Page 1 of 1

Cannot connect to Guest from the outside

Posted: 23. Aug 2008, 00:33
by Amorget
Here is my setup:

Host: Ubuntu 8.04.1 with 2 network adapters, eth0 and eth1. eth0 is on the local network and eth1 is connected straight to the outside world. bro0 is a bridge to eth0, which has the address assigned using DHCP. br1 is a bridge to eth1 and has the address set statically in /etc/network/interfaces. I have vbox0, vbox1, and vbox2. vbox0 is pointed to br1, vbox1 is pointed to br0, vbox2 is pointed to br0.


Guest: Windows Server 2008, one network adapter pointed to vbox2, address assigned via DHCP (and correctly).

I can ping out, and I can VPN out.

However, I cannot get "In". I cannot ping the guest or connect through the network.

Anyone have any idea? Any config file you want copied/pasted in here?

Thanks,
Douglas

Posted: 23. Aug 2008, 12:30
by Sasquatch
Could you bring a better structure to your Network layout? As it is now, it's not very read friendly. Any firewalls running on the server?

Look for IPtables and IP6tables

Posted: 23. Aug 2008, 18:39
by scunning
I have more experience with fedora but look for iptables and/or ip6tables on the Linux machine. These can contain rules that are powerful yet tricky. They might well be having effect on both eth0 (br0) and eth1 (br1). You mgith try turning OFF all firewalls and then seeing about Ping and VPN. Then invoking firewall rules a piece at a time to see what breaks ?

Posted: 23. Aug 2008, 19:24
by Amorget
Sasquatch wrote:Could you bring a better structure to your Network layout? As it is now, it's not very read friendly. Any firewalls running on the server?
No firewalls running on the server. I wanted things working, then I'll mess them up with stuff like that.

Network layout, lets see if this is easier to understand (I apologize for not being able to easily and effectively communicate my networking setup, honestly I am not 100% what each part is called, beyond NIC, Bridge, and something created in VirtualBox)

WWW----> eth1---> br1 (ip assigned statically) ----->vbox1 (static public ip address)

LAN---->eth0---->br0 (ip assigned through DHCP)-----vbox0----> myVirtualMachine network card (IP assigned via DHCP from Small Business Server 2003)

(I followed this guide: https://help.ubuntu.com/community/Virtu ... 04%20Hardy)

I don't know of any ip routing tables in use.

Posted: 24. Aug 2008, 01:48
by Sasquatch
And on what level do you want to get 'in' your VM (meaning where from) and how do you connect to it (IP address or DNS name)?

Accessing your OUTER Interface from the Internet

Posted: 24. Aug 2008, 02:33
by scunning
Thanks for the diagram
Now regarding the OUTER interface eth1 ( br1)
can you get on the OUTSIDE and ping that address ?

You said No Firewalls does that mean no IPtables and no IP6tables and no SEL or anything else that smells like a packet filter ?

Posted: 25. Aug 2008, 03:30
by Amorget
I need to get into it from the LAN. I prefer to use a DNS name, but sometimes it seems that only the IP addresses work in Ubuntu.
scunning wrote:Thanks for the diagram
Now regarding the OUTER interface eth1 ( br1)
can you get on the OUTSIDE and ping that address ?

You said No Firewalls does that mean no IPtables and no IP6tables and no SEL or anything else that smells like a packet filter ?
As far as I know, nope, no IPtables, or anything like that, unless the Ubuntu desktop comes with some of that stuff pre-installed and setup.

Posted: 25. Aug 2008, 11:23
by Sasquatch
Amorget wrote:I need to get into it from the LAN. I prefer to use a DNS name, but sometimes it seems that only the IP addresses work in Ubuntu.
Windows Host names are not picked up by Linux. If I were to connect to my computer from my Ubuntu laptop, I can only do that with it's IP address, not the computer name. This is because Windows XP and I think Vista too but not sure still use the NET_BIOS protocol to broadcast computer names. This is not used by Linux. Only DNS entries are used, so unless you run a Domain, accessing Windows from Linux by Host Name is not possible (or you put it in your hosts file).

Posted: 26. Aug 2008, 01:11
by Amorget
Okay, however I cannot even ping by IP the guest.

Posted: 26. Aug 2008, 13:53
by Sasquatch
What are the addresses on all the ends, Host and Guest. Are there any that are the same? If so, that's a problem.

Posted: 26. Aug 2008, 22:52
by Amorget
Host - 192.168.0.27
Guest - 192.168.0.28

From the Guest I can ping the host (by IP Address) and all the other computers on the network

I cannot ping the Guest from the Host.