Re: Firewall & Routing - help!

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Rodolfo J. Paiz wrote:

Please just post to the list and don't CC me. I'm getting two copies of everything you send, and it's confusing as hell. Thanks.

My appologies.

I really suggest you use masquerading rather than "real" routing. Not necessary, and in this case slightly less secure since it actually permits the concept of incoming traffic. Not what you want, I think.

One of the requirements of this installation is to allow remote desktop connections from subnet A (2 admin stations) to server on B. Thus, I'm avoiding masq. The could spready theoretically to all desktops in B.


This will provide the information for the system to set your default route. Do not set a default route somewhere else.

Well, after I set it, did a network restart, I have no default route, and no traffic from 50.1. When I reboot, I get a default route (from a previous attempt I had made at getting this working??). Then I DO get traffic from the net via 50.1


If I remove the static route, no internet again.

As I posted on a follow up to my own post...

When I boot, I have the following routes...

Destination Gateway Genmask Flags Metric Ref Use Iface
172.20.5.0 * 255.255.255.0 U 0 0 0 eth1
192.168.5.0 * 255.255.255.0 U 0 0 0 eth1
192.168.50.0 * 255.255.255.0 U 0 0 0 eth0
169.254.0.0 * 255.255.0.0 U 0 0 0 eth1
127.0.0.0 * 255.0.0.0 U 0 0 0 lo
default 192.168.50.1 0.0.0.0 UG 0 0 0 eth0


if I do a network restart it limits down to this....

Destination Gateway Genmask Flags Metric Ref Use Iface
172.20.5.0 * 255.255.255.0 U 0 0 0 eth1
192.168.5.0 * 255.255.255.0 U 0 0 0 eth1
192.168.50.0 * 255.255.255.0 U 0 0 0 eth0
169.254.0.0 * 255.255.0.0 U 0 0 0 eth1
127.0.0.0 * 255.0.0.0 U 0 0 0 lo


So I loose my default route (that I got somewhere when I booted ).

So I need to shore up two things it seems.

1. default route or no default route. And keep the default route when I boot/or restart netowork.
2. Remove some old routes in my table, like the 172.20.5.0, and have that change stay after reboot (I'll need to know this after anyways, as I have to change the ip/subnets from my test environment to the live environment.




[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux