This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Installation Problem

I installed astaro security linux v6 like describet in the manual.
I can ping the internal and the external interface of the firewall (with my clients), but i can't connect to the internet. Do I have to set some routes or something like this???
Can anyone help me with this problem, or does someone know a good documentation???

This thread was automatically locked due to age.

Parents

0 MarcHautefeuille over 20 years ago

The manual is pretty good ...

If you don't use the HTTP proxy, did you masquerade your clients ?
Do your clients use the firewall as default router ?

If you use HTTP proxy, did you make the proxy accept the clients ?
Cancel
Vote Up 0 Vote Down

Cancel
0 Balse over 20 years ago in reply to MarcHautefeuille

I tried to masquerade my clients, but it dident worked.
Do I have either to masquerade or to use proxy to connect to the internet???

And, yes the clients use the firewall as default router.
Cancel
Vote Up 0 Vote Down

Cancel
0 NimmdirKeks over 20 years ago in reply to Balse

Hi,

did you activate the DNS proxy, because if not theres no DNS and without DNS no internet.

Chris
Cancel
Vote Up 0 Vote Down

Cancel
0 Balse over 20 years ago in reply to NimmdirKeks

I havent acivatet the DNS Proxy, but i entered the DNS Proxy if my ISP.
That should work to.
But that is not the Problem. I'm also not able to ping a internet site directly via the IP.
Cancel
Vote Up 0 Vote Down

Cancel
0 NimmdirKeks over 20 years ago in reply to Balse

Hi,

can you ping via hostname?

Chris
Cancel
Vote Up 0 Vote Down

Cancel
0 Balse over 20 years ago in reply to NimmdirKeks

No i can't pint neither via hostname nor via IP
Cancel
Vote Up 0 Vote Down

Cancel
0 doug_p over 20 years ago in reply to Balse

Can you ping outside addresses from the firewall itself?

If you've got NAT/Masquerading set up OK, check the packet filter rules. You have to explicity allow connections that you want to let through. If there are no rules specified, no traffic is allowed through. To allow all outbound traffic, you can add a rule like:

Source : Internal (Network)
Service : Any
Action : Allow
Destination : Any

You may not want to leave this in place long term, since it is a wide open outbound rule. But it will get traffic moving and let you know if it's just a packet filter issue.
Cancel
Vote Up 0 Vote Down

Cancel
0 Balse over 20 years ago in reply to doug_p

I can ping adresses from the firewall itself.
If i understand you right, the better way is to use proxy instead of masquerading.
Is it possible to use both??? And is it possible to connect to the internet without any of both???
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 20 years ago in reply to Balse

You can use both MASQ and the Proxies.

If you have a private IP LAN, you cannot connect to the internet with out Proxy or MASQ, and you won't be able to ping without MASQ.

You also need packetfilter rules setup if you're not (only) using the proxies.

Barry
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BarryG over 20 years ago in reply to Balse

You can use both MASQ and the Proxies.

If you have a private IP LAN, you cannot connect to the internet with out Proxy or MASQ, and you won't be able to ping without MASQ.

You also need packetfilter rules setup if you're not (only) using the proxies.

Barry
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Balse over 20 years ago in reply to BarryG

Thanks a lot for all thous helpful tipps.
Im connectet now to the internet trought my astaro firewall ;-)
Cancel
Vote Up 0 Vote Down

Cancel