link1305
06-05-06, 08:35 AM
I'm having a strange problem here at work; I have a sendmail server I'm configuring, and it has 2 network interfaces (running Fedora Core 5). The IP of eth0 is 10.1.0.229, and the IP of eth1 is 172.17.1.225. The 10.* network is the internal company network, and the 172.* network is for servers that are on the DMZ.
When this server connects to the internet I need to route it through the 172 network instead of the 10. network so it can do what it needs without the firewall interfering. I did this by modifying the routing table, something I had never really done before. I basically made the default gateway the 172. network instead of the 10. one which is was previously. Now, I can't SSH to this server through it's 10 IP address, but I can through the 172 address.
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
10.1.0.0 * 255.255.255.0 U 0 0 0 eth0
172.17.1.0 * 255.255.255.0 U 0 0 0 eth1
169.254.0.0 * 255.255.0.0 U 0 0 0 eth1
default 172.17.1.1 0.0.0.0 UG 0 0 0 eth1
If I remove the 172 default route and add the 10 default route, I can SSH to it again through the 10 network. However when I do that I can't send mail any more from the server, because of the firewall (since it's using the 10. network). Interestingly, when the default route is 10, I can still talk to it on the 172 interface; Anyone know why it wont' let me talk to it (on the 10...) when I change the default route from 10. to 172.?
Thanks!
When this server connects to the internet I need to route it through the 172 network instead of the 10. network so it can do what it needs without the firewall interfering. I did this by modifying the routing table, something I had never really done before. I basically made the default gateway the 172. network instead of the 10. one which is was previously. Now, I can't SSH to this server through it's 10 IP address, but I can through the 172 address.
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
10.1.0.0 * 255.255.255.0 U 0 0 0 eth0
172.17.1.0 * 255.255.255.0 U 0 0 0 eth1
169.254.0.0 * 255.255.0.0 U 0 0 0 eth1
default 172.17.1.1 0.0.0.0 UG 0 0 0 eth1
If I remove the 172 default route and add the 10 default route, I can SSH to it again through the 10 network. However when I do that I can't send mail any more from the server, because of the firewall (since it's using the 10. network). Interestingly, when the default route is 10, I can still talk to it on the 172 interface; Anyone know why it wont' let me talk to it (on the 10...) when I change the default route from 10. to 172.?
Thanks!