*nix split eth interfaces
Results 1 to 5 of 5

Thread: *nix split eth interfaces

  1. #1
    AO übergeek phishphreek's Avatar
    Join Date
    Jan 2002
    Posts
    4,324

    *nix split eth interfaces

    Hi all!

    I have a RH9 server that I've setup for several different purposes. I use it as a workstation and also as a server. Mostly it is my media server. I have ripped almost every single CD that I have to the hard drive and offer it to everyone on my home lan. (watch out RIAA!!... just cause I didn't want to keep loosing my CDs cause my brother is an idiot...) I also have some video and etc. I house my intranet page which I use only for myself for access to my ebooks from work and school. I have ssh setup so I can use VNC and have remote access.

    With all that said... I have two interfaces.

    For some reason, I can't get traffic from one service to go over one specific interface.

    Example:

    I'm transftering data over smb (samba) and I'm also downloading up2date packages.

    When I do an "iptraf" and look at which interfaces are being used... only eth0 is in use.

    How can I make certain services go over specific interfaces.

    Ideal setup... at the moment.

    eth0 for

    web
    remote desktop (ssh/vnc)
    misc web programs

    eth1 for

    samba (file/print)

    The reason I want to change it up is so I can get the maximum amount of data over each interface. Since I'm downloading updates, my file tranfers are slower (though not much).

    Is this possible?

    I haven't found too much info in regards to this. Mostly using two interfaces for a firewall/internet connection sharing/etc.

    Any advise or opinions are (as usual) greatly appreciated!
    Thanks in advance!

  2. #2
    Senior Member IKnowNot's Avatar
    Join Date
    Jan 2003
    Posts
    792
    Something similar to the first section below should be in your smb.conf file

    # This option is important for security. It allows you to restrict
    # connections to machines which are on your local network. The
    # following example restricts access to two C class networks and
    # the "loopback" interface. For more examples of the syntax see
    # the smb.conf man page
    hosts allow = 192.168.1. 127.
    For some reason some smb.conf files neglect the following:
    -------------------------------------------------------------------------------------------------
    # Configure Samba to use multiple interfaces
    # If you have multiple network interfaces then you must list them
    # here. See the man page for details.
    interfaces = {IP/netmask of eth1 }

    bind interfaces only = True
    -------------------------------------------------------------------------------------------------
    ( that would be the man pages of smb.conf )

    Good firewall rules should take care of the rest.

    Was this what you were looking for ??
    " And maddest of all, to see life as it is and not as it should be" --Miguel Cervantes

  3. #3
    AO übergeek phishphreek's Avatar
    Join Date
    Jan 2002
    Posts
    4,324
    Ah, Ok. I remember seeing the interfaces in the smb.conf file.... now.
    I was a bit buzzed last night when I wrote that... (my sisters 21st bday and she got engaged in the same day!)

    Is there any way to make the other services use a specific interface?

    I know that I can just config smb to use a separate interface and that'll take care of what I want to do... but for future reference.

    Anywho.. thanks for the smb.conf info!

  4. #4
    Master-Jedi-Pimps0r & Moderator thehorse13's Avatar
    Join Date
    Dec 2002
    Location
    Washington D.C. area
    Posts
    2,883
    Heya Phishy.

    With SSH, I have it listening on a specific IP on a number of dual homed boxes.

    Browse to /etc/ssh and edit sshd_config.

    You'll see a section like so:

    #Port 22
    #Protocol 2,1
    #ListenAddress 0.0.0.0
    #ListenAddress ::

    Just specify the addy you want here. If ya need step by step NFO, PM me and I'll send you a copy of my conf file.

    --TH13
    Our scars have the power to remind us that our past was real. -- Hannibal Lecter.
    Talent is God given. Be humble. Fame is man-given. Be grateful. Conceit is self-given. Be careful. -- John Wooden

  5. #5
    AO übergeek phishphreek's Avatar
    Join Date
    Jan 2002
    Posts
    4,324
    Thanks horsey!

    I haven't had a chance to pull apart the conf files for every service yet. Guess this would be a good time to do that. I normally browse through them pretty quickly and mod a few settings... but thats about it.

    Thanks for the advise on the ssh service.

    I appreciate it!

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

 Security News

     Patches

       Security Trends

         How-To

           Buying Guides