Solved

Multi-honed LINUX box routing between 2 networks cannot print on both networks

Posted on 2008-09-29
10
501 Views
Last Modified: 2013-12-15
We have a multi-honed LINUX box routing between 2 networks the Users  on the 192.168.10.x network can access the 170.94.133.x network to run their queries and print them to the attached laser printers (192.168.10.x network). The other users specifically on the 170.94.133.x network cannot print to the laser printers on the 10.x network. When you try to send a print job to the printers the job hangs in the print queue on the LINUX box.
So it appears that the route statement is working to allow the users to access the 170.94.133.x network from the 192.168.10.x. to do their quiries.
0
Comment
Question by:lhartzell
  • 5
  • 3
  • 2
10 Comments
 
LVL 13

Expert Comment

by:WizRd-Linux
ID: 22601094
To assist with sorting out the rules, you will need to post the output of iptables -nvL.

To make sure I correctly understand your requirements you need the following to occur:

192.168.10.x -> 170.94.133.x (Queries)
170.94.133.x -> 192.168.10.x (Printing)

When the users are connected to machines in the 170.94.133.x range, are they using a local application or for arguments sake sshing to these servers and then need to print?
0
 

Author Comment

by:lhartzell
ID: 22601914
You are correct the workstations on the 192.168.10.x network route through the LINUX box to the 170.94.133.x network to query a database using a local application and print the information on the network printers attached to the 192.168.10.x (this works)

The workstations on the 170.94.133.x network query the database and should print the information on the network printers attached to the 192.168.10.x.

I will send another comment with the IP Table information
0
 
LVL 3

Expert Comment

by:alien_life_form
ID: 22603877
Can you print from the linux box to 192.168.10.x?
0
 

Author Comment

by:lhartzell
ID: 22605399
No When you print a test page from the LINUX box to the printer on the 10.x network it hangs in the print que
0
 
LVL 3

Expert Comment

by:alien_life_form
ID: 22606354
So the problem is with the linux box... I bet you cannot ping machines on 10.x either.
Check that you have a route for that network. Another possibility is a SW firewall (like firestarter), check the  iptables -L output.
0
Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

 

Author Comment

by:lhartzell
ID: 22619161
Let me do some more explaining we want to print from a windows machine on the 133.x network to network printers on the 10.x network.  The path from the 133.x network to the 10.x network is a
 Dual-hone LINUX box routed between the two networks. We can ping the 10.x network and the 133.x network from the LINUX box. We can print from the LINUX box to the printers on the 10.x network. We just cannot print form the 133.x network to the printers on the 10.x network. It seems that if both networks are routed and working that printing on the windows machine (Print drivers loaded) on the 133.x network should see the printer and print.  I am apparently missing something on the LINUX box that allows a pass through.
0
 
LVL 13

Expert Comment

by:WizRd-Linux
ID: 22619668
Can you please post the output of your iptables rules so I can have a look at them.  Also, don't forget any NAT rules (-t nat) if you are doing it this way.
0
 

Accepted Solution

by:
lhartzell earned 0 total points
ID: 22800608
This problem has been resolved.
0
 

Author Comment

by:lhartzell
ID: 22800616
Resolved by our Network Engineer
0
 
LVL 3

Expert Comment

by:alien_life_form
ID: 22811244
It'd be nice to know what the problem was....
0

Featured Post

Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

This is the error message I got (CODE) Error caused by incompatible libmp3lame 3.98-2 with ffmpeg I've googled this error message and found out sometimes it attaches this note "can be treated with downgrade libmp3lame to version 3.97 or 3.98" …
Linux users are sometimes dumbfounded by the severe lack of documentation on a topic. Sometimes, the documentation is copious, but other times, you end up with some obscure "it varies depending on your distribution" over and over when searching for …
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now