| |
| |
| |
|
Page: 1 2 3 4 5 6 7 8 9 10 11 12
Comments:
<0> reboot
<1> i have a domain and all from outside can accesez perfectly but from inside is tricy don't work
<0> use windows
<2> QuazX, yes, you need special forwarding rules on the gateway for the LAN
<1> have any ideea how this is done?
<0> reboot
<3> QuazX: how about people inside your lan use the internal address?
<3> that would be a lot simpler...
<1> dragonk i know
<1> but inside my lan are a lot of people
<3> and?
<1> is anoying to type http://192.168.0.200
<3> get a dns
<1> to see a webpage
<1> a dns server?
<1> this won;t afect my ISP dns's?
<2> QuazX, you could try if adjusting /etc/hosts already helps
<2> e.g. to put the local IP for the external domain there
<0> !dns
<4> somebody said dns was read the DNS howto on http://www.tldp.org.
<0> rtfm QuazX
<3> QuazX: no, it wont - you can either hard-code everybodies /etc/hosts or you can build a DNS inside your NAT which will hand off requests for external domains, but serve internal addresses
<2> QuazX, your ISP dns doesnt come into play when you keep the order "search localnet first"
<1> is this tricky or hard?
<1> i never deal with a dns server before!
<3> pretty easy. get a couple of machines in a private lan first if you're worried
<1> and i don';t have to much time
<1> aha
<3> if you've set the nat up, you can prolly handle a dns...it's easier than the extra firewall rules, i would say
<1> can i put the dns server on the eb server machine?
<3> yup
<1> okk 10x
<0> the dns server will deal with you!
<3> but, define 'not much time' - hard-coding might be easier...
<1> can i ask another question
<1> ?
<2> sure
<3> it'll take you a couple of days to iron all the bugs out, unless you're a fast learner
<1> a want my nat machine to nat the internal ip adreses but with a username and p***word
<1> like the dial-up
<1> have anysugestion what progs must i use
<3> oohh, you want some sort of checkpoint firewall-type program
<1> i dont need something complicated just something simple
<1> to manage the usernames and p***word
<1> and alow routing to them
<3> it's going to be complicated, imho - you need an interface which is available to everybody anyway,a db of sorts to handle the username/p***e
<1> no encription no nothing
<3> unless you *really* need it, don't do it
<1> imho this is the name of the program
<1> i realy need something like dial-up
<1> internet with name and p***word
<3> imho --> in my humble opinion, not a program
<1> :D soory
<3> checkpoint firewall does something like that, but you have to buy it.
<3> why do you need this?
<1> i have smal network
<3> then you should know who is using it, unless you're setting up an internet cafe
<1> the tricky part is that i manage to shape wit
<1> base on ip's
<1> if somebody is changing his ip he easyli cand get out of the shaper
<3> why do you need usernames/p***words?
<3> oh, dont allow it. have a dhcp server serve each mac address with a fixed IP
<1> because on y network is very easy to stole other identity
<1> ip and mac adres
<1> with an user name and p***word is uch safer
<1> dragonk, i have this but someone can put a fixed ip directly
<3> true..unless all IP's are in use
<1> yeah but somenone can change his mac addres very easy with one from the network
<1> and the have a diferent ip
<3> no...it'll screw up the network.
<3> changing IP is easy, unless you restrict which IP's they can use. changing mac address is easy, but you can't steal one which is already in use without alarm bells going off
<3> and there *must* be a way to match the two at the firewall.
<1> cmon man
<1> for example
<1> with a simple windos scaner
<1> you can scan the mach the host name etc
<1> when the victim computer is off
<1> you can change all that
<3> again, you should notice that sort of traffic anyway, and your computers should always be on - what the hell are you trying to set up?
<1> and bingo you have stolen a network identity and generate trafic on his account
<1> all my LAN computers are not all the time on
<3> ah, well - then you need to match IP's and MAC addresses, and you can't scan a machine if it's off
<1> the same
<3> again, if machine a is on, and machine b tries to become a, a will stop working. if machine a is off, then b cant scan to find out what mac addresses there are.
<1> if you mach them is n diference
<3> anyway, you should be using switches not hubs
<1> lol i'm using only switches
<1> those with managment are prety expensive
<1> anyway
<1> so
<1> what should i use for username and p***word?
<3> dont use root/master. blah. generate random p***words from /dev/random and uuencode
<3> dont you trust your users? :D
<3> what the hell are you building - 'net cafe?
<3> 'sides, you're from romania - you should know better than to irc as root
<1> no man
<1> i'm a smal isp provider
<1> i have a big internet conection
<1> and i;m sharing in my neiborhood
<1> and in romania the density of hackers on square mettre is pretty high
<1> :D
<1> irc as root i told you i installed a fewhours ago my linux and didin't had time to hange the permisions
<1> i'm focus on that webserver problem and this username/p***word
<3> it's not difficult to adduser you know :P
<1> :)))) yeah i know
<3> you'll have to google. search for something like 'checkpoint firewall' with maybe 'one time p***words' depending on how secure you want it, and an https connection (for web-based login) wouldn't be a bad idea
<1> told you webserver and username and p***word nothing else
<1> you told that thing is not free
<1> or i miss uinderstood?
<3> you'll still have to google, but you could try to make sure you can't sniff packets on your network, and match IP to mac address - and you missed the point
<3> I meant 'find something *like* it'
<1> man
<1> but a ppptd
<1> wouldn't do the trick?
<3> google is your friend. can't help you more than that - hmm...never used it.
<1> one question
<1> how much a megabit cost where are you now?
<3> ADSL line speed?
<1> 1024kbps of internet
<3> approx $30
<1> and a fiber optic
<3> per mo
<1> or something
<3> ha, im on adsl - phone lines
<3> cable internet is cheaper, $10
<3> but i dont have cable
<1> and fiber optic?
<4> [fiber optic] A method of transmission alternative to copper. The way it works is by pulsing light down a strand of gl***. These pulses represent binary code. So far, that's no better than copper. The advantage is that a single strand of fiber optic can carry thousands and thousands of different frequencies at once without data loss.
<1> something?
<4> rumour has it, something is everything,nothing, or part of something else, or everything, or nothing, or part of something else
<3> fnord?
<4> bugger all, i dunno
<1> 30 dolaras
<1> heaven
<3> fnord is the hole in the donut
<3> btw :)
<3> you're on your own from here, kid, at least from me - i dont handle access :)
<1> man
<1> 30 dolars?
<1> 1 megabit?
<1> are you sure?
<1> i'm stuned
<3> yup
<3> and i dont pay for it anyway
<1> f***** romania
<1> here is somthing like 400-500$
<5> it is approx $40
<1> on fiber optic
<1> with 40 buck per megabit in one year i can be a milionaire
<1> :D
Return to
#linuxhelp
or
Go to some related
logs:
#networking
unreal start Permission denied
#MissKitten
Fred Raud
#MissKitten
evii linux
romanian slappers
#gentoo
#linuxhelp
#AllNiteCafe
|
|