Koozali.org: home of the SME Server

FreeS/WAN OK, but now ...

Michael Smith

FreeS/WAN OK, but now ...
« on: May 14, 2002, 12:27:52 AM »
So the VPN is up ... yay ... but now the REAL fun begins.  On one side of the VPN (192.168.101.x) is a SCO Unix Openserver 5.x box to which everyone needs access.  On the other side (10.0.0.x) is an NT 4.0 Small Business Server to which everyone needs access.

Machines on the 10.0.0.x side can't ping the SCO server; I suspect it's discarding packets that don't come from its subnet.  Can I add a line in the SCO box's /etc/hosts.allow such as

ALL:  10.0.0.0/255.255.255.0

and have it work?  How can I make this change take effect without rebooting the SCO box (the users whine a lot when we do this)?

(Note that if I VPN directly into the SME server on that end via PPtP I *can* ping the SCO box, but such a setup means the machine from which I'm PPtPing gets an IP address in the 192.168.101.x range on the PPP adapter.)

Windows 9x machines on the 192.168.101.x side can ping the SBS server (at the usual 10.0.0.2) but cannot authenticate to it, even when using what seem to be appropriate entries in LMHOSTS per Microsoft.  I *can* authenticate to a share from an NT box using \10.0.0.2\, however.  I haven't tried an explicit naming in the HOSTS file on the 9x boxes, just LMHOSTS.

Any thoughts appreciated.  Many thanks for your time.

Michael

Michael Smith

Re: FreeS/WAN OK, but now ...
« Reply #1 on: May 14, 2002, 04:07:51 AM »
Replying to myself again ... but I should note that yes, I have checked the box in the Network control panel to login to the domain ... "no domain controller found" etc.

Filippo Carletti

Re: FreeS/WAN OK, but now ...
« Reply #2 on: May 14, 2002, 02:36:11 PM »
You have configure SCO with default gateway pointing to your SME.

Michael Smith

Re: FreeS/WAN OK, but now ...
« Reply #3 on: May 14, 2002, 05:13:46 PM »
aha!  so no entry in hosts file necessary, the SCO box just doesn't know where to send the return packets?

Filippo Carletti

Re: FreeS/WAN OK, but now ...
« Reply #4 on: May 14, 2002, 05:32:47 PM »
Yes, tell SCO how to route, permanently (use scoadmin) and now with
route add default gw