› Forums › Network Management › Firewall, Traffic Shaping and Net Balancer › Net Balancer…
- This topic is empty.
-
AuthorPosts
-
June 24, 2010 at 10:35 am #42458
maxchock
MemberHi all,
I’m very new to Zeroshell, and I have little knowledge about networking. I’m trying to setup a load balancer which can do traffic shaping for my Internet Cafe. Before deploy to a real PC I actually have it install in a VirtualBox.
here is the setup of my environment.
here is the screenshot of the zeroshell-> setup->network
here is the screenshot of “NetBalancer”
i can online using DEFAULT GATEWAY or Streamyx but when I enable Load balancing, the Zeroshell itself fail to run the Ping test under “Utilities”-> IP Check
As it’s return the DNS Lookup ERROR, I did actually add a line into “DNS Forwarder”
The Zeroshell still fail on the Ping test if keyin domain name such as google.com but it return success if I key in google’s IP instead of URL.
So I wish someone can help to solve my problem. Thanks for helping in advance.
June 24, 2010 at 12:46 pm #50517ppalias
MemberFirst post here the contents of the “DNS Options” window that pops up. I suspect it is a query – recursion issue.
June 25, 2010 at 4:08 am #50518maxchock
Memberis this the one you meant?
June 25, 2010 at 6:09 am #50519ppalias
MemberYes… add the following
recursion yes;
allow-query {10.0.0.0/8;127.0.0.0/8;};change 10.0.0.0/8 with your LAN address space.
June 25, 2010 at 12:42 pm #50520maxchock
MemberI tried using
“recursion yes;
allow-query {192.168.1.0/8;127.0.0.0/8;};”and
“recursion yes;
allow-query {10.1.1.0/8;127.0.0.0/8;};”neither of them are working, it gave same error.
June 25, 2010 at 9:27 pm #50521ppalias
MemberDo me a favor and open a shell to execute these commands.
cat /etc/resolv.conf
dig www.yahoo.com
netstat -anp | grep :53June 29, 2010 at 4:31 am #50522maxchock
Memberok,
“cat /etc/resolv.conf” return
nameserver 127.0.0.1dig http://www.yahoo.com return
; <> DiG 9.5.1-P2 <> http://www.yahoo.com
;; global options: printcmd
;; connection timed out; no servers could be reachednetstat -anp | grep :53
tcp 0 0 192.168.250.254:53 0.0.0.0:* LISTEN 1545/named
tcp 0 0 192.168.0.55:53 0.0.0.0:* LISTEN 1545/named
tcp 0 0 10.1.1.55:53 0.0.0.0:* LISTEN 1545/named
tcp 0 0 192.168.0.55:53 0.0.0.0:* LISTEN 1545/named
tcp 0 0 192.168.141.142:53 0.0.0.0:* LISTEN 1545/named
tcp 0 0 127.0.0.1:53 0.0.0.0:* LISTEN 1545/named
udp 0 0 192.168.250.254:53 0.0.0.0:* LISTEN 1545/named
udp 0 0 192.168.0.55:53 0.0.0.0:* LISTEN 1545/named
udp 0 0 10.1.1.55:53 0.0.0.0:* LISTEN 1545/named
udp 0 0 192.168.1.55:53 0.0.0.0:* LISTEN 1545/named
udp 0 0 192.168.141.142:53 0.0.0.0:* LISTEN 1545/named
udp 0 0 127.0.0.1:53 0.0.0.0:* LISTEN 1545/namedI tried to vi the resolv.conf, but permission is denied even i “su”…
June 29, 2010 at 7:02 am #50523ppalias
Membernamed is up, but no servers can be reached. I suspect a firewall blocking your box from reaching the forwarders.
Isping 208.67.220.220
answering?
What is the output ofiptables -L -v
?
July 9, 2010 at 8:02 am #50524maxchock
Memberping is working and replied.
below is the screen shot of iptable.
July 10, 2010 at 5:44 pm #50525ppalias
MemberAs I said there is a firewall blocking you.
0 0 ACCEPT udp -- any any anywhere anywhere udp spt:domain state ESTABLISHED
Means you don’t receive DNS replies back. You have not printed SYS_OUTPUT chain, which will show you that your system sends DNS packets out.
July 12, 2010 at 8:15 am #50526maxchock
Memberhmm…
I don’t understand, because i don’t have any firewall setup in my network. And why the DNS can reply back if i’m using only 1 WAN?
Thanks for helping me. Really wish to deploy zeroshell in my cafe.
July 16, 2010 at 12:23 pm #50527ppalias
MemberHave you added the
recursion yes;
allow-query {192.168.0.0/16;10.0.0.0/8;127.0.0.0/8;};to the options window? If not what is the error?
July 24, 2010 at 12:17 pm #50528maxchock
Memberadd to where?? which part?
Thanks.
July 25, 2010 at 5:17 pm #50529ppalias
MemberIn the DNS-> Options tab.
-
AuthorPosts
- You must be logged in to reply to this topic.