Topic: DynDNS: SME 7.0 with 2 domains behind a Firewall/Router

[elorenz]

Hi all,
I have an SME 7.0 (server only) behind a Firewall/Router. I have two domains on this server and use zoneedit as my DynDNS service because I use private domain names.
The update-dns action script can't handle this situation as it won't know what the external IP address is.
I have rewriten the update-dns action script as follows:

Code: [Select]


#!/usr/bin/perl -w

#----------------------------------------------------------------------
# copyright (C) 1999-2005 Mitel Networks Corporation
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307  USA
#
# Technical support for this program is available from Mitel Networks
# Please visit our web site www.mitel.com/sme/ for details.
#----------------------------------------------------------------------

package esmith;

use strict;
use Errno;
use esmith::ConfigDB;

my $c = esmith::ConfigDB->open_ro or die "Couldn't open config db";

#------------------------------------------------------------
# If using Dynamic DNS service, notify them of new IP address.
#------------------------------------------------------------

my $event = $ARGV [0];

my $DynDNS = $c->get('DynDNS');
exit 0 unless $DynDNS;

my $status = $DynDNS->prop('status') || "disabled";
my $service  = $DynDNS->prop('Service') || 'off';
my $account  = $DynDNS->prop('Account');
my $password  = $DynDNS->prop('Password');

my $domain  = $c->get('DomainName')->value;

exit 0 unless ($status eq "enabled" && $service ne "off");

# my $ipaddress = $c->get('ExternalIP') or die "Can't get External IP address";
# The previuos line was replaced for the following
# to accomodate for the use of DynDNS on a server-only setup with external
# gateway to the Internet.
# Author: Ernesto Lorenz
# Date: 17/09/2006

my @result = split /:/ , `lynx --dump http://checkip.dyndns.org`;
my $ipaddress = $result[1];

exec ("/sbin/e-smith/dynamic-dns/$service", $ipaddress, $account, $password, $domain);


Is this code interesting to the comunity? If so, where do I post this for it's inclusion in the next SME release?
Regards,

Ernesto Lorenz

[raem]

elorenz

> where do I post this for it's inclusion in the next SME release?


I would say the bugtracker is the place.
Either create a bug for sme7 or sme7 Future ie NFR (New Feature Request), and attach your code. The developers will jump in if it is of interest to them, which it likely will be. After all, they are "code junkies".

You may also be told that you are approaching this the wrong way & adding unnecessary complexity. It could be said that it's better to just configure your server using say an existing supported dyndns service/domain and point your real domains to the dyndns domain (CName entries).
That way only one dynamic DNS service needs to be updated.

[imcintyre]

Ernesto;

I think I private mailed you about this script but they have turned off the private mail and I cannot retrieve your message. I read it once but could not do anything with it at the time.

Anyways. I am trying to run SME 7 as server and firewall and also trying to use zone edit. My knowledge of scripts approaches zero but I am trying to solve my problem and learn.

How can I use your script with my problem.

Thx in advance for your help.

Ian

[elorenz]

Ian,

In your case it´s much simpler. You need to go to the configuration console via

Code: [Select]

/sbin/e-smith/console
Make shure you select the custom DynDNS option.
Next you need to create a script file named custom in /sbin/e-smith/dynamic-dns with the following content:

Code: [Select]


#!/bin/sh
# Description: Put your description here

#------------------------------------------------------------
# ZoneEdit dynamic DNS update handler.
#------------------------------------------------------------


#IPADDR=`lynx --dump http://checkip.dyndns.org | awk '{print $4}'`
#This was moved to the action: update-dns on 17/09/2006 by E.Lorenz

IPADDR=$1
USERID=$2
PASSWD=$3
DOMAIN=$4
logfile=/tmp/dyndns.log

# This script will set your zone root and a wildcard A-record.
# Thus, if your domain is mydomain.org, www.mydomain.org
# will resolve as well.


wget -O $logfile \
--http-user="$USERID" \
--http-passwd="$PASSWD" \
http://dynamic.zoneedit.com/auth/dynamic.html?host="$DOMAIN",*."$DOMAIN"&dnsto="$IPADDR"


RESULT=`cat $logfile`

case "$RESULT" in
        *200*)
            logger -t zoneedit.com "Update succeeded. Domain=$DOMAIN" ;;
        *201*)
            logger -t zoneedit.com "No records need updating. Domain=$DOMAIN" ;;
        *701*)
            logger -t zoneedit.com "DOMAIN is not set up in this account. Domain=$DOMAIN" ;;
        *702*)
            logger -t zoneedit.com "Update failed. Domain=$DOMAIN" ;;
        *703*)
            logger -t zoneedit.com "One of either parameters 'DOMAINs' or 'host' are required." ;;
        *704*)
            logger -t zoneedit.com "DOMAIN must be a valid 'dotted' internet name. Domain=$DOMAIN" ;;
        *705*)
            logger -t zoneedit.com "DOMAIN cannot be empty. Domain=$DOMAIN" ;;
        *706*)
            logger -t zoneedit.com "Too frequent updates for the same host, adjust client settings. Domain=$DOMAIN" ;;
        *707*)
            logger -t zoneedit.com "Duplicate updates for the same host/ip, adjust client settings. Domain=$DOMAIN" ;;
        *)
            logger -t zoneedit.com "Unknown response $RESULT. Status was $?";;
esac



exit 0

Thi should be all that´s needed in your case.
I´m still trying to work out a solution for multiple hosts - domain-names.
I hope this helps.
Regards,
Ernesto

[imcintyre]

elorenzo;

I logged in as root and configured the custom option on the console. I think I had done that before.

Again, still logged in as root, I typed the /sbin/e-smith/dynamic-dns and I got the reply;
-bash: /sbin/e-smith/dynamic-dns: is a directory

This does not seem right. I suppose I have to create the script file and import it using Filezilla into the directory. Forgive my total ignorance but how do I create a script file, or could you put me in touch with a resource?

Thx in advance

[imcintyre]

elorenz;
forgive my spelling
Ian

[elorenz]

Hi Ian,
Plese excuse me, I didn't realize you're a Linux novice.
What I would like to suggest is you use putty on a Windows PC to log in to your SME box; this way you can take advantage of the copy-paste functionality in Windows.
If you need instructions on how to get putty and how to use it on your Windows PC let me know.
Once you're there I can walk you through the steps necesary to get DynDNS working for zoneedit.
Regards,
Ernesto

[imcintyre]

I have putty and can log on as either root or admin and I can use filezilla to put files into sme. I have already loaded the cron function to sme using filezilla. I will have to confess my total linux ingnorance. If you could help it would be appreciated.

Also if you can suggest a good linux book for reference. The concepts are ok it is the syntax which I have not seen a good reference.

[elorenz]

No problem Ian,

What you have to do is create a file named coustom on your PC and place the shell script code in my previous post into this file.
You then use Filezilla to move this file from your PC to the SME box under the following directory: /sbin/e-smith/dynamic-dns/
If you configured the DynDNS fucntion correctly with the console all should work fine.
From the command line you can run /etc/e-smith/events/actions/update-dns
The corresponding transaction log file will be placed under /tmp and is namesd dyndns.log

Let me know if this worked as explained.
Regards,
Ernesto

[imcintyre]

Ernesto;

When I create the file, should I use a text editor? What should the file type be?

I am at work now, I will try on the weekend and let you know.

Thx

Ian

[elorenz]

Ian,
You can use any text editor of your choice (e.g. Wordpad).
You must not give the file a type, it should be named only "custom" or wahtever the service name is:
Log in as root with putty and execut this comand:
config show DynDNS
You should get something like this back:

DynDNS=service
    Account=YYYYY
    Password=xxxxxx
    Service=zoneedit
    status=enabled

The file name should be the same as the Service=??????

I wish you luck.

Ernesto

[/code]

[imcintyre]

Ernesto;

I am having a problem when it comes to using Filezilla to copy in the file I created.

When I log in as admin using the correct password and port 21, I cannot find the folder /sbin/e-smith.dynamic-dns/

If I try and log in as the root and use the same password as the admin, it won't log me in using port 21.  If I use port 22 it appears as though I get in but I cannot see the directory tree.

What gives?

Thx in advance for your help.

Ian

[elorenz]

Ian,
To log in as root on port 22 (SSH) -- you shuoldn't use port 21 -- you first need to enable this via the server-manager web interface, under remote access, and then Secure Shell Settings: "allow public access" or "allow access only from local network" whichever your case is.
after this is taken care of you can use Filezilla to log in as root and navigate the file structure.

Good luck,

Ernesto

[imcintyre]

Ernesto;

This is what I had all along so it should work. Do you see anything wrong with this?

Secure Shell Settings
You can control Secure Shell access to your server. The public setting should only be enabled by experienced administrators for remote problem diagnosis and resolution. We recommend leaving this parameter set to "No Access" unless you have a specific reason to do otherwise.
Secure shell access    Allow over local network
Allow administrative command line access over secure shell    yes
Allow secure shell access using standard passwords    yes

FTP Settings
FTP Access Allow access from local networks

FTP Password Access Allow acces from local networks

[elorenz]

Ian,
You won't be needing FTP access, thats old fashioned stuff   .
So turn off FTP access and leave ssh access as it is.
This done, try to connect with putty or filezilla using root login.
Let me know if you succeded in copying the script to the specified directory.
Regards,
Ernesto

[imcintyre]

I tried turning off the FTP access and could not connect using Filezilla with either admin or root profiles. I turned it back on and I could connect using admin and port 21. When I tried using the root profile and port 22 I got this;

Status:   Connecting to 192.168.7.1:22 ...
Status:   Connected with 192.168.7.1:22. Waiting for welcome message...
Response:   SSH-2.0-OpenSSH_3.9p1
Error:   Timeout detected!
Error:   Unable to connect!

So I can connect using putty with either root or admin profiles but not root with Filezilla...

I looked around and found that there is a file transfer for putty, something called PSCP but I couldn't figure out how to make that work.

[imcintyre]

I managed to copy the file into my user profile on the server, into one of my ibays but I guess that this is next to useless. I could copy it into one of the admin folders, but I tried looking around with putty logged on as root but could not find the admin directories.

Help.

Ian

[imcintyre]

yes!!!!

Its alive!

That means I found pscp and got it to work and tranferred the file

[imcintyre]

I logged in as root using putty. I tried running the command /etc/e-smith/events/actions/update-dns.

I got the error:
Can't exec "/sbin/e-smith/cynamic-dns/custom": Permission denied at /etc/e-smith/events/actions/update-dns line 52

?

Ian

[william_syd]

I logged in as root using putty. I tried running the command /etc/e-smith/events/actions/update-dns.

I got the error:
Can't exec "/sbin/e-smith/cynamic-dns/custom": Permission denied at /etc/e-smith/events/actions/update-dns line 52

Code: [Select]

chmod 554 /sbin/e-smith/dynamic-dns/custom
/etc/e-smith/events/actions/update-dns

[imcintyre]

Thx for your input but I am not really sure what to do with this suggestions. I tried running it in putty and it just gave error that it was not a directory.

Am I missing something?

Ian

[william_syd]

Thx for your input but I am not really sure what to do with this suggestions. I tried running it in putty and it just gave error that it was not a directory.

Am I missing something?

Ian

You do have a custom file in /sbin/e-smith/dynamic-dns/ ?

Lets start again.

Highlight the script in the prior post that want and select copy.

Login using putty as root.

Do the following lines at the prompt one at a time.

Code: [Select]

rm /sbin/e-smith/dynamic-dns/custom

Code: [Select]

y

Code: [Select]

pico -w /sbin/e-smith/dynamic-dns/custom
Now paste the script in by pressing the right mouse button.
Then

Code: [Select]

Control - x

Code: [Select]

y

Code: [Select]

Enter
Now

Code: [Select]

chmod 554 /sbin/e-smith/dynamic-dns/custom

Code: [Select]

/etc/e-smith/events/actions/update-dns

[imcintyre]

Yes I do have the file "custom".


I will try these instructions tonight and let you know how it goes.

I tried setting this file up to use with the cron function in SME but I was only able to select files stored in the administrator and user folders.

How will this function run?

Thx for your help

[imcintyre]

Please have a look at the following. The file "custom" ran and gave the following results. Could be Greek to me but I don't know any Greek ( no offense intended for Greeks)

Does this file--/sbin/e-smith/dynamic-dns/custom, now have to be put into crontab to run every 15 minutes or so? for this to work properly??

Thx in advance for any help or suggestions

[root@myserver1 ~]
--19:58:27--  http://dynamic.zoneedit.com/auth/dynamic.html?host=mysite.ca,*.                                                                             mysite.ca
           => `/tmp/dyndns.log'
Resolving dynamic.zoneedit.com... [root@mcserver1 ~]# aa.bb.cc.dd
Connecting to dynamic.zoneedit.com|aa.bb.cc.dd|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 210 [text/html]

100%[====================================>] 210           --.--K/s

19:58:35 (8.71 MB/s) - `/tmp/dyndns.log' saved [210/210]

host=mysite.ca,*.mysite.caeedit.com/auth/dynamic.html?
Resolving dynamic.zoneedit.com... [root@myserver1 ~]# aa.bb.cc.dd
Connecting to dynamic.zoneedit.com|aa.bb.cc.dd|:80... connected.
-bash: --19:58:27--: command not found
HTTP request sent, awaiting response... 200 OK
Length: 210 [text/html]
[root@myserver1 ~]#            => `/tmp/dyndns.log'
> Resolving dynamic.zoneedit.com... [root@myserver1 ~]#aa.bb.cc.dd
> Connecting to dynamic.zoneedit.com|aa.bb.cc.dd|:80... connected.
> HTTP request sent, awaiting response... 200 OK
> Length: 210 [text/html]
>
> 100%[====================================>] 210           --.--K/s
>
> 19:58:35 (8.71 MB/s) - `/tmp/dyndns.log' saved [210/210]
>

[william_syd]

What does

Code: [Select]

more /tmp/dyndns.log give you.

Code: [Select]

[root@vmsme7gw ~]# more /tmp/dyndns.log
<SUCCESS CODE="201" TEXT="No records need updating." ZONE="williamscott.name" HOST="williamscott.name"><SUCCESS CODE="201" TEXT="No records need updating." ZONE="williamscott.name" HOST="*.williamscott.name">
[root@vmsme7gw ~]#

Post the result in a code box for better formatting.

[imcintyre]

I tried your command string and got no output, just back to the regular cursor

Hopefully this is better, I ran the last command string you gave me over again.

Code: [Select]

login as: root
root@192.168.1.1's password:

[root@server1 ~]# /etc/e-smith/events/actions/update-dns
--08:21:21--  http://dynamic.zoneedit.com/auth/dynamic.html?host=mysite.ca,*.myssite.ca
           => `/tmp/dyndns.log'
Resolving dynamic.zoneedit.com... 64.85.73.40
Connecting to dynamic.zoneedit.com|64.85.73.40|:80... [root@server1 ~]# connected.
HTTP request sent, awaiting response... 200 OK
Length: 190 [text/html]

100%[====================================>] 190           --.--K/s

08:21:22 (10.07 MB/s) - `/tmp/dyndns.log' saved [190/190]


However, at this point I don't get my regular cursor back e.g. [root@server1 ~] The cursor is just at the left edge of the Putty "window". Is the command not ending properly?

I open up another session, log in as root, close the first session and try your command:

Code: [Select]

login as: root
root@192.168.1.1's password:
Last login: Wed Oct 25 08:19:01 2006 from pc-00253.my site.ca
[root@server1 ~]# more /tmp/dyndns.log
<SUCCESS CODE="201" TEXT="No records need updating." ZONE="mysite.ca" HOST="mysite.ca"><SUCCESS CODE="201" TEXT="No records need updating." ZONE="mysite.ca" HOST="*.mysite.ca">
[root@server1 ~]#

This looks equal to your output.
I have used crontab and put the command
/etc/e-smith/events/actions/update-dns
to run every 15 minutes

Does this make sense?

Thx in advance for your help.

[william_syd]

This looks equal to your output.
I have used crontab and put the command
/etc/e-smith/events/actions/update-dns
to run every 15 minutes

Does this make sense?

Thx in advance for your help.

I can't help you any further as I don't use a dynamic update script on my server only SME. I just setup a account at zoneedit to try the script out.

I thought the IP would change on reboot and thats when SME would update if it did. Plus there might be a regular update to keep the data fresh.

Every 15min sounds a lot. Careful you don't get banned for checking too often.

[imcintyre]

Thx for your help. I will tone down the frequency of updates. Any ideas why
a) when I ran your command first nothing happened
b) when i ran the update it does not come back to the regular prompt?

I was thinking in all of this that it should be possible to write an if,then, else statement comparing a stored ip address to the one that is actual.  Then if they were different, update zone edit. But my actual programming days ended with Fortran and involved the use of cards. Not to mention that I sucked at it also. That way you could run as often as you liked...

[imcintyre]

Ernesto and William

I rebooted, got a new ip address, waited 20 minutes and went to zone edit and the ip address was correct.

Thx very much for helping, I wouldn't have known what to do otherwise.

Ian

[dalesyk]

Hi all,
I have an SME 7.0 (server only) behind a Firewall/Router. I have two domains on this server and use zoneedit as my DynDNS service because I use private domain names.
The update-dns action script can't handle this situation as it won't know what the external IP address is.
I have rewriten the update-dns action script as follows:
...

Ernesto,
  I have a similar situation.  I currently have an SME server with dyndns@zoneedit as a gateway/router, but want to move to another SME server behind a voip router.  I want to move behing the voip router to try and improve voip sound quality but still host a few domains.  I tried running "lynx --dump http://checkip.dyndns.org" from an Ubuntu client behind my SME server, but it only reports my local ip address rather than my external ip.  I wonder if this behaves differently with a client behind hardware router as opposed to client behind SME router?  Also, I'm thinking about trying to scrape the external ip from my voip router status page with the help of grep, awk, etc...  If successful, I should be able to check my external ip every minute without hitting any external site.  Does this sound reasonable?  I'm curious how you setup your router in front of the SME server?  Do you use DMZ for your SME or just forward certain ports?

Thanks,

Dale Sykora

dale AT czexan DoT net