Read ALL the books..am still confused... ....Have a Network of PC working under SAMBA ....Want to connect these to the web.... ....Can I do this using a dynamically assigned account from DEMON? If the intranet addresses are 192.168.1.1 etc What do I call the Router and the intranet card the router is attached to? 0.0.0.0? James Carter
On Wed, Dec 20, 2000 at 12:16:45AM -0000, James H . Carter & Cybèle de Jong wrote:
Read ALL the books..am still confused...
....Have a Network of PC working under SAMBA ....Want to connect these to the web.... ....Can I do this using a dynamically assigned account from DEMON?
Demon use static IP addresses, and yes you can use this setup.
If the intranet addresses are 192.168.1.1 etc What do I call the Router and the intranet card the router is attached to? 0.0.0.0?
Have you had a look at the Networking-Overview-HOWTO? The general idea is to assign 192.168.1.1 to the router/gateway and then set the default route of your Windows machines to this IP. Dependent on how big your network is you might want to use DNS. Are you going to use a Linux box as the router? If so you'll need to investigate the use of ipchains (IPCHAINS-HOWTO) -- Frank *-------*-----*-----*-----*-----*-----*-----*-----*-----*-------* | Boroughbridge | Tel: 01423 323019 | PGP keyID: 0xC0B341A3 | *-------*-----*-----*-----*-----*-----*-----*-----*-----*-------* http://www.esperance-linux.co.uk/
On Wed 20 Dec, Frank Shute wrote:
On Wed, Dec 20, 2000 at 12:16:45AM -0000, James H . Carter & Cybèle de Jong wrote:
Read ALL the books..am still confused...
....Have a Network of PC working under SAMBA ....Want to connect these to the web.... ....Can I do this using a dynamically assigned account from DEMON?
Demon use static IP addresses, and yes you can use this setup.
If the intranet addresses are 192.168.1.1 etc What do I call the Router and the intranet card the router is attached to? 0.0.0.0?
Have you had a look at the Networking-Overview-HOWTO?
The general idea is to assign 192.168.1.1 to the router/gateway and then set the default route of your Windows machines to this IP. Dependent on how big your network is you might want to use DNS. Are you going to use a Linux box as the router? If so you'll need to investigate the use of ipchains (IPCHAINS-HOWTO)
So 192.168.1.1 will be (one of) the network cards in the LINUX box attached to the rest of your network. Make sure you configure the 'gateway' address in the TCPIP bit of the control panel of your PCs. Either you will have a second ethernet card in the LINUX box attached to a router or you have an ISDN card - or - I suppose a modem. This will connect (hopefully) on demand. LINUX will do IP masquerading - and I guess I would advise to do it that way - although for historic reasons we don't. I use a socks (and web) proxy - which come with their own set of problems but does provide more 'control' over external internet access as no-one has direct IP contact with the outside world. As stated on above reply, Demon does NOT dynamically assign you an account - you get a fixed IP address - unless they've changed without telling me. We still have a Demon dialup account to backup our School connect account. -- Alan Davies Head of Computing Birkenhead School
<snip>
As stated on above reply, Demon does NOT dynamically assign you an account - you get a fixed IP address - unless they've changed without telling me. We still have a Demon dialup account to backup our School connect account.
Just FYI - as long as you're on a Demon SDU or NDU ( Standard and Network Dial Up respectively ) you'll have a static IP address. Trust me, if Demon changed those to dynamic allocation you would have *definitely* heard by now ;) -- Nick Drage - half understanding Pegasus until he gets his Linux partition sorted out......
....Have a Network of PC working under SAMBA So 192.168.1.1 will be (one of) the network cards in the LINUX box attached to
Hi, Just lurking here, watching the router thread unfold... A couple of things. 1) Would people submitting to the list please not use TLAs, It really does mess up the flow every time a new TLA is encountered, and me, being a chap with a small brain am often obsessed for days trying to work out the latest TLA, usually at the expense of the knowledge being dished out. So please, TLA users, have a thought for us thicko's with little imagination. That also goes for FLA's, SLA's etc. 2) More to the point, Is it really necessary or just good practice to use a second network card when connecting to a router? The implication below is that it IS necessary. TLA? Oh, Three Letter Abbreviation, e.g BTW (I know what this means now!), I fully accept NIC and other common abbreviations for technical terms, but please, let's try to hang on to the last vestiges of English. It may be quick to write but... I suppose we could do it properly and use Three Letter Abbreviations (TLAs) in the correct manner, as practised by the technical press et al. Thanks for all the info over the last year, have a great Christmas break and enjoy the new millennium. What do you mean, annually retentive? :-) Adrian <snip> the rest of your network. Make sure you configure the 'gateway' address in the TCPIP bit of the control panel of your PCs. Either you will have a second ethernet card in the LINUX box attached to a router or you have an ISDN card - or - I suppose a modem. This will connect (hopefully) on demand. <snip>
"James H. Carter & Cybèle de Jong" wrote:
Read ALL the books..am still confused...
....Have a Network of PC working under SAMBA ....Want to connect these to the web.... ....Can I do this using a dynamically assigned account from DEMON? If the intranet addresses are 192.168.1.1 etc What do I call the Router and the intranet card the router is attached to? 0.0.0.0?
James Carter
Just thought I would chip in here if that's allowed. I have an HP 486/50DX with 24 Meg RAM in my loft. I use it as my router / DNS server / DHCP server It is running with a 120Meg Hard disc in it. This is simply because it is more reliable than running from floppy. However the software ( Freesco ) can and does easily run from a floppy. It has an external modem for dial up to my ISP ( NTL ) and an ethernet card for my 'intranet' The network card has an address of 192.168.1.1 and the dialup connection receives its IP address from the ISP dynamically. This could be set manually. It does the network address translation for a WIn95 box and a dual boot Win98 / Linux box without any trouble. They receive their IP addresses from the 486 dynamically in the range 192.168.1.2 - 254 If you have a lot of PC's connected to the router you can put a second ( or third ) network card in it and split you network up. Freesco is free to all. See http://www.fresco.com for more info. best wishes norman
On Wed, Dec 20, 2000 at 10:57:46AM -0000, Nick Drage wrote:
Just FYI - as long as you're on a Demon SDU or NDU ( Standard and Network Dial Up respectively ) you'll have a static IP address. Trust me, if Demon changed those to dynamic allocation you would have *definitely* heard by now ;)
I thought I'd mention that a static IP allows you to have any number of email addresses and you can then pick up your mail via SMTP from Demon and distribute it to your users via POP3 or IMAP. To my mind that's a big benefit of using Demon. The static IP also makes the possibility of remote admin via ssh a relatively easy proposition. I use qmail and its pop3 daemon FWIW (apologies to the annually retentive :) -- Frank *-------*-----*-----*-----*-----*-----*-----*-----*-----*-------* | Boroughbridge | Tel: 01423 323019 | PGP keyID: 0xC0B341A3 | *-------*-----*-----*-----*-----*-----*-----*-----*-----*-------* http://www.esperance-linux.co.uk/
On 21 Dec 2000, at 0:44, Frank Shute wrote:
On Wed, Dec 20, 2000 at 10:57:46AM -0000, Nick Drage wrote:
Just FYI - as long as you're on a Demon SDU or NDU ( Standard and Network Dial Up respectively ) you'll have a static IP address. Trust me, if Demon changed those to dynamic allocation you would have *definitely* heard by now ;)
<entering pedant mode>
I thought I'd mention that a static IP allows you to have any number of email addresses
Aaah, static or dynamic IP you can still have a anything@domain.name type email setup, where you receive email for the entire "@domain.name" - depending on what your ISP is capable of. UKLinux is a well known example of this.
and you can then pick up your mail via SMTP from Demon and distribute it to your users via POP3 or IMAP. To my mind that's a big benefit of using Demon.
Yes, definitely. Having email delivered to you by SMTP is a help, and while this too can be done to dynamic IP addresses I've never really seen it implemented, the authentication is a problem.
The static IP also makes the possibility of remote admin via ssh a relatively easy proposition.
Also makes IP address restrictions incredibly easy to implement on anything you connect to :) Hmm, could be interpreted as being a bit "salesy" there. So at this point I should declare I am an employee of Demon@Thus, but not in a sales / commission earning capacity. And I should add, AFAIK, Demon aren't the only ISP offering static IPs on dialups, I believe PowerNet in Milton Keynes offer the same. <snip> -- Nick Drage - half understanding Pegasus until he gets his Linux partition sorted out......
2) More to the point, Is it really necessary or just good practice to use a second network card when connecting to a router? The implication below is that it IS necessary.
Really a lot would depend on your router, taking the case of our system, we have a leased line to the internet (but could just as easily be ISDN dial up) and we were given a Cisco router by our ISP. The router only has the one network card in it and that is our PUBLIC internet ip address. In order to connect the router to our internal systems (unless you want every device to have it's own public IP address and connect it directly to the router via a hub) you would have to have another box doing some kind of network address translation (NAT). We use a Linux box for this, and so therefore it has 2 network cards in it, one on the same network address subnet as our router (public), and one on the same network subnet as our internal network (private), then we use Masquerading to connect our internal PC's to the internet. There are however some internet gateway routers that you can buy which instead of presenting your public subnet on it's ethernet port will actually do the NAT for you in which case you would assign it an internal IP address on it's ethernet card but Any network should have a firewall in it anyway and if you want to do the job 100% then you should have a PC (or dedicated firewall hardware) with 3 network cards in it. One being on the public subnet, one on your private subnet and one in the De-militerized Zone (DMZ). The DMZ network subnet would then contain the services you want public access to such as web servers/email etc. Then even if your public servers are hacked, they are still not on the same network as your internal PC's. -Andy- ============================================================ Andrew Johnson, Technical Consultant Drive Computer Services Tel +44 (0)1924 280388 Extn 223 Fax +44 (0)1924 280117 Mobile +44 (0)7970 284594 Email : andrew.johnson@drivecomputing.co.uk { The contents of this communication (plus any attachments which may be included along with it) are solely intended for the individual(s) and/or group(s) listed as a recipient above. None of the contents should be relayed in any form to any third party without the prior consent of the author. All opinions expressed are my own and not necessarily those of my employer. }
participants (7)
-
Adrian Wells -
Alan Davies -
Andrew Johnson -
Frank Shute -
James H. Carter & Cybèle de Jong -
n.elliott -
Nick Drage