<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
..MsoChpDefault
{mso-style-type:export-only;}
@page Section1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-NZ link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Thanks Anna, I’ll just clarify;<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>I am working on UNESCO project where schools in a remote area
are linked by a WAN (both wired and Wi-Fi bridges). Only one school is an “OLPC”
school. Schools generally (not just OLPC) contribute to an online wiki environmental
encyclopaedia . Content in any kind of format is uploaded to a local server
where it is moderated and digitally processed if need be, by a trained “QA
team” prior to upload to the online wiki. This is needed for reasons of integrity
of content, traditional views on what content can be shared, etc. Lesson plans
are developed to support schools in ways linked to the curriculum to access and
create content for the wiki. Excitingly we can have the OLPC uploading Sugar formats
like eToys, etc. Other schools will contribute text, images, audio and video. <o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>So the content will be locally uploaded to either the XS Moodle
or the offline wiki as appropriate – reducing barriers to participation.
I have the server running so that once you get access on a non-XO computer, you
bring up the Moodle using <a href="http://schoolserver/moodle">http://schoolserver/moodle</a>
andthe wiki from <a href="http://schoolserver/wiki">http://schoolserver/wiki</a>.
It all works fine on the eth1 network (the “internal network”). I
can also connect any PC and enter 172.18.0.1 to bring up the server Moodle page.
<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>It is NOT intended that XOs on the external network can register
on the single XS. The only school with XOs has local access to the XS on the XS’s
eth1 network. The other schools only need to be able to access the XS
Moodle and wiki.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>So my problem is that even with opening and forwarding port 80,
or using DMZ Host mode, the server cannot see through the router and reply to
requests. On the other hand, a PC can ping right through the router so <o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>I just need in simple terms, to know what I need to do with the
apache config or hosts or other files so that the XS can be seen on port 80
from the external network. I don’t care about jabber etc. Only access to web
services.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>I am packing to go now, but will look again at your advice –
many thanks. But if anyone can quite specifically give me advice on the router
LAN settings to use, and any required changes to the XS networking and routing
settings so that it is able to reply back to port 80 requests through the
router, I would be most appreciative.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><b><span style='font-size:9.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>David Leeming<o:p></o:p></span></b></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Solomon Islands Rural Link <br>
<br>
<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'>
<p class=MsoNormal><b><span lang=EN-US style='font-size:10.0pt;font-family:
"Tahoma","sans-serif"'>From:</span></b><span lang=EN-US style='font-size:10.0pt;
font-family:"Tahoma","sans-serif"'> Anna [mailto:aschoolf@gmail.com] <br>
<b>Sent:</b> Sunday, 31 October 2010 9:33 a.m.<br>
<b>To:</b> David Leeming<br>
<b>Cc:</b> XS Devel<br>
<b>Subject:</b> Re: [Server-devel] Bridging XS to another network<o:p></o:p></span></p>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>David:<br>
<br>
I'm a little confused as to your setup. If you just have the one ethernet
device on the XS, it can either get an IP address from your router (as eth0) or
hand out DHCP addresses (as eth1). It can't be in both roles.<br>
<br>
I've played around with external access for the XS and it does involve some
firewall stuff. I think I used lokkit to configure access to port 80 and
the jabber port to my regular LAN. Then I opened up those ports on my
router firewall for access from the rest of the internet.<br>
<br>
By way of example, here's a setup I've done in the past:<br>
<br>
Regular LAN:<br>
XS (eth0) 192.168.1.20<br>
My Desktop 192.168.1.6<br>
"XO A" 192.168.1.7<br>
<br>
XS LAN:<br>
XS (eth1) 172.18.0.1<br>
"XO B" 172.18.96.2<br>
<br>
On the XS LAN, "XO B" can go to <a href="http://schoolserver">http://schoolserver</a>
or 172.18.0.1 and see the default Moodle homepage. It can also register
to the XS and all that good stuff, cause it's getting its IP address from the
XS's DHCP server.<br>
<br>
On the Regular LAN, my desktop and "XO A" can't see the Moodle
homepage at 192.168.1.20 until I open port 80 in the firewall on the XS using
lokkit (or edit iptables or whatever). Since "XO A" is not
getting its IP address from the XS, it won't be able to register. If
"XO A" wants to use the XS's Jabber server, that port needs to be
opened in the XS firewall. "XO A" can now manually set the
Jabber server to 192.168.1.20 and collaborate. If you want to use Moodle,
not being able to register to the XS is a huge issue. Apache access works
fine, though.<br>
<br>
I use ifcfg-eth0-local to set the static IP for eth0 on the XS. Here's my
example:<br>
<br>
IPADDR=192.168.1.20<br>
NETMASK=255.255.255.0<br>
NETWORK=192.168.1.0<br>
BROADCAST=192.168.1.255<br>
GATEWAY=192.168.1.254<br>
<br>
To see what I need to put in there, I'll do this on another Linux box connected
to my Regular LAN:<br>
<br>
anna@anna-desktop:~$ ifconfig eth0<br>
eth0 Link encap:Ethernet HWaddr
00:0f:1f:80:0d:ea <br>
inet
addr:192.168.1.4 Bcast:192.168.1.255 Mask:255.255.255.0<br>
inet6 addr:
fe80::20f:1fff:fe80:dea/64 Scope:Link<br>
UP BROADCAST RUNNING
MULTICAST MTU:1500 Metric:1<br>
RX packets:1328780
errors:0 dropped:0 overruns:0 frame:0<br>
TX packets:1018129
errors:0 dropped:0 overruns:0 carrier:0<br>
collisions:0
txqueuelen:100 <br>
RX bytes:1602636271 (1.6
GB) TX bytes:98891469 (98.8 MB)<br>
<br>
anna@anna-desktop:~$ netstat -nr<br>
Kernel IP routing table<br>
Destination
Gateway
Genmask Flags MSS
Window irtt Iface<br>
192.168.1.0
0.0.0.0
255.255.255.0 U 0
0 0 eth0<br>
169.254..0.0
0.0.0.0
255.255.0.0
U 0
0 0 eth0<br>
0.0.0.0
192.168.1.254
0.0.0.0
UG 0
0 0 eth0<br>
<br>
If you're trying to have all the services available with just the single ethernet
port, good luck. I'm no networking expert, but I don't see how it's
possible.<br>
<br>
Anna Schoolfield<br>
Birmingham<o:p></o:p></p>
</div>
</body>
</html>