two NIC's on email server

[Samson]

Hi there

Ive recently installed an E-Smith SME server for use as an internal mail server, as it contains everything from the POP/IMAP backend, to a nice Horde webmail front end.

I origionally configured it with one NIC, for use on our Curriculum network, and it worked fine, its(eth0)'s IP being 172.20.56.253/255.255.252.0

The need has come up for this server to be accessed via the Admin network within school, and so I plugged in another NIC of exactly the same model etc, booted the machine, configured a ifcfg-eth1, and configured the eth1 to have the IP of 172.21.57.253/255.255.254.0

I can now ping the server from both networks, however, from the Admin network, pinging is all I can do. I cannot SSH onto the machine, nor can I access the webmail.

I have configured a static route for eth1.

Is there anything extra I need to to to allow SSH and web access from eth1 and thus the Admin network?

I must have overlooked something.

Any help would be greatly appreciated,

Thanks.

[CyberNerd]

Probably you either have a firewall on the 172.21.57.253 (try turning it ioff for testing) or you are telling apache/ssh to only listen on the 172.20.56.253 interface, in which case edit the config files for the services.

see whats listening where:

netstat -nl

[Samson]

Setting them to listen on both... how do I do that?

Ive looked through various config files and I cant seem to find anything regarding listening etc.

I thought listening was port based, not device based?

Thanks

[CyberNerd]

If the output of netstat is anything like this, then the apache and sshd are already listening on both interfaces. (you tried without a proxy yes?):

 netstat -nl
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State
tcp        0      0 0.0.0.0:80             0.0.0.0:*               LISTEN
tcp        0      0 0.0.0.0:22            0.0.0.0:*               LISTEN

if instead of this, they are listening on the specific IP's tehn edit the sshd.conf and change to :

ListenAddress 0.0.0.0

with apache, replace any reference to

  172.20.56.253:80

with

 *:80

[Samson]

SSH was listening on an IP, so i changed that to 0.0.0.0

However, httpd was listening on 0.0.0.0 in the first place, I will post an edit in 5 mins to let you know if I have SSH access over eth1.

Edit: Right I cant access SSH still, and its probably worth mentioning, that I can ping to the IP of eth1, which is 172.21.57.253, but I cannot ping the hostname of the machine, which is DHMAIL... yet I can from the Curriculum network.

Related?

[CyberNerd]

can you telnet fron the admin side to port 80 on 172.21.57.253 from the admin side?

 telnet 172.21.57.253 80

if yes the server is mostly ok and problem is with the DNS/Proxy configs

[Samson]

No, I can't telnet to Port 80.

This has completely baffled me.

Everything works 100% from the Curriculum side, on eth0, i can ping, SSH, HTTP etc etc, but ALL i can do from the Admin side is ping... I cant even resolve DHMAIL to 172.21.57.253...

Baffled.

[Samson]

the output of "ip route" is as follows:

172.21.56.0/23 via 172.21.56.1 dev eth1
172.21.56.0/23 dev eth1 proto kernel scope link src 172.21.57.253
172.20.56.0/22 dev eth0 proto kernel scope link src 172.20.56.253

[Geoff]

Are those netmasks correct?

[Samson]

Admin (eth1): 255.255.254.0

Curriculum (eth0): 255.255.252.0

The fact that i can atleast ping the eth1 proves these are correct.

Its something else thats stopping me accessing any of the SSH or web services via eth1.

[Samson]

Any help would really be appreciated, I'm tearing my hair out back here trying to get this working!

[DMcCoy]

What have you done in the config front end? It might be treating one of them as a DMZ, and don't forget that it will overwrite and custom modifications you make to some files with its perl config stuff.

[Geoff]

Do you use VLANs? Are they configured correctly?

[Samson]

What have you done in the config front end? It might be treating one of them as a DMZ, and don't forget that it will overwrite and custom modifications you make to some files with its perl config stuff.

This could be the problem?
Where would I find these config files?