Koozali.org: home of the SME Server
Legacy Forums => General Discussion (Legacy) => Topic started by: Hoso on February 13, 2006, 01:06:55 AM
-
Hello everyone,
A client moved and got a T1 going, and since they needed to VPN into their new location, I changed their private class C address from 192.168.1.0 to 192.168.250.0, so as to avoid conflicts when on the road. Everything else worked great, and I finally figured how to use the custom templates to force the change on my SME Server. I'm able to access webmail, but if I try to access the server-manager and/or SSH into the box, it gives me a connection refused and/or "403 Forbidden" message. I went and made a custom template for the hosts.allow file, and when I reboot the changes take effect. But I'm still getting the 403 error.
Any ideas on what I need to change to make it happen? Also, it doesn't seem like the DNS entries are there, as I cannot ping by domain name, but I can ping by address. What are the settings of the ifcfg-eth0 file? Any help would be greatly appreciated.
Oops! Forgot to mention. Machine is setup in server mode only.
Jose
-
Any ideas on what I need to change to make it happen?
Remove the custom templates and add the VPN subnets to the Local Networks panel and all services will be appropriately configured. If they are not, raise a bug.
-
Any ideas on what I need to change to make it happen?
Remove the custom templates and add the VPN subnets to the Local Networks panel and all services will be appropriately configured. If they are not, raise a bug.
Hi gordonr,
Thank you for your prompt reply. Another thing that I forgot to mention is that I'm not using the SME Server's VPN capabilities. Instead, I have an IPCop firewall at the perimeter, which is doing the VPN encrypting/decrypting. But the problem is not even with the VPN connectivity. Instead, on the LAN side, I cannot access the server manager panel, so I can't add subnets through the Local Networks panel. So, I figured I would add the subnet through the hosts.allow configuration file, and while they seem to be added correctly, I still cannot access the control panel. I can access webmail, which I would think would be affected by the hosts.allow file (or lack thereof)
So, my current setting is as follows: IPCop firewall at the perimeter, SME Server behind firewall in serveronly mode. BTW, I remember being able to access the "setup" menu to test connectivity and make changes when it was still Mitel's SME Server (5.5 I believe) but haven't in a while. Can anyone (Mr. gordonr?) point me in the right direction?
Once again, thank you for your prompt reply.
Jose
-
After writing the post above, I tried to login as admin to the console. The keyboard attached to the SME Server was bad, as some characters that are being used in the password would not echo on screen when typed in at the login: prompt. Changed password, logged in as admin, and voila! Problem solved. :oops:
So, login as admin with proper password gets you to the menu where you can change the IP address without having to do a custom template. Made changes, and everything is fine again. Thanks to all that viewed this, and special thanks to GordonR. :-D
Jose
-
So, login as admin with proper password gets you to the menu where you can change the IP address without having to do a custom template. Made changes, and everything is fine again. Thanks to all that viewed this, and special thanks to GordonR. :-D
Happy to help. Custom templates are overused and are not the answer to most problems. Have a read of the developer's guide, which is linked from the Development page.