Topic: TCP Mapping Service

[Scott Kendall]

I am trying to use my E-smith Server as a Gateway for my Dns2go account on my Win2K Server.  

Here are the instructions from Dns2go:

>Creating a TCP mapping
>
>To create a DNS2Go mapping service you will have to refer to your Proxy server >or Firewall help documentation for specific setup instructions. Below are the >requirements for the TCP Mapping.
>
>Create a TCP Mapping Service
>
>Accept connection on port number 1227
>
>Enable the TCP mapping to go discovery.dns2go.com
>
>On port: 1227

http://www.dns2go.com/Help/Support_System/D2G_General/Articles/prox_fwall.cfm

[Scott Smith]

You may find it easier to run dns2go on the e-smith server, rather than trying to open ports in the firewall. See this howto:

http://forums.contribs.org/index.php?topic=2285.msg7664#msg7664

[Scott Kendall]

Here is the situation.
I have an @home internet account.  My @home account name is a series of
numbers, which Win2K Server does not allow as a machine name.  To get around
this I installed a Linux E-Smith server which does allow an all-numeric
name.  I still want to run services off my Win2K Server, but cannot see it
through my Linux box (router) without setting  up the Linux box (router) as
a Gateway.
It is not a matter of creating a DNS for my Linux machine, but setting up a
dns name for my server that is behind it.

I hope this explains my problem better.  Thank you for your quick response.
I appreciate any help you can give me.

Scott

[Scott Smith]

Scott

I understood the gist of what you wanted, without the specifics, of course. What I was trying to point out was that it would be easier to run DNS2Go on e-smith, rather than trying to manipulate the firewall to allow access to the W2K server. However, since you want to expose the services on your W2K server (I'm assuming you mean things like IIS and Exchange) to the Internet, you'll need to dig into ipchains.

Start with 'man ipchains' on the e-smith server. Then take a look at the files in /etc/e-smith/templates/etc/rc.d/init.d/masq to see how the e-smith firewall is implemented. You'll need to work in your ipchains rules into the masq init script. You'll place your files in the /etc/e-smith/templates-custom/etc/rc.d/init.d/mask directory, though. Remember that any file in */templates-custom/* with the same name as a file in */templates/* will be processed instead of the normal template, which allows you to replace template fragments w/o changing the original, and that any new files will be processed in sorted order.

Getting all this to work is an advanced topic, so I recommend you start a new thread in the Experienced User forum.

BTW, I'd still consider running DNS2Go on the e-smith system. I suspect you'll have fewer issues than you will trying to run it on the W2K server behind e-smith when e-smith is the gateway.

And, as I'm writing this, it occurs to me you're probably wanting to do port forwarding, not just opening ports via ipchains. For that you definitely need to be in the other forum. Do a search first, though, as I believe port forwarding has been discussed several times.

Scott