RE: network installation/configuration

[Dan Schad <dschad seielect com>]

I think the first thing to address is if all three boxes are behind your
linksys router
you should not have to open any ports for your XP boxes to access the
Linux box.  Those are all local network access and would never pass
thru the firewall portion of the router.  If I misunderstood sorry.

Second, in order for you to host a web server behind a linksys (or
any other gateway/router device/system) you will need to do two things 
(which I'm not certain is safely done using the linksys but maybe it is).  
On your Linksys router/gateway, you will have to open up port 80 and
port forward those requests directly to the Linux box.  
You will also need to make sure that when the
cable company changes your IP (since I'm guessing it is dynamic IP 
instead of a static IP) the linksys will have to be setup to 
handle that.  They do this on the fly.

Also, since you will get different IP from the cable company you will
not be able to register your domain until you get a static IP address.

If I'm way off base sorry but from the information I've read I think 
your challenge is going to be with the Linksys and not having a static
IP address rather than communicating with the Windows Machines and the
Linux Box as long as they are on the same network.

Also, note:  The Class C address 192.168.1.0 network is not routed on
the WWW so those addresses would stay internal.  So, the only "danger"
is if you want to access your Linux box from outside your home.  At that 
point I would suggest using IPSEC VPN type connections OR using ssh.

Hope this helps,
Dan




-----Original Message-----
From: Fortenberry, Michael [mailto:michael_fortenberry medcohealth com]
Sent: Wednesday, September 03, 2003 11:23 AM
To: 'redhat-install-list redhat com'
Subject: network installation/configuration



Now that I have RedHat 9 installed and running I am trying to understand how
to configure my network. I have asked a couple of questions and received
suggestions and tried those. Maybe the picture will be a little clearer if I
give an overview of what I think I am trying to set up.

I have 2 XP boxes and 1 Linux box connected to the world via a LinkSys
router/gateway. I want the XP boxes to continue the ability to browse the
internet. I want the Linux box to be able to browse also (as it currently
does) but I want to set it up as a web site server so I can host some
software providing a service. I would like to develop from the Windows box
using Exceed or a similar XServer where my tools are xterms, emacs, vim or
vi, make and various applications such as perl, scripting, php, sql, etc.

My understanding is that an Xserver requires many ports to be open and thus
to be unsafe. One question is, Can't I have that port access only open to
one of the XP boxes and not to the world? I downloaded putty for Windows and
it is the only thing I have tried that actually allows me to connect to the
Linux box but I can't seem to configure it to allow the 'ssh -X' option
which would make X applications available. I can only do non-X terminal type
work. Is there a putty or similar app that allows the -X option or am I
configuring it incorrectly.

I downloaded and installed firestarter and have played at length with it's
setup and configburation but it doesn't seem to be complete or I don't
understand something. When in 'hits' mode I can't even see the hits that
must be occuring when I am connected via putty and ssh. I tried opening many
ports and even turning off the firewall (maybe just the software one that
firestarter provides and not the real one which may be still there?) but I
see no improvement. I have seen some hits that appear to come by themselves
and not directly from my attempts but using 'open port from context on that
hit' or 'open port only for this host' from the same context doesn't seem to
change what is happening.

Next big question. I set up ssh from one XP box to Linux while perusing
Rick's link to 'how to setup ssh' and while that allows for Linux to Linux
work it doesn't discuss XP to Linux. Second part of that is... given my
Linux box now has a static ip at 192.168.1.122 (thanks to Rick's suggestion)
how do I come in from the outside world when I don't know what real ip
address the router has assigned? I guess the obvious answer is to purchase a
static ip address and have that go directly through the router/gateway?

Final for now question is, my understanding is my internet access cable
provider won't want me to host a web site unless I somehow pay for it or get
someone to host it. My problem is the software I am writing and want to host
depends on gigabytes of image data. Providers charge by space allocation
afaik and 6 g is only the current size. That is why I want to host my own
machine where I can simply use as many HDs as I need. Am I barking up a tree
that makes no sense? What is the correct/desired solution?

Please let me know as soon as I cross the line past
installation/configuration and into a point where I should be asking these
questions on a different list. Thanks to everyone here who gives of their
time to support novices such as myself. I apologize and regret that I cannot
suppress the legal disclaimer when writing to this list.

Michael Fortenberry
Senior Applications Architect
E-Commerce Strategy and Delivery Michael_Fortenberry medcohealth com 
(201) 269-4448



This e-mail message and any attachments contain confidential information
from Medco Health Solutions, Inc. If you are not the intended recipient,
you are hereby notified that disclosure, printing, copying, distribution,
or the taking of any action in reliance on the contents of this electronic
information is strictly prohibited. If you have received this e-mail message
in error, please immediately notify the sender by reply message and then
delete the electronic message and any attachments.


_______________________________________________
Redhat-install-list mailing list
Redhat-install-list redhat com
https://www.redhat.com/mailman/listinfo/redhat-install-list
To Unsubscribe Go To ABOVE URL or send a message to:
redhat-install-list-request redhat com
Subject: unsubscribe