Topic: ADSL Speedtouch modem and e-smith

[stancol]

The Speed Touch modems I've worked with come with a built in Firewall. That explains why you can see your web from inside but not from outside. You need to punch holes in the modem to allow services in, such as port 80 traffic. The alternative to punching holes in the modem is to completely remove the firewall and let E-Smith be your firewall. There is an option to set the output of the modem in the DMZ zone. If you do that all the ports you have open on E-Smith will be open to the world. Since E-Smith comes with a really good firewall you shouldn't even need the Speed Touch firewall.

[EcklineTD]

Okay i see what you did. Had the same problem. Have a Speedtouch 510 with SME server 6.0. What i also did is that i put the SME server on the DMZ of the Speedtouch now it works like a charm. Only have to fix email,vpn and Mysql.
Just a noob on linux so it could take a while. Have one question do. If i want to connect 2 SME servers on a Speedtouch 510 with vpn is that possible? Servers are on different locations and is a test for my company to supply a vpn administration solutions for our clients. Enne als het in nederlands kan mag dat ook.

[Gizmor]

Okay i see what you did. Had the same problem. Have a Speedtouch 510 with SME server 6.0. What i also did is that i put the SME server on the DMZ of the Speedtouch now it works like a charm. Only have to fix email,vpn and Mysql.
Just a noob on linux so it could take a while. Have one question do. If i want to connect 2 SME servers on a Speedtouch 510 with vpn is that possible? Servers are on different locations and is a test for my company to supply a vpn administration solutions for our clients. Enne als het in nederlands kan mag dat ook.

Ik heb mn server ook in DMZ staan maar toch werkt het niet en 2 vpn's zoals jij dat wilt gaat denk ik niet  

[Anonymous]

Hi Gizmor,

Je moet wel apart ff de normale poorten forwarden naar je server. Alle andere niet normale poorten worden al afgeleverd op je server.

Zal proberen om een screenshot te maken van de conf in de router.

[EcklineTD]

Okay stupid me i need to login first before i give a reply. Gizmor that reply was from me so sorry if  it says guest.

[EcklineTD]

Can it even get better yes it can. Okay what i did is the following. Have a 510 alcatel ethernet router. I have 2 sme servers on my intranet. 1 as server/gateway and one as server. What i did is that i have disabled all firewall capabilaties on the 510 and have all ports forwarded to my sme gateway. That worked okay and i could do everything. Now i have restored the capabilaties of the 510 and i put up a server only sme. Forwarded mail, vpn and http to it and that works also great. What you have to keep in mind is that SME has two functions as Server only:
1. Fileserver
2. Authentication server.

Other server is still runnning in network and that is my test server.

Confused?? You bet but is works.

[Gizmor]

Owke dat uitzetten van de firewall had ik ook al gedaan maar klotp eht dat die speedtouch mn server ook niet ziet ?
want als ik de Speedtouch inga zie ik mijn pc staan met het IP adres erachter wat de speedtouch heeft gegeven maar de server zie ik nooit staan is dat nu goed of slecht ?

In server-only mode sme has more then 2 functions
- webserver
- fileserver
- mailserver
- auth. server

so sme wont fill the job as a gateway but only as a stand alone server

[EcklineTD]

Nee dat klopt niet. Als het goed is moet je pc en je server zichtbaar zijn in je Speedtouch. Server heeft een vast ip nummer dat in dezelfde range valt die de speedtouch uitdeelt. Let er wel op Default server in je speedtouch is het ipnummer van je server. Je server moet jezelf in de dns van je speedtouch toevoegen en daarna kan je poorten forwarden naar je server.

I know SME has more functions as Server only. Only in my setup it has only two.

[Gizmor]

Nee dat klopt niet. Als het goed is moet je pc en je server zichtbaar zijn in je Speedtouch. Server heeft een vast ip nummer dat in dezelfde range valt die de speedtouch uitdeelt. Let er wel op Default server in je speedtouch is het ipnummer van je server. Je server moet jezelf in de dns van je speedtouch toevoegen en daarna kan je poorten forwarden naar je server.

I know SME has more functions as Server only. Only in my setup it has only two.

Ik had hem al toegevoegd voor dat je had gereageerd zitten we toch een beetje op dezelfde hoogte maar helaas werkt het nog steeds niet