Re: [Shorewall-users] DMZ computer setup

[Tom E. <te...@sh...>]

Andrew Niemantsverdriet wrote:

> On Thu, 2004-06-24 at 15:10, Tom Eastep wrote:
> 
>>Tom Eastep wrote:
>>
>>
>>
>>>Changing the IP address/Netmask and default gateway should be all that 
>>>you need to do; in addition to changing the IPV4 configuration, you may 
>>>also need to change the configurations of your web and email servers if 
>>>the host's IP address is hard-coded in their configurations (both my 
>>>Apache and Postfix configurations contain the IP address of my web/mail 
>>>server).
>>>
>>>Do basic connectivity tests like "ping" succeed?
>>>
>>
>>You may also have to adjust DNS (PTR and possibly A) -- incorrect DNS 
>>can cause some servers to experience startup problems.
>>
>>-Tom
> 
> DNS was setup correctly when I tried (A records changed). Ping tests all
> fail destination unreachable. Good point with the hard-coded IP that
> would have been it had tests like ping not failed. 
> 
> Just to check: the computer on the DMZ is connected via crossover to my
> Shorewall box, the DMZ interface one the Shorewall box has an address of
> say 192.0.0.128/29. The DMZ web/email has an address of 192.0.0.129/29
> and gateway of 192.0.0.128. 

192.0.0.128 is the network address of 192.0.0.128/29 -- you can't assign 
it to a host (this is clearly described in the addressing section of the 
setup guide).

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ te...@sh...