[svlug] Router Pains, a Firewall and a Server

[Sargun Dhillon]

Design the network the way I showed it here. The board0 will be monitoring
power provided to the server. When the server is using power it'll bridge
the connection from the switch to server, and prod board1 to bridge server
to cable. If the power drops, then it'll bridge the connection through the
router.

On 11/5/06, Lord Sauron <lordsauronthegreat at gmail.com> wrote:
>
> On 11/5/06, John Conover <conover at rahul.net> wrote:
> > Lord Sauron writes:
> > > The way my home network is configured, there is:
> > >
> > > Cable Modem
> > >     |
> > > Network switch
> > >     +---------------------------------\
> > > Router                              Server
> > >     |
> > > Printers, the rest of the network
> > >
> > > Sorry for the ASCII art.  My issue is that my server isn't connecting
> to the
> > > internet.  I know that my router is set up like a DHCP server, so it
> hands
> > > out IP adresses and things like that.  It also is a firewall, which
> blocks
> > > traffic that comes in for my server.  That's why I added the switch,
> to try
> > > and bypass the router (and the firewall).  However, now the server
> lacks the
> > > DHCP server it was connecting to (I had it set up with a Dynamic DNS
> > > service).
> > >
> >
> > Just as a suggestion, Lord, why not put your server on the other side
> > of the router, (and eliminate the switch,) and use port forwarding in
> > the router to forward only packets of interest to the server, (like,
> > maybe, port 80 for web pages, 20/21 for ftp, etc.); that way, the
> > router/FW will add some protection to your server, too, (blocking the
> > ports you don't use,) and your server can use your local LAN private
> > network DHCP to get its IP address.
>
> Interesting idea.  I'll read my router's manual and see if I can find
> a solution.
>
> > If you absolutely MUST expose all ports on your server to the
> > Internet, (and you are certain that your cable ISP will provide you
> > more than one IP address-which might be your problem, too,) then look
> > at your /etc/resolv.conf file and make sure its compatible with your
> > cable ISP provider, (make sure the nameserver IP address(es) are the
> > ones listed on your cable ISP provider's DHCP setup pages.)
>
> Comcast isn't terribly excited about people hosting servers, so I
> doubt I'll get another IP in addition to the one for the router.
>
> --
> ========== GCv3.12 ==========
> GCS d-(++) s+: a? C++ UL+>++++ P+
> L++ E--- W+(+++) N++ o? K? w--- O? M+
> V? PS- PE+ Y-(--) PGP- t+++ 5? X R tv-- b+
>                 DI+++ D+ G e* h- !r !y
> ========= END GCv3.12 ========
>
> _______________________________________________
> svlug mailing list
> svlug at lists.svlug.org
> http://lists.svlug.org/lists/listinfo/svlug
>



-- 
Sargun Dhillon
President
Atarack Communications, Inc.
(925)-202-9485
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://kenny.linuxmafia.com/pipermail/svlug/attachments/20061105/4677b214/attachment.htm 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: network.png
Type: image/png
Size: 4265 bytes
Desc: not available
Url : http://kenny.linuxmafia.com/pipermail/svlug/attachments/20061105/4677b214/attachment.png