[Sunhelp] Re: [Re: [Sunhelp] Ithink is a problem DNS (But I dont know)???]

[Paul McCrone]

Jarrett,

Thanks for your info - I wasn't aware of this.  However, here's some follow-up
info:

The system in question - "yorktown" - can only telnet within our building. 
Yorktown is the NIS server (I don't know if this has any impact on anything
other than the obvious NIS services).  The workstation just next to me -called
"guam" - can telnet/ftp/web ANYWHERE outside the firewall without going
through the process you described. We just type "telnet" and away we go.  They
are both Sun Ultra II's with Solaris 2.6.  "guam" is a client to "yorktown". 

Any comments on this?  I appreciae your help.

Paul McCrone

Jarrett m Carver <AFcarjm at dia.osis.gov> wrote:
The key here is that one is inside the firewall the other outside.  You may
need to Telnet to  a firewall
telnet gateway and then out to the site. We have Application firewalls (among
others) at our site, and to
telnet to an outside site you would...

telnet 123.45.67.xxx  <- this is the telnet gateway. It is a machine with two
network adapters, one to the inside network and one to the outside world. The
machine is set-up to route connections from the inside out, but not outside
in. This is usually done by addinig routes and setting up netperm tables.

you would then get the following promt:

tn-gw> connect outside.site.com

After it connects it would appear and work like a normal telnet session.

Your Fw administrator  can tell you if they allow telneting to outside sites
through your firewall, and how to do it.  Of course , all of this info really
depends on the type of firewall set-up they are running.

Hope this helps.

McCrone Paul J GS-12 HQ AFWA/XOGM wrote:

> Ok, I've got another wierd one.....
>
> On this one machine (call the machne "yorktown"), I can do this:
>
> telnet 130.6.223.xxx (which is inside a firewall)
> ...... and get in.
>
> Example:
> ________________________
> yorktown{user}2: telnet 130.6.223.xxx
> Trying 130.6.223.xxx...
> Connected to 130.6.223.xxx.
> Escape character is '^]'.
>
>
> SunOS x.x
>
> login:
> _________________________________________
>
> But I can't do this.............
> telnet 209.180.110.200 (which is outside a firewall).
>
> What I get is:
> _________________________________________
> yorktown{user}1: telnet 209.180.110.200
> Trying 209.180.110.200...
> telnet: Unable to connect to remote host: Network is unreachable
> yorktown{user}2:
> _________________________________________
>
> The ethernet is fine.
>
> Ideas?
>
> Regards,
> ===========================================
> Paul  J. McCrone, GS-12, Chief Forecaster
> HQ Air Force Weather Agency (AFWA) Office Code: XOGM
> Email: Paul.McCrone at afwa.af.mil <mailto:Paul.McCrone at afwa.af.mil>
> Phone: (402) 294-2821
> ===========================================
>
>
>
>
>  -----Original Message-----
> From: Wolfgang Engelien [mailto:wolfgang at hanazono.med.cornell.edu]
> Sent: Tuesday, July 13, 1999 9:50 AM
> To: sunhelp at ohno.mrbill.net
> Subject: Re: [Sunhelp] I'think is a problem DNS (But I don't know)???
>
> Hi Fernando,
>
> checked DNS with nslookup?
>
> checked /etc/resolv.conf?
>
> checked /etc/nsswitch.conf?
>
> At 12:02 PM 7/13/99 +0200, you wrote:
>
> >>>>
>
> Hi friends,
>
> I've a problem (no in Houston), when I do a PING to some address, for
> example ping 204.178.107.237 everything is all rigth, but If I try to put:
> ping www.yahoo.com, it told me that: ping : unknow host www.yahoo.com an
> then with anyaddress. I need install netscape, but like my computer doesn't
> recognize URL's, I cann't use it.
>
> My computer is a netra 4000 (SUN), with Solaris 2.5.1, and I thing the
> routes are Ok.
>
> Thank's a lot in advance for some help.
>
> Fernando (my e-mail: alana at gaia.es)
>
> --
>
> ----------------------------------------------------------------
>
> Fernando Alana Compa GAIA
>
> Servicios Informaticos C/ Camino Portuetxe, 14
>
> Email: alana at gaia.es Edificio ibaeta 1
>
> 20018, San Sebastian
>
> Spain
>
> Tel. +34 943 31 66 66
>
> Fax. +34 943 31 10 66
>
> ----------------------------------------------------------------
>
> <<<<
>
> _______________________________________________ SunHELP maillist -
> SunHELP at sunhelp.org http://www.sunhelp.org/mailman/listinfo/sunhelp
>
> _______________________________________________
> SunHELP maillist  -  SunHELP at sunhelp.org
> http://www.sunhelp.org/mailman/listinfo/sunhelp



--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Jarrett Carver                            DIA OSIS System Administrator
Re:AFcarjm at dia.osis.gov                   CC:admin at dia.osis.gov

"The opinions expressed herein are not necessarily those of my employer,
 not necessarily mine, and probably not necessary."

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-




_______________________________________________
SunHELP maillist  -  SunHELP at sunhelp.org
http://www.sunhelp.org/mailman/listinfo/sunhelp


____________________________________________________________________
Get your own FREE, personal Netscape WebMail account today at http://webmail.netscape.com.