[K12OSN] NAT and connections through it.

[Doug Simpson]

Thanks again for your reply. . .read on. . .


Doug Simpson
Technology Specialist
De Queen Public Schools
De Queen, AR
simpsond at leopards.k12.ar.us
"A Dollar Saved is a Dollar Earned"


>>> Les Mikesell <lesmikesell at gmail.com> 2/3/2009 7:27 AM >>>
Doug Simpson wrote:
> Thanks for your reply. . .
> 
> I know how to turn nat on and off. . . my question is how to let them access a computer outside the NAT.

What do you mean by 'outside the NAT'?  NAT should let machines on the 
inside subnet access anything the server itself can.

computers in the lab need to access a single computer outside the lab (outside the nat)

> Will read over what you sent again and see if I can make heads or tails out of it. . .

I thought you wanted to limit then NAT to one destination.  Maybe you 
have some other problem.

This is what I want.


> Squid didn't do it. . . unless I didn't do it right. . .
> 
> Doesn't squid only to web proxying?

Squid handles http and ftp protcols - which is what most virus scanners 
would use to download updates.   Can the server itself access the 
address you want to reach?

The virus updater runs on a computer on the 10.40.x.x network, and I think either http or windows UNC paths will work, but I couldn't get the http to go using squid.

Yes the server itself can reach the destination. It is on the 10.40.x.x network. The computers in the lab are on a 192.168.100.x network.

On a side note, when I did get into it (now I can't and that is a different discussion) I was told to add a route and after I did that, it brought the rest of the Internet traffic to a screeching halt whenever NAT was running. As a result, I had to completely take the NAT server out of the equation until I can get that fixed, but I can't get back into the system-config-network with a GUI so I have the route add options. (do you know of a way to do that from a text console?)

I may just rebuild that server from scratch. . . it has been running fine until a few days ago when I started mucking with it to get those computers to see out.. .

But that is another day's project. . .  I would like to get it working anyway, though. . .

Doug
-- 
   Les Mikesell
    lesmikesell at gmail.com 


_______________________________________________
K12OSN mailing list
K12OSN at redhat.com 
https://www.redhat.com/mailman/listinfo/k12osn 
For more info see <http://www.k12os.org>