Ok, our network is basically this. Outside world comes in to DSL Router,
which goes to NT4 Proxy server, which hosts mainly windows machines. We
wanted to put a webserver up to host business forums to be accessible
everywhere (as we are located worldwide). At first, the obvious best
solution was to fix up a linux box, put it on an external IP and secure it.
We currently have 2 IPs, for the DSL and te Proxy. The next sized block
would have given us 8 IPs (6 usable), which was fine. I won't go into the
details, but it's basically impossible for us to change to a new set of IPs
due to problems with our old Proxy server.
So, we decided to put the linux box inside our network and assign it a
static internal IP, and route all http traffic (with a certain header) to
the machine. This is done. Web traffic flows easily through back and forth.
However, there are major issues with that freaking proxy in the way. I can
see http traffic on the linux box as long as I configure the proxy for it.
The other windows machines can see the RH9 server on the Network
Neighborhood, but cannot access it. The RH9 server can only access IPs, not
computer names. The RH9 server cannot ping or traceroute to anywhere outside
our network. I've messed around with the GUIs in RH to set up a proxy and
stuff, but frankly I hate GUIs, yet don't know how to do all that from
within bash.
My question: Is there any way I can network this RH9 box to our proxy server
like this so that it can do DNS lookups and such? Is there a way to
configure a proxy server for ALL network services on eth0? I realize that
this is all a problem because of that stupid Proxy server, but we have to
keep it like this for legacy purposes, until we can "upgrade" to 2k server
(I'm pushing linux, trust me... windows networking should be an oxymoron).
The main reason this needs to be done is that sendmail cannot function
correctly (as it cannot send emails out), and I can't access any type of
external SMTP server for a backup plan. This functionality is needed for
notifications via our forums, and for mass emailing all offices. Eventually,
we'd like it to host our entire website, but not until the setup gets less
funky.
Anyone have experience doing this backwards networking? I'm tempted to set
the RH9 box in front of the Proxy, and just shoot all traffic through except
for HTTP. Only problem is that I think this might screw up VNC connections
from remote sites. So anyone know how I might can set it up to be a nice
little workstation behind that Proxy? Bonus points if you can help me figure
out how to help the other workstations see the shares from the server,
though this is only a tiny feature I'd like compared to the other issues.
Appreciate your help, and I'm sorry that windows has any say into this
situation (trust me, I'm very sorry)...
David Harris
|