[wellylug] Routing problem

[Timothy Goddard]

Ian Beardslee wrote:

>Hi all,
>
>I have a wee routing problem.  At least I think it is a routing problem, 
>it could be a 'stoopid Ian' problem, but I am going with the routing 
>problem for now.
>
>I have a network.  In that network is a machine (let's call it 'ubuntu')
>with an IP address of 10.129.128.13 (ah yes the lucky one), a subnetmask 
>of 255.255.252.0 and a default gateway of 10.129.128.1.  That default 
>gateway takes me to the other subnets of the network without any problems.
>
>I'm playing with NoMachine at the moment, trying to find better ways for 
>staff with broadband connections at home to use them to connect to our 
>terminal servers.  So what I'm trying to do is get an external ssh 
>session to come through the ipcop firewall (10.129.128.3) to 'ubuntu'.
>
>It doesn't seem to work when the default gateway of 'ubuntu' is 
>10.129.128.1.
>
>If I change the default gateway on 'ubuntu' to 10.129.128.3 it works 
>well, but I can't see the rest of my network subnets.  Which for external 
>connections is fine, but if we start using it more regularly it'll be a 
>problem.
>
>For consistancy's sake, I would like to the default gateway to be the 
>10.129.128.1, but how do I also get a 'second default gateway' or at 
>least an intelligent route to the outside world?
>
>Cheers muchly in advance,
>
>Ian
>
>  
>
Is 10.129.128.1 acting as your main gateway to the internet? From what
you've said it sounds like 'ubuntu' can't reply to the clients when that
is set as the gateway. What is 10.129.128.1 sending the traffic to?

It would probably be simpler to set up a VPN, allowing the terminal
server to ignore the distinction between local and remote traffic. This
would also better prepare for future requirements (e.g. remote access to
file servers, intranet, etc).

P.S. Take a look at NX or OpenNX. This implements a compression protocol
for X, apparently allowing good quality full graphical interface
connections even on dialup or high-latency connections such as cell
phone networks. It has all sorts of pretty clever stuff in there to
eliminate roundtrips. I haven't had a chance to test it (although my
laptop has it installed).