Network setup...

[MultimediaMan]

I'll let everyone know when I've seen a 'perfect' disaster recovery setup... I've seen many perfect disasters, however...

[Paddy]

Great! I hate how Seagate wont advance ship a RMA'd drive.

Once the RAID 5 array is up i intend to use SyncToy. Hopefully that will end my woes!

[Paddy]

Managed to salvage most of the data. The rest can wait until the array is rebuilt.
The NICs arrived for the smoothwall router.
Below is an updated network diagram. (looks prettier)

I'll install Smoothwall tonight.

Any pointers?

[Paddy]

As for the version, i've downloaded 2.0 and the 'grizzly' 3.0
The Advanced Firewall looks nice though

[dbdg]

..Below is an updated network diagram. (looks prettier)

Wow, let me know when you leave that house.

[Paddy]

I've set up smootheie as in the above diagram. Everything seems to be working. The Red NIC can access the net, the orange NIC can access the net and the green NIC can access everything.

I have two questions.
1) I can't map to names on different networks, only IP addresses. Is this normal?
2) When I came to the computer (green) this morning I got a 404 when I tried to acces MURC. After a few mins of doing nothing, it suddenly started working... odd...

[Marshmallowman]

I don't know where you got the impression I am good at this, I am just good guesser

1) I would put your computer names and ips into your host file(s) eg
C:\WINNT\system32\drivers\etc\hosts

that way your computer can resolve the ip's from names , it works well with static ip's and is a lot less hassle than setting up a dns.

2) Some part of the intarweb was probably broken, I would not worry unless it happens to often.

[agallag]

If you have a windows server anywhere on that network, install the WINS service and point your clients to it. WINS is messy for large environments, but it's a lot easier to set up for a small setup like yours.

[Paddy]

A silly question perhaps, but traffic is forwarded from the internet to my mail/web server (www.bushe.co.uk), however, I can't access the internet from the server. In other words I can connect to the DMZ from my LAN and from the internet via port forwarding, but there seems to be some firewall restriction which is preventing the server on the DMZ from connecting to the internet.

Does that make sense?
If so, how can I open up ports to allow access out of the DMZ to the internet for mail retrieval?

[MultimediaMan]

Your servers on the DMZ do not receive DHCP service. You will need to put in their static IPs, the default gateway of the segment (The Orange IP address of your Smoothwall), and the DNS Server which your RED interface is using (as provided by your ISP).

You can find your DNS address(es) in /etc/dhcpc/dhcpd-eth2.info and look for the "DNS=" line.

Good Luck!

[Paddy]

hmmm i have done that already, but I still dont have any outbound traffic...

[Whirl-Secret]

Holy balls, this is your house?! Win2K3 mail servers?!

Wait till you get married, then you'll spend all that money on nice curtains and furniture instead

[Paddy]

should a server on the dmz be able to ping the gateway? excuse punctuation - baby in other hand

[Paddy]

Progress... it does appear to be a problem with the DNS settings. I can ping the IP for MURC, but not the domain name. The DNS settings on my server are correct for the ISP... do i need to enter them anywhere else?

[Paddy]

Doh!
From my ISP today:

DNS Server - 212.23.8.1 retired

The retirement of the DNS server 212.23.8.1 for recursive lookups has been completed today, at 1pm.

Any customers still using this DNS server should immediately update their DNS server address settings to be picked up automatically, or to use the following:
212.23.3.100 and
212.23.6.100