4 questions about ispconfig and domains, please help!

Discussion in 'Installation/Configuration' started by dimas, Jul 17, 2006.

  1. dimas

    dimas Member

    I have a number of questions and will greatly appreciate your help!

    1) Samba
    After I installed ISPConfig on suse 10.1 and enabled its firewall, samba naturally stopped to work. Samba manual says the following:

    Port 135/TCP - used by smbd
    Port 137/UDP - used by nmbd
    Port 138/UDP - used by nmbd
    Port 139/TCP - used by smbd
    Port 445/TCP - used by smbd

    So I opened these ports in ispconfig, and the windows pcs (I have two windows pcs on my local network) again gained access to the shares on the lunux pc. OK, BUT - not the other way round, that is, I can't mount a samba folder on the linux pc (this folder should provide access to a shared folder on one of my windows pcs). The samba manual says that "the high order ports (1024-65535) are often used for outgoing connections and therefore should be permitted through the firewall". But how can I enable these ports in ispconfig? I tried inputting something like 1024-65535 in the rule's port field - but ispconfig returns an error. So - is there a way to allow outgoing connections for high order ports without having to input all the single ports manually (like 1024, 1025, etc)? I hope there is a solution, because the single port input is obviously out of the question. :)

    2) one name server
    is it enough to have just one primary name server for a domain? let's say i have ns1.test.com configured with the help of ispconfig - can I just state ns1.test.com in the primary ns field of, let's say, test2.com domain? Will it work if the secondary name server field is left empty? Or can I put ns1.test.com for the secondary name server as well?

    3) two name servers on one ispconfig linux pc
    can i configure ns1.test.com AND ns2.test.com on the same pc? (I have several external ips). If yes, how? (Basically i have only one pc with 10 ips that i can use as a server)

    4) let's say i have two name servers ns1.test.com and ns2.test.com configured with the help of ispconfig. can i use this domain TEST.COM also for hosting a website, ftp, mail, etc? If yes, WHERE do i need to input all the pertinent information - mx records, etc - ?

    I realize that some of my questions can sound rather stupid, but I'm learning...
  2. dimas

    dimas Member

    a number of things has become clearer, but I'm still stumped with the first one...
  3. Ben

    Ben ISPConfig Developer ISPConfig Developer

    Since I normally set my firewall up once and seldomly do a change here,
    I don't use the ISPConfig frontend for the firewall.
    I use firehol for that (http://firehol.sf.net), a shellscript which creates all iptables stuff with much flexebility from a configfile. It is very fast to setup.
    Another good thing is, you can "try" new configs which gets discarded if you don't commit them after 30seconds to prevent beeing locked out from ssh...
    I use that on on Linuxbox at home where I also use smb... no problems yet...
  4. falko

    falko Super Moderator ISPConfig Developer

    You can do this, but you might hae problems with some registrars that require you to have two different name servers.
    Have a look at http://www.howtoforge.com/ispconfig_dns_godaddy and http://www.howtoforge.com/traditional_dns_howto

    Yes, sure.
  5. dimas

    dimas Member

    Thank you for your reply.

    Well, at the moment I set up just one name server in ispconfig:

    I also created a site www.mydomain.com

    Also I changed the nameservers where I registered mydomain.com to:
    ns1: ns1.mydomain.com (the registrar allows just one ns)

    There I also created a host:
    ns1.mydomain.com that points to my ip.

    HOWEVER: when I try to ping ns1.mydomain.com the following happens:
    the correct ip is displayed, but then no packets are exchaned - there's 100% losses.

    Where is the mistake?
  6. dimas

    dimas Member

    I've found the problem - it is local. Strangely enough, i can't get my sites displayed if i try to browse them using my isp. They are all visible from the outside, however.
  7. falko

    falko Super Moderator ISPConfig Developer

    I think it's a problem with your router not allowing loopbacks into your local network or something like that.
  8. dimas

    dimas Member

    Now this problem is fully solved - I was behind NAT, but now all external IPs are configured directly on my network card - and everything is OK.

Share This Page