[ previous ] [ next ] [ threads ]
 
 From:  Melvin <melvin at sleepydragon dot net>
 To:  "av2000 at gmail dot com" <av2000 at gmail dot com>
 Cc:  googl3meister at gmail dot com, m0n0wall at lists dot m0n0 dot ch
 Subject:  Re: [m0n0wall] NT Domain, NetBIOS, LAN
 Date:  Mon, 27 Jun 2005 23:07:09 -0400
Just a thought, but have you tried enabling NetBios over IP?

av2000 at gmail dot com wrote:

>Hi,
>
>The PDC is behind a different firewall. We need to separate a few
>servers by a 2nd firewall and they must be NATed. So we cannot use
>bridged mode.
>
>Any suggestions on how to broadcast NetBios from LAN to WAN?
>
>Thanks,
>Arsen
>
>

>  
>
>>On 6/28/05, av2000 at gmail dot com <av2000 at gmail dot com> wrote:
>>    
>>
>>>Hello,
>>>
>>>I use the m0n0 wall to physically separate a few servers from the
>>>rest. All servers are in one domain.
>>>
>>>I use 1:1 NAT and proxy arp to talk to the "separated servers" (on the
>>>LAN port of m0n0 wall) from the other servers.
>>>
>>>After moving the servers behind the m0n0 wall, they stop being able to
>>>communicate with the NT Domain controllers (which are on the WAN
>>>port).
>>>
>>>NT Domain Controller <-> WAN of m0n0 <-> LAN of m0n0
>>>
>>>To test the problem, we allowed all traffic from WAN to LAN.
>>>
>>>It looks like the NetBIOS broadcast packets are not getting through
>>>from LAN to WAN. So browsing by name is not working either.
>>>
>>>How to enable NetBIOIS broadcasts with 1:1 NAT and how to fix the
>>>domain communication?
>>>
>>>Thanks!
>>>Arsen
>>>
>>>      
>>>
>>More info please - it sounds like you want the local LAN NetBios
>>broadcast packets to be NAT'd out the WAN interface?  I'd suggest a
>>bridge in this scenario, but it looks as though you've put an NT DC
>>directly connected to the net, which I'm certain is not the case, is
>>it?
>>
>>--g'luck
>>gm
>>
>>    
>>


-- 
Whom computers would destroy they must first drive mad.