trouble accessing system

[cryo]

I am having an odd problem that I can't figure out.

I am running a suse 8.1 linux install. web, ftp, ssh.
We have a T1 into an ISP supplied cisco router that has 1 ip reserved for the server. everything on 22,21 and 80 is forwarded to 10.0.0.10 on our localnet - the linux server.

I can access all services fine when on the localnet - ie. from computer 10.0.0.5 i can ftp and access the web referencing the computer by 10.0.0.10.

I can access all services fine from the internet - ie. from my house i can ssh, ftp, access web by its internet address - 146.145.xxx.xxx.

I can't access any of the services FROM the localnet by referencing the Internet address. ie. from 10.0.0.5 - i can't load the web on 146.145.xxx.xxx - all other web apps work fine.

Suggestions - I am stumped.

 

[sleipnir214]

I would guess that your router knows what to do with packets destined for 146.145.x.x when they come in from the T1 adapter, but not when they come in from its internal NIC.

I know that Cisco routers can handle this with the right configuration. If you talk to whoever configured the router, they can probably add the configuation. It's a little inefficient. All communication to and from that server on the external address will have to go through the router each way. ______________________________________________________________________
TANSTAAFL!

 

[pupu]

It's normal. I suggest to live with it.

:-[

Cisco products are known to be unable to do double NAT.

 

[sleipnir214]

Now that I think about it, pupu is probably right.

The installation I was thinking of was doing NAT at a firewall. ______________________________________________________________________
TANSTAAFL!

 

[cryo]

Living with it is unfortunately not an option.

Is there any way that it could possibly be fixed? Could you give me any advice in what to start to research to fix it? I do not have much experience with cisco products.

But I will call my ISP today and see what they have to say about it.

Thanks... But it really wasn't the news I was looking for.

 

[pupu]

Hmm. You can place your dns in DMZ, behind some firewall. You will need another IP from your provider, then. Or modify your internal dns/hosts files and don't use numeric IP. I don't have simple solution for you, sorry.