[K12OSN] K12LTSP server won't give non-terminals web access

[Jack Palmadesso]

try pinging something on the internet via its ip address.  Then try
pinging with a dns hostname.  If the ip works but the name does not
then your dns settings on the workstations are the problem.

On 12/1/06, Jack Palmadesso <jack.palmadesso at gmail.com> wrote:
> Check DNS settings on the Workstations
>
> On 11/29/06, Eric Harrison <eharrison at mail.mesd.k12.or.us> wrote:
> > David D. Nelson wrote:
> > > I was trying to troubleshoot a problem of a dropped
> > > internet connection from my K12LTSP server so I
> > > temporarally turned off the firewall using the
> > > security GUI applet. When I re-enabled the firewall I
> > > lost the ability for workstations (not terminals) to
> > > connect to the internet. When I turn on squid and
> > > redirect the workstations to use the proxy they are
> > > always denied access. I decided to rebuild the server
> > > with K12LTSP 6b7 and I find that workstations still
> > > don't have access to the internet. The server is the
> > > gateway and dhcp for the network.
> >
> > All of the IPTables manipulation specific to K12LTSP is setup as
> > services. There is nat (Network Address Translation), iptables-k12ltsp
> > (permit all traffic on eth0, where the terminals are), and
> > transparent-proxying (redirect web traffic to squid/squidGuard).
> >
> > If you have the default setup (terminals on eth0, network/internet
> > access on eth1), you can just make sure that these services are enabled
> > and started. Such as:
> >
> >         /sbin/chkconfig nat on
> >         /sbin/service nat restart
> >
> >         /sbin/chkconfig iptables-k12ltsp on
> >         /sbin/service iptables-k12ltsp restart
> >
> >         /sbin/chkconfig transparent-proxying on
> >         /sbin/service transparent-proxying restart
> >
> > > What do I need to change and where do I look to change
> > > it. Also, I need some direction on where I can find a
> > > relatively simple guide to firewall settings and how
> > > to securely set up a mail server and web server on my
> > > K12LTSP box unless it would be best to dedicate
> > > another computer to the job. No more than 10
> > > terminals/workstations are on this network.
> > >
> > > Thank you.
> > >
> > >
> >
> > The simplest is to use the built-in tool:
> >
> >         System -> Administration -> Security Level and Firewall
> >
> > If you reload the firewall, be sure to restart nat, iptables-k12ltsp,
> > and/or transparent-proxying.
> >
> >
> > -Eric
> >
> > _______________________________________________
> > K12OSN mailing list
> > K12OSN at redhat.com
> > https://www.redhat.com/mailman/listinfo/k12osn
> > For more info see <http://www.k12os.org>
> >
>