"securely" use one ethernet interface for WAN and other for the LAN

I am reconfiguring our dual 2.7 Intel Xserve running MacOSXServer 10.5.4, and had a question.
Is it possible (or advisable) to use en0 to perform LAN services, and then configure en1 to only allow access to very limited service. VPN, FTP, CALDAV and later Mail.
I imagine that this is possible via a firewall configuration, but first I do not know how to specify interface in addition to ports, and second I don't know how advisable this would be.
Currently I have a DSL package from ATT with 5 static IP addresses. I have an Airport Extreme set up as one of those addresses providing DHCP and NAT to the LAN. I am using the LAN ports on the back of that to bridge my three switches (2 managed [clients and oce print server 100 base-T] and 1 unmanaged [ laser printers and copier 10 base-T]).
I have the LAN based on 192.168.0.x, with the Xserve at 192.168.0.5. I have DNS configured and working (Thank you Antonio Rocco)
I have 20 LAN clients, 18 mac 1 PC and one PC via Parallels. I will have no more than 1 or 2 WAN clients at any one time
I provide AFP, SMB, Directory Services currently. As part of the reconfigure, I desire to take better advantage of the collaboration tools to provide wikis and CALDAV services. I also want to allow our employees to publish their individual calendars, so that they can subscribe to them at home, or vice versa.
I would like to configure VPN, one for me to access configurations when I am away using Remote Desktop (I have used command line to some extent, but still feel more comfortable with the GUI tools) and second for limited access to content for certain users.
It would also be very helpful for us to have a FTP site. It is unnecessary for this the be a FQDN service, sending the IP address is perfectly acceptable as we only use a service like this 10-15 times a year.
(Related but unimportant in the grand scheme, is there a way to generate a link to the FTP server that you could email that not only is a link, but also a temporary username and password?)
Thank you in advance,
Ion Webster

First, I missed a zero in the network speeds, I have two managed GbE switches that have all of the GbE capable machines connected to them, and an unmanaged GbE switch that has all the 10 or 100Base-T connections. My apologies for the mistake. That was one of the reasons I went with the GbE capable Airport to bridge the switches.
Ok, I had been leaning towards a separate hardware firewall, but here is also where there is a hole in my knowledge. Do I need to look at something like the Linksys RVS4000 which bills itself as a +"4-Port Gigabit Security Router with VPN. Secure, smart Gigabit networking for growing business"+ I would like easy configuration, as I take care of these systems in addition to my job, rather than full time. This will be the first time I have set up a VPN connection, so even though I have spent a lot of time researching the manuals, and reading Schoun Regan (Apple Training Series) I don't have real world experience here. So if I buy more hardware, I want it to be the product that will provide the protection, and also allow me to configure it so that I can get these services running. All my VPN clients are running Macs, most on an AIrport connection and have their IP ranges in the 10.0.1.x range. all but one is on OS 10.5.x so I have a fairly homogeneous set of machines to make work together.
I will review the links you provided regarding static routing, but I do believe the hardware solution is a better one, and wish to pursue it, for all the reasons you give, and that in the brief perusal of the links, it is more than I want to tackle.
As far as FTP vs sFTP, I have no preference. I simply want a way to have online storage for transfer of large files on occasion. Ideally I want a folder, or a series of folders that are accessible for my LAN users to put items in and take them out, and for my (s)FTP users to do the same
So long story short, the hardware solution I would like to purchase, I need to be able to do the following:
VPN connections for content access and ARD access ( knew about and will ensure differing IP ranges)
(s)FTP
Calendar publishing
mail(at a later time)
Thank you for your help thus far.
Ion Webster

Similar Messages

I have 2 apple ID one for Egypt and other for USA , now I try to update the software but I get a message said that this software download with other ID, then I logout and sign with second ID but i got the same message again ... Now I can not sign in more

I have 2 apple ID one for Egypt and other for USA , now I try to update the software but I get a message said that this software download with other ID, then I logout and sign with second ID but i got the same message again ... Now I can not sign in more
Any solution ?
I'm using iOS 6.1.2 IPad 3
Regards

I have also noticed the same "problem". I do not fully understand the impact of using the same ID on multiple computers and devices if I want to keep them all in sync.

I am trying to detect signal peaks (derivatives of the peaks both +ve and -ve peaks). simultaneously 2 peaks detectors are running, 1 for +ve and other for -ve peaks.

i am trying to detect signal peaks (derivatives of the peaks both +ve and -ve peaks). simultaneously 2 peaks detectors are running, 1 for +ve and other for -ve peaks. when a peaks get detected it would trigger a pulse of approx 1 sec duration and at the same time it would disable the other peak detector for 1 sec time duration. after the time period, again both the peak detectors would be enabled. i have been able to detect both peaks but still not able to control the detectors block the way mentioned before.
the code and the data are attached.
Attachments:
eog peak detection.vi ‏192 KB

I'm not suggesting any of this as a model, and your needs are different than mine.
1) Go to Preferences -> Audio. Under "Default Audio Tracks", Set "Mono Media: Mono". Set "Stereo Media: Mono" (Choices from the pull-down for both are Use File, Mono, Stereo, 5.1, Adaptive)
You can change these, but I don't. I am using both mono and stereo tracks. I set up a custom sequence with the particular combination of stereo and mono tracks I want.
2) Set audio for clips by selecting all clips and going to Modify Clip -> Audio Channels Tab. Under "Number of Audio Tracks" there should be a "1". Under Channel Format it should read "Stereo".
I am not sending the audio to anyone else to edit further. I am doing a final stereo mix. If camera one is set up to record 2 mikes as a stereo track, then I leave that unchanged and put it onto a stereo track. If camera two is set up to record one mike onto channel 1 as ambient sound and channel 2 is a mono feed from a sound board, then I modify those clips as Preset Mono, 2 audio tracks, Channel format Mono, and that puts the left source channel (or whichever I choose) onto Audio track 1, channel 1 (of one), and right source channel onto audio track 2, channel 1.
4) Delete all the existing audio tracks in the sequence and replace them all with mono tracks, so all tracks in the sequence are mono.
I modify the tracks while creating the sequence, and ultimately use a custom sequence.
Under my Effects Controls panel there is only Channel Volume, and nowhere to adjust the pan.
I'm using the mixer, not the effects control panel.

One pricing condition for BOM and other for individual component

Hello SAP gurus,
We have two pricing condition types created and assigned in the pricing procedure which has been created with reference to PR00 and condition records are maintained for both the condition types.
But, we want only one pricing condition type to be triggered in the sales order depending on the usage of material in the sales order. As we are selling the same material individually and as well as a component in a bundle ( BOM).
i.e, when one pricing condition for BOM component and other for individual component
What are the configuration steps to be taken care to get this scenario?
Thanks in advance.
Regards,
KB
Edited by: K.byla on Jan 21, 2010 1:20 PM

Hi Sagar,
Thanks for your response.
Yes, we are maintaining only one material. The same material is used to sell individually and also in a BOM.
As i have mentioned earlier, whenever the material is sold individually it should pick condition type say 'YR00' and when the same material is sold as a bundle ( BOM) , it should pick condition type " YR01" in same the pricing procedure.
For both the condition types, the condition records are maintained.
To give the scenario details,
A material "X" is sold individually as a single component and the same material is also used for selling bundled with other material "Y" and the bundled material as "Z"
means, Z=X+Y
Pricing procedure used is say ZRA000 which contains currently the price cond type YR00.
Now for the bundle (BOM) involvement i want to use the same pricing pricing proc. and add the new cond YR01 in it so that the system will pick the cond.type YR00 when the material is sold individually and YR01 is taken as the price when the material is sold as a bundle against the item X.
Need to know the steps for this scenario and do i need to maintain a specific requirement ? please suggest.
BR,
KB

Multiple HTTP Servers, 1 for HTTP and other for HTTPS

I am trying to install 9ias 1.0.2.2.2 on 2 machines both running solaris. 1st machine hosts the database (8.1.7.4) and the other hosts the App server (9ias), what i am tryin to achive is have 2 listeneres. One for HTTP traffic and other for HTTPS traffic. Have anyone configured this and could shed some light and enlighten me.
With all the notes i have read i have understood that i need to basically install 2 instance of Apache in 2 different Oracle Homes. but my question is how can i just have one portal repository. or rather i should say if somebody could guide me from installing the 2 instance of Apache.
Thanks
Mir

You left out Twixl.
Bob

Use one account for apps and other for itunes match

Hello everybody
My question today is quite simple. I use one account for apps and tv shows, but inwant to use a different itunes account for purchasing itunes match. How can I use them both on my devices? Will it be asking for my user-pass each time i play a song? What other thing should i consider?
Thank you in advance

I would strongly recommend you not do this. You will regret it.
I have played with this issue a lot. You have to remain signed into match in order for it to show up on your phone. If you sign out to purchase an app or redownload one from your appstore id you use then match will be removed from your phone and when you go into your music app the icloud will not be there. You then have to go sign back out of the store id you used for your app purchase and then sign back into match and everything will have to go though the download to your device process again. This really is not what you want to do.
Sign up to match with the apple id that you know you will use the most or has the most purchased items and use that for all purchases, i.e. books, apps, movies, and music. You don't want to go though the other process.
Plus apple will start not letting you sign into match because you signed out and back in, in to short a period of time.
all store purchases on an iphone are linked to the store id. if you sign out of your match id on the appstore and sign into another account to purchase an app then itunes match will sign out in the music app. You can't have two store id's signed into your iphone at the same time. They are all linked together.

Dual monitor use audio output for movie and other for MBP

is it possible im watching a movie on one and wated to answer factime call or watch youtube on my mbp and just screamed out my tv speakers.....i want fual monitoring but separate audio any help?

Other alternatives include
I know on mackbooks I've seen firewire used as an input for a Weiss Dac if you're into two channel audio. Do any reiceivers take firewire as an input for hometheater? Has anyone tested Firewire outputs on their W series? I'm told that firewire is sometimes preferable to USB, I'm not sure why this would be, can USB support passthrough of DTS encoded signals?
In the case that firewire works and you Do not have a firewire source, maybe something like this would be of value It converts firewire to digital coaxial s/pdif and allows passthrough of DTS and AC3.
http://www.m-audio.com/images/global/manuals/FireWire-Audiophile_Manual.pdf
As I'm into audio the critical thing here (and what you're paying for when you purchase blue-ray, is maintaining the digital information from the disk in an unconverted form. You want a direct bit pass through, and you want as little jitter introduced to the signal as possible. You most certainly don't want the sound card getting in the way, Digtital to Analog converting and then reverse packaging it up and putting it out over the soundcard digital out. My problem is I'm not familiar enough with computer audio to know how exactly the sounds is transmitted from your blue ray drive to the digital interface you've chosen.
Anyone know why USB digital out would not be a prefered method?
Moderator note; comment removed which contravened forum rules

Need 2 options; one for fullscreen and other for window

I have an application that needs to run fullscreen if the
monitor's resolution is set to 1024x768, and in a standard window
if the resolution is any larger. For the fullscreen mode, it needs
to take up the entire 1024x768 space - so the taskbar needs to go.
The problem I'm having is that when I enter fullscreen mode, the
movie won't take over the entire screen, it leaves a space at the
bottom eventhough I've hidden the taskbar.
What I need is for it to function just as it would if I
selected "fullscreen" from the publisher settings. Any idea? Here's
the code I'm using now:
if baScreenInfo("width") = 1024 then
displayType = "fullscreen"
_movie.displayTemplate.titlebarOptions.visible = false
_movie.displayTemplate.resizable = false
_movie.stage.drawRect = rect(0, 0, 1024, 768)
_movie.stage.rect = rect(0, 0, 1024, 768)
baHideTaskBar(true)
else
displayType = "window"
_movie.displayTemplate.titlebarOptions.visible = true
_movie.displayTemplate.resizable = true
end if

I was actually able to solve this problem with a free xtra
called fullscreen.x32. Now what I do is through the publisher
settings I set the movie as a standard window, and then only if the
screen is set to 1024x768, I reset it to fullscreen. So the code is
simply this (using buddyAPI to get the display indo):
if baScreenInfo("width") = 1024 then
fs = new(xtra "fullscreen")
setScreenMode(fs, 1024, 768,16,0, 0)
end if
It displays over the taskbar just like the fullscreen setting
does in the publish settings. Works great.

Graphics For GPU and GPI for Da Vinci

I want to run Da Vinci Resolve 9 in MAC PRO 6 core. I need a Graphic card for GPI and other for GPU. I think i can use 4 slots bcoz i cant afford a PCI expander. So 1 for capture, 1 for raid, 1 for GPI and 1 for GPU.
Does ATI Radeon 5770 or 5870 and Quadro 4000 work well together or which 2 graphics work for my purpose. Plz suggest

I confess, I am not sure but...
GTX 670 4GB for graphics processing and no need for 2nd GPU with 10.8.2+
You do realize there are two 6-pin power ports for GPUs but ways to finangle more power w/ 2nd small PSU.
Avoid Apple RAID but if you want hardware RAID6 for instance, fine.
A single slot gpu not double wide means also having to look outside for say GTX 650 or 5xx maybe?

Netctl: Using same ethernet interface for PPPoE and LAN

Configuration overview
One ethernet interface connected to a switch which has both the LAN and my ADSL router (running in bridge mode).
My Arch PC should connect via PPPoE (possibly multiple connections) to the ISP and be able to access the LAN simultaniously. (Connection sharing is another goal, but that is not yet relevant...)
The main reason for not changing the setup is that some other people on the LAN use their own ISP accounts over the same line.
I currently have two netctl profiles, adsl (PPPoE) and ethernet (LAN).
I also want the ability to run two PPPoE sessions simultaniously (with routing to determine which data uses which connection). (This is not currently relevant, but have been in the past and might be again in the future...)
The problem:
I'm unable to connect to both the ethernet and ADSL profiles simultaniosly.
I tried to switch to Network manager, but it has a known bug preventing the same interface from being used for both plain LAN and PPPoE.
The workaround that currently seem to work, is to use ifconfig to manually add an IPv4 address to the ethernet interface after connecting the PPPoE session.
The systax for a PPP profile also have the unusual feature that its "Interface" value refers to the underlying interface, rather than the created PPP interface.
I currently have it working on my Ubuntu HDD and previusly had it working on Gentoo.
(Under a standard Windows XP / 7, it works with a single connection, but multiple simultanious PPPoE connections require soem non-standard tools...)
The Ubuntu setup
eth0 is set up by NetworkManager (I didn't have the option to avoid that one...) and I have the PPPoE connections configured in my /etc/interfaces: (ppp0 is not currently in use, was previously)
auto lo
iface lo inet loopback
iface ppp0 inet ppp
pre-up /sbin/ifconfig eth0 up # line maintained by pppoeconf
provider dsl-provider-local
auto ppp1
iface ppp1 inet ppp
pre-up /sbin/ifconfig eth0 up # line maintained by pppoeconf
provider dsl-provider-intl
I then have these files under /etc/ppp/peers: (with the name mathing the "provider" line) An example below. (passwords are in the /etc/ppp/*-secrets files)
unit 0 # This specifies that the created connection uses ppp0, differs in others.
noipdefault
hide-password
noauth
persist
plugin rp-pppoe.so eth0
user "myuser@radius-domain"
Arch setup:
ADSL profile:
Description='ISPName'
Interface=enp4s0
Connection=pppoe
User='username@radius-server'
Password='mysecret'
ConnectionMode='persist'
#UsePeerDNS=true
# Override default LCP parameters from /etc/ppp/options
LCPEchoInterval=15
LCPEchoFailure=10
Ethernet profile:
Description='A basic static ethernet connection'
Interface=enp4s0
Connection=ethernet
IP=static
Address=('192.168.0.8/24')
Solutions / Workarounds
1. Manually configuring a IP after connecting PPPoE
2. Not using netctl for pppoe, rather using the pppoe-setup tool
3, Figuring out the correct netctl setup for this scenario - which is what I need your help for...
Possibly related links
https://bbs.archlinux.org/viewtopic.php?id=163956
https://wiki.archlinux.org/index.php/Sh … Connection - Insists that an extra interface is needed for sharing connections - which is not a fundemental Linux requirement

I used to use ubuntu & if you reboot into it (if you can) & run:
$ ifconfig
you will see eth0 & ppp1
ppp1 will be set as the default gateway.
Your issue in Arch is that you currently want the PPPoE interface to be the same as your LAN, this will not work at best you will need to bridge the 2 BUT I think what you should do is use the networkmanager profile as a guide & have netctl create an adsl interface called ppp1 & set that as the default gateway
thus:
Description='ISPName'
Interface=ppp1
Connection=pppoe
User='username@radius-server'
Password='mysecret'
ConnectionMode='persist'
#UsePeerDNS=true
# Override default LCP parameters from /etc/ppp/options
LCPEchoInterval=15
LCPEchoFailure=10
I think this will work, try it & good luck
PS:
I do not use netctl as I use dhcp but you might even be able to configure netctl to set ppp1 as default gateway as a "post-up" command OR just create a systemd service to do it after the relevant netctl services are up
Last edited by t0m5k1 (2013-06-18 17:56:02)

HT201328 I have been given permission for unlocking my iphone 3 GS from Orange. I want to set up the phone for my wife to use with a new number and carrier. Do I unlock under my itunes account first or set one up for her and then unlock the phone.

I have been given permission for unlocking my iphone 3 GS from Orange. I want to set up the phone for my wife to use with a new number and carrier. Do I unlock under my itunes account first ( I now have a new iphone on this account) or set one up for her and then unlock the phone. I am worried about upsetting the new phone.

I would complete unlocking as is and then
restore as new once you know the iPhone is unlocked
Be aware Orange will process the request at their speed
one of the reasons they usually reside at bottom of User Sat surveys
will likely take weeks
This may also help
http://support.apple.com/kb/HT5014

My serial number for Logic Studio doesn't work. I used one from a different box and it worked. How can I get a new number?

My serial number for Logic Studio doesn't work. I used one from a different box and it worked. How can I get a new number?

http://support.apple.com/kb/TS2005
http://support.apple.com/kb/HT1861
https://ssl.apple.com/support/proapps/serialnumbers/

I'm now using iPhoto '11 (9.3.2), and none of the photos in my library will enlarge. I can view them all as thumbprints, but when I click to enlarge just a black, blank space shows up. Occasionally, one will enlarge for a second, then disappear. Help!

I'm now using iPhoto '11 (9.3.2), and none of the photos in my library will enlarge. I can view them all as thumbprints, but when I click to enlarge just a black, blank space shows up. Occasionally, one will enlarge for a second, then disappear. Help!

Just to clarify, I am not getting an "!" mark in a triangle, as I read others have experienced. The screen is just blank except the grey flag in lefthand corner to flag the photo.

Cannot update my keynote, pages and numbers from my ipad. I have different accounts, one for app store and other for icloud. What can I do?

Cannot update my keynote, pages and numbers from my ipad. I have different accounts, one for app store and other for icloud. What can I do?

You can't merge accounts or transfer iTunes purchases from one Apple ID to another: but there is no problem about using two IDs.
Use your iCloud ID for iCloud for syncing email, contacts, calendars, bookmarks, and PhotoStream.
Use your other Apple ID as before for iTunes, iTunes in the Cloud and iTunes Match.
There's no conflict about doing this, and you won't even notice as Keychain will log you in with the correct ID in each case. It's also better security not to have your iTunes login also your email address, given the number of complaints about hacked iTunes accounts.

I have an ipad 2 and want to have one account for home and another for work, how do i do this?

I have an Ipad 2 and use it for work, I want to run a second account for home, how do I do this?

What kind of accounts? Multiple email accounts are supported.
Multiple user accounts are not.
If you are saying you would like to have one set of apps, media, etc
for work and a different set for home, and switch between the 2
depending on network login or location, this is not a feature of iOS.
If this is not what you are asking, please post more details so someone
may offer a solution.

"securely" use one ethernet interface for WAN and other for the LAN

Similar Messages

Maybe you are looking for