Guest c_m_f Posted June 21, 2003 Report Share Posted June 21, 2003 Ok now my seting up of DHCP is now done im having some other probs, mainly with shorewall i believe. Once again this is my setup: Two computers, one connecting to the net (mdk 9.1 call it rubarb) with a normal dial-up modem and a second (mdk 9.1 XP call it custard) computer connected with a simple crossover cable. What it is, is that 'custard' cannot ping 'rubarb' (DHCP server) but 'rubarb' can ping 'custard', when i try to ping 'rubarb' from 'custard' (when shorewall is enabled on rubarb) i get this error: [casey@custard casey]$ ping 192.168.0.1 PING 192.168.0.1 (192.168.0.1) 56(84) bytes of data. From 192.168.0.1 icmp_seq=1 Destination Port Unreachable From 192.168.0.1 icmp_seq=2 Destination Port Unreachable From 192.168.0.1 icmp_seq=3 Destination Port Unreachable From 192.168.0.1 icmp_seq=4 Destination Port Unreachable and when shorewall is off, i try to ping, and nothing happens, no errors, and no replys from rubarb, so how can i set this up so it works. Also could anyone post a link on an easy to setup SMABA as it doesn't want to work really. EDIT: Here are the appropriate config files i have on for shorewall interfaces: #ZONE INTERFACE BROADCAST OPTIONS net ppp+ detect masq eth0 detect policy: #SOURCE DEST POLICY LOG LEVEL LIMIT:BURST masq net ACCEPT loc net ACCEPT fw net ACCEPT net all DROP info all all REJECT info rules: #ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL # PORT PORT(S) DEST ACCEPT masq fw tcp domain,bootps,http,https,631,imap,pop3,smtp,nntp,ntp - ACCEPT masq fw udp domain,bootps,http,https,631,imap,pop3,smtp,nntp,ntp - ACCEPT fw masq tcp 631,515,137,138,139 - ACCEPT fw masq udp 631,515,137,138,139 - zones: #ZONE DISPLAY COMMENTS net Net Internet zone masq Masquerade Masquerade Local loc Local Local Hope that helps Quote Link to comment Share on other sites More sharing options...
MottS Posted June 26, 2003 Report Share Posted June 26, 2003 In your policy (/etc/shorewall/polilcy), add the following line after 'fw net ACCEPT' but before 'net all DROP info' masq fw ACCEPT and restart shorewall (type 'service shorewall restart' as root in a console). That should remove the firewall that is between 'rubarb' and 'custard' but prevent people from the net to access your boxes (yes!). For Samba, here is two nice link: http://www.tweakhound.com/mdk9/mdk9net.htm http://www.mandrakeuser.org/docs/connect/csamba.html BTW, since you have two boxes with Linux on them, why don't you use SSH to share files? You only have to turn it on by typing 'service sshd start' on both box and then access files with Konqueror by typing 'fish://IP'. If you don't use KDE you can use the magic console with 'ssh IP' and voila! If you have problems with your firewall SSH runs on port 22. Putty is a nice Windows client for SSH. Search google for that. HTH MOttS Quote Link to comment Share on other sites More sharing options...
Guest c_m_f Posted June 26, 2003 Report Share Posted June 26, 2003 thanks you sooooo much for trh help, i really needed this, very much appreciated! Ill go try all of that now, and let you know. Once again Thanks Quote Link to comment Share on other sites More sharing options...
Guest c_m_f Posted June 26, 2003 Report Share Posted June 26, 2003 YAY :lol: it works!! but, how do i set what workgroup for my second linux box (custard) the workgroup to use? Quote Link to comment Share on other sites More sharing options...
MottS Posted June 26, 2003 Report Share Posted June 26, 2003 C :) :) L!! but, how do i set what workgroup for my second linux box (custard) the workgroup to use? Humm, it depends. If you want custard to act as a server then look in /etc/samba/smb.conf (or something like that... I'm not at /home). Look at the beginning of this file for the variable workgroup as specified here : http://fi.samba.org/samba/docs/man/smb.con....html#WORKGROUP If you want to access a certain workgroup from custard then it depends which client you use. With smbclient it's something like smbclient //computer/share -w workgroup -i IP .. or something like that. type 'man smbclient' :P HTH MOttS Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.