virtual nics + official IP addresses: accessing internal servers

[koen . news]

Hello,

Everything works qua NAT  redirects etc, except:
I'm trying to match virtual nic with external (official) IP i got from the
ISP.

eth0: external iFACE official IP1
eth1: internal 192.168.1.10/24

i created via eth0:1 an extra interfaces that matches official IP2 so I
can forward traffic to a specific server. I know I can redirect specific
ports on IP1 to a server and that works.

(e.g. $IPTABLES -t nat -A PREROUTING -p tcp -i eth0 --dport  -j DNAT
--to 192.168.2.240:3389) = Works perfect)

IPtables doesn't accept eth0:1 as interface. But I can use the IP2.


2 questions:
1) Do i really need a virtual iFACE with IP2? I guess so
2) No other/better way to define multiple official IP's to one iFACE?
3) IP2 is the official IP e.g. $IPTABLES -t nat -A PREROUTING -p tcp -d
IP2 --dport 80 -j DNAT --to 192.168.2.240:80 = doesn't work

Any pointer on how to solve this problem? Maybe another approach. I will
need to do this for multiple servers...

thx,
Koen Linders


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

login problems after permission change: unable to cd to home

[koen . news]

Problems started yesterday. I think when changing permission on root dir.
Debian Etch

Root login is no problem. I checked the permission of /etc / /root and set
them right according to a debian with same version.

Strace of login koenl says where all goes wrong:

3234  fchown32(0, 1008, 5)  = 0
3234  fchmod(0, 0600)   = 0
3234  rt_sigaction(SIGINT, {SIG_IGN}, {SIG_DFL}, 8) = 0
3234  clone(child_stack=0,
flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD,
child_tidptr=0xb7dd7708) = 3235
3234  wait4(-1,  unfinished ...
3235  getppid() = 3234
3235  setuid32(1008)= 0
3235  chdir(/data/home/koenl) = -1 EACCES (Permission denied)
3235  chdir(/)= -1 EACCES (Permission denied)
3235  write(2, Unable to cd to \'/data/home/koenl\'\n, 35) = 35
3235  time([1263977226])= 1263977226
3235  stat64(/etc/localtime, 0xbf89dae8) = -1 EACCES (Permission denied)
3235  open(/etc/localtime, O_RDONLY)  = -1 EACCES (Permission denied)
3235  open(/etc/localtime, O_RDONLY)  = -1 EACCES (Permission denied)
3235  open(/etc/localtime, O_RDONLY)  = -1 EACCES (Permission denied)
3235  send(5, 84Jan 20 09:47:06 login[3235]: unable to cd to
`/data/home/koenl\' for user `koenl\'\n, 85, MSG_NOSIGNAL) = 85
3235  close(5)  = 0
3235  munmap(0xb7f4b000, 4096)  = 0
3235  exit_group(1) = ?
3234  ... wait4 resumed NULL, 0, NULL) = 3235
3234  --- SIGCHLD (Child exited) @ 0 (0) ---


Any idea what to correct? Because of this samba fileserver and bind9 also
have problems. Any way to create rescue disk from other debian? i could
access that system with rsync from this one.

Koen




-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org