David:<br><br>I'm a little confused as to your setup. If you just have the one ethernet device on the XS, it can either get an IP address from your router (as eth0) or hand out DHCP addresses (as eth1). It can't be in both roles.<br>
<br>I've played around with external access for the XS and it does involve some firewall stuff. I think I used lokkit to configure access to port 80 and the jabber port to my regular LAN. Then I opened up those ports on my router firewall for access from the rest of the internet.<br>
<br>By way of example, here's a setup I've done in the past:<br><br>Regular LAN:<br>XS (eth0) 192.168.1.20<br>My Desktop 192.168.1.6<br>"XO A" 192.168.1.7<br><br>XS LAN:<br>XS (eth1) 172.18.0.1<br>"XO B" 172.18.96.2<br>
<br>On the XS LAN, "XO B" can go to <a href="http://schoolserver">http://schoolserver</a> or 172.18.0.1 and see the default Moodle homepage. It can also register to the XS and all that good stuff, cause it's getting its IP address from the XS's DHCP server.<br>
<br>On the Regular LAN, my desktop and "XO A" can't see the Moodle homepage at 192.168.1.20 until I open port 80 in the firewall on the XS using lokkit (or edit iptables or whatever). Since "XO A" is not getting its IP address from the XS, it won't be able to register. If "XO A" wants to use the XS's Jabber server, that port needs to be opened in the XS firewall. "XO A" can now manually set the Jabber server to 192.168.1.20 and collaborate. If you want to use Moodle, not being able to register to the XS is a huge issue. Apache access works fine, though.<br>
<br>I use ifcfg-eth0-local to set the static IP for eth0 on the XS. Here's my example:<br><br>IPADDR=192.168.1.20<br>NETMASK=255.255.255.0<br>NETWORK=192.168.1.0<br>BROADCAST=192.168.1.255<br>GATEWAY=192.168.1.254<br>
<br>To see what I need to put in there, I'll do this on another Linux box connected to my Regular LAN:<br><br>anna@anna-desktop:~$ ifconfig eth0<br>eth0 Link encap:Ethernet HWaddr 00:0f:1f:80:0d:ea <br> inet addr:192.168.1.4 Bcast:192.168.1.255 Mask:255.255.255.0<br>
inet6 addr: fe80::20f:1fff:fe80:dea/64 Scope:Link<br> UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1<br> RX packets:1328780 errors:0 dropped:0 overruns:0 frame:0<br> TX packets:1018129 errors:0 dropped:0 overruns:0 carrier:0<br>
collisions:0 txqueuelen:100 <br> RX bytes:1602636271 (1.6 GB) TX bytes:98891469 (98.8 MB)<br><br>anna@anna-desktop:~$ netstat -nr<br>Kernel IP routing table<br>Destination Gateway Genmask Flags MSS Window irtt Iface<br>
192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0<br>169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0<br>0.0.0.0 192.168.1.254 0.0.0.0 UG 0 0 0 eth0<br>
<br>If you're trying to have all the services available with just the single ethernet port, good luck. I'm no networking expert, but I don't see how it's possible.<br><br>Anna Schoolfield<br>Birmingham<br>