Re: [Devil-Linux-discuss] newbie overview and dmz help

[Heiko Z. <he...@zu...>]

On Sun, August 12, 2007 20:54, Sean Last wrote:
> Ok, I got my devil linux set up, and I'm trying to run the following
> configuration
>
> Devil linux with 3 nics:
>
>
> eth0: world interface.  Set to my IP from my ISP.
> eth1: internal lan.  eth1 ip is static, 192.168.26.1, using this as a dhcp
>  server for the internal lan, connected to an 8 port switch.  I have one
> box on the switch, and it works fine.  everything on this network gets an
> IP and
> can see the internet just peachy. eth2: dmz.  network address set to
> 192.168.1.10.  I set this address to
> static, however, I have a linksys wireless router that I am connecting it
> too.  I want the linksys to act as my dhcp router.  I can't manage to see
>  the internet from the linksys or from the computer attached to the
> linksys (which has a dhcp address assigned by the linksys)
>
>
> Two questions:
>
>
> First, what linux tools and config files are being used by devil linux?
> I
> want to go look at the man pages for them and understand better what devil
>  is doing.

pretty much the 'standard' tools: ipconfig, route, iptables, ...

> Second, as far as I can tell, eth1 is not being bridge to eth0.  So how
> does eth1 know where to get to the rest of the internet from?  How can I
> mimic that from eth2?  I've looked at the iptables -L output, but that
> seems to apply universally.  I've looked at /etc/sysconfig/ifcfg.ethX for
> all my interfaces,and again, doesn't seem to be any difference between
> eth1 and eth2.  I've checked brctl setting, and apparently nothing is
> currently set up.   ip route show has only one difference - there is a
> broadcast setting for eth1 at '255.255.255.255 dev eth1 scope link' I can
> ping every device on the network, but the dmz on eth2 can't see outside,
> to include by ip.  Help?

The interface won't be bridged (you have to specifically set bridging up
(which is completely different to routing)) and without you configuring
the routes and firewall rules, there won't be any routing of the traffic.

The file /etc/init.d/firewall.rules controls the firewall.

Did you enable one of our default firewall scripts? You will have to adapt
them for your setup.

-- 

Regards
  Heiko Zuerker
  http://www.devil-linux.org