer in my university and it appears like it exists, but
    does not return any signals. If I manually type in the ip
    127.97.245.108, it works perfectly. My guess is that the computer is
    not expecting a request to return through the university network.

    My question is: is there anyway to make any requests from the internal
    network to my public ip work? It is going to be irritating if I make
    people memorize two domain names based on whether they are inside or
    not.

    I realize this is complicated, so here is my netstat -r output:
    "netstat -r
    Routing tables

    Internet:
    Destination Gateway Flags Refs Use Netif Expire
    default 192.168.1.1 UGS 0 128500 vr0
    localhost localhost UH 0 208 lo0
    129.97 cn-rtrev-res15net. UGS 0 2490 vr1
    129.97.245/24 link#2 UC 0 0 vr1
    cn-rtrev-res15net. 00:04:9b:1e:20:00 UHLW 2 0 vr1 443
    rn-revwca12.uwater 00:0b:db:e4:20:48 UHLW 1 560 vr1 1134
    rn-revwca14.uwater 00:0a:e6:88:ac:a2 UHLW 1 448 vr1 941
    rn-revwca22.uwater 00:14:38:10:c5:4a UHLW 1 332 vr1 1041
    rn-revwca23.uwater 00:11:09:70:2b:f5 UHLW 1 308 vr1 1003
    rn-revwcb03.uwater 00:0f:b0:73:5c:a7 UHLW 1 320 vr1 1150
    rn-revwcb13.uwater 00:13:d4:88:c1:30 UHLW 1 152 vr1 589
    rn-revwcb14.uwater 00:11:d8:73:3a:c1 UHLW 1 228 vr1 1086
    rn-revwcb15.uwater 00:11:2f:5c:32:8d UHLW 1 24 vr1 1147
    rn-revwcb18.uwater 00:0a:e4:d6:08:0e UHLW 1 74 vr1
    rn-revwcb19.uwater 00:50:ba:82:fc:24 UHLW 1 74 vr1 981
    rn-revwcb20.uwater 00:0a:e6:55:4b:19 UHLW 1 306 vr1 991
    rn-revwcb23.uwater 00:40:f4:68:0a:8f UHLW 1 332 vr1 1068
    rn-revwda02.uwater 00:0a:e4:d0:27:2c UHLW 1 104 vr1 602
    rn-revwda15.uwater 00:07:95:31:51:26 UHLW 1 98 vr1 1066
    rn-revwda23.uwater 00:0f:b0:8c:2b:28 UHLW 1 126 vr1 1068
    rn-revwda24.uwater 00:c0:9f:b0:95:56 UHLW 1 34 vr1 1068
    rn-revwdb02.uwater 00:11:25:47:bf:7a UHLW 1 132 vr1 774
    rn-revwdb03.uwater 00:a0:d1:20:0f:ba UHLW 1 224 vr1 1068
    rn-revwdb04.uwater 00:11:25:d6:ff:0b UHLW 1 308 vr1 983
    rn-revwdb07.uwater 00:12:3f:e2:5d:c5 UHLW 1 306 vr1 1173
    rn-revwdb09.uwater 00:10:dc:ff:94:f2 UHLW 1 32424 vr1 1102
    rn-revwdb12.uwater 00:0f:b0:83:a0:d4 UHLW 1 50 vr1 692
    rn-revwdb22.uwater 00:13:20:2a:80:3e UHLW 1 100 vr1 1089
    rn-revwea07.uwater 00:0f:b0:8c:54:6f UHLW 1 150 vr1 968
    rn-revwea09.uwater 00:12:3f:db:c9:3f UHLW 1 144 vr1 1055
    rn-revwea13.uwater 00:0d:87:9d:18:af UHLW 1 330 vr1 907
    rn-revwea15.uwater 00:13:d4:36:49:c0 UHLW 1 126 vr1 986
    rn-revwea17.uwater 00:0d:56:ad:32:93 UHLW 1 124 vr1 1068
    rn-revwea19.uwater 00:14:51:15:1c:fe UHLW 1 66 vr1 364
    rn-revwea21.uwater 00:c0:9f:c1:2f:61 UHLW 1 258 vr1 1177
    rn-revweb01.uwater 00:0a:e4:37:0b:2b UHLW 1 26 vr1 1079
    rn-revweb03.uwater 00:01:4a:5f:46:08 UHLW 1 46 vr1 774
    rn-revweb07.uwater 00:0a:e6:a3:d2:3c UHLW 1 332 vr1 1078
    rn-revweb09.uwater 00:12:3f:e2:1d:bb UHLW 1 96 vr1 1198
    rn-revweb17.uwater 00:02:3f:7d:52:f0 UHLW 1 50 vr1 1077
    rn-revweb23.uwater 00:11:09:b7:a0:f6 UHLW 1 12 vr1 1055
    129.97.245.255 ff:ff:ff:ff:ff:ff UHLWb 1 5552 vr1
    192.168.1 link#1 UC 0 0 vr0
    192.168.1.1 00:20:78:ce:cb:b4 UHLW 2 5017 vr0 1161
    192.168.1.107 00:11:95:5d:0b:7f UHLW 1 40152 vr0 1157
    192.168.1.255 ff:ff:ff:ff:ff:ff UHLWb 1 117 vr0"

    I am not entirely sure why there are so many things in the middle
    there, I don't know what they are and they never used to show up...

    And my ifconfig output:
    "vr0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
            inet6 fe80::20d:88ff:fe7f:42d0%vr0 prefixlen 64 scopeid 0x1
            inet 192.168.1.110 netmask 0xffffff00 broadcast 192.168.1.255
            ether 00:0d:88:7f:42:d0
            media: Ethernet autoselect (100baseTX <full-duplex>)
            status: active
    vr1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
            inet6 fe80::211:95ff:fee2:5740%vr1 prefixlen 64 scopeid 0x2
            inet 129.97.245.108 netmask 0xffffff00 broadcast 129.97.245.255
            ether 00:11:95:e2:57:40
            media: Ethernet autoselect (10baseT/UTP)
            status: active
    plip0: flags=108810<POINTOPOINT,SIMPLEX,MULTICAST,NEEDSGIANT> mtu 1500
    lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
            inet6 ::1 prefixlen 128
            inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4
            inet 127.0.0.1 netmask 0xff000000"

    Thank you very much,
    Thomas Dimson
    tdimson@gmail.com
    _______________________________________________
    freebsd-questions@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-questions
    To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"

  • Next message: John Do: "Re: Skipping/Stuttering Sound in XMMS"

    Relevant Pages

    • Re: Account hacked using Blizzards Password Reset Utility
      ... They are usually used to verify that someone logging onto a network is ... For an effective man-in-the-middle attack, ... from receiving two simultaneous authentication requests, which, if the ...
      (alt.games.warcraft)
    • RE: TCP/IP Stack Hardening
      ... When PMTU is disabled, the default MTU is 1500 for local subnet and 576 for ... disabling PMTU is probably not the most important network stack ... I've not found disabling ICMP redirects a problem as long as the routing ...
      (Focus-Microsoft)
    • Re: iSCSI disconnects dilema
      ... While I think I have almost solved the problem of network disconnects, ... When a 'local' disk crashes, ... You have a queue of I/O requests. ... This is roughly the same as a RAID box accepting a write into a writeback cache ...
      (freebsd-hackers)
    • parallel vs. serial disk access
      ... Background is still that I'm creating a solution for network file transfers. ... When accessing a system with a single client, ... the explanation for this heavy performance loss is the i/o ... requests in the one queue and a small request in the small-request-queue, ...
      (comp.os.linux.development.system)
    • Re: Share internet connection/make a small server
      ... > the DHCP server for your network? ... No subnet declaration for eth1. ... ** Ignoring requests on eth1. ...
      (Fedora)