Firewall/NAT

Hi,

How to get connection to the internet? when try ping from monowall shows 'ping: cannot resolve www.yahoo.com: Host name lookup failure' but see at status WAN and LAN it was UP... can someone help me on this?

modem--->Monowall--->AP (DLINK)

Using other PC login to monowall via url and login to AP its woking fine also ping both IP it work. My modem already set auto dial-up to connect internet.....

You must have DNS server(s) defined in m0n0wall if you want to ping hostnames from m0n0wall.

Do you have these defined on the System | General Setup page?

how to do that?

do you mean dns server provide from my ISP?

Somewhere along the line your monowall does not have a valid DNS server in its config. If it is set to use DHCP or PPPoE on the WAN connection it should pick it up automatically.  However if you are using a Modem router to create the connection and then plugging the WAN port of the Mono into the router and have configured the IP address statically you will need to manually add the router IP address in the DNS server section of the system page.  I suggest that you backup your config and post the file here for us to check through. (Remember to blank out private details)

Thanks...

In my case my network diagram its like this:

modem-->router-->PC (it is before put monowall)

modem-->router-->monowall-->wireless router-->PC, laptop and etc.

I need to know what i need to configure on monowall and my wireless router? Can help me to give print screen how to configure base on my network diagram?

Log into your Mono box. On the left hand side menu click on Interfaces under the Status section. Note what the gateway is for your WAN address (This will be the LAN address of the Router in front of the mono box).  Now click on General Setup at the top left.  Enter the IP address you have written down in the DNS server section and check the box to Allow DHCP to override DNS.

webGUI Configuration

System: General setup

Hostname: m0nowall
Domain: local
DNS server: 192.168.0.1
     : 202.188.0.133

Username: admin
password: blank

webGUI protocol: selected HTTP
webGUI port : blank
Time zone:
NTP time server:


-------------------------------------------

Status: Interface

WAN interface
status: up
MAC address: 00:xx:xx:xx:xx:xx
Gateway: 192.168.0.1
Media: 100base TX 
In/out packets: 188/3
In/out error: 0/0
Colisions: 0

LAN interface
status: up
MAC address: 00:xx:xx:xx:xx:xx
IP address: 192.168.0.100
Subnet mask: 255.255.255.0
Media: 100base TX
In/out packets: 188/3
In/out error: 0/0
Colisions: 0
------------------------------------------------

Interfaces: WAN
Type: i choosed static

IP address: 192.168.0.105 / 24
Gateway: 192.168.0.1
------------------------------------------------

Detail:
ADSL Modem Billion
Wireless router (DLINK) DI524
Intel PC (MONOWALL)
AP DWL-2000AP+
Laptop
DNS from ISP: 202.188.0.133 (TMNET)

----MODEM---->Wireless router (DLINK) DI524----> Device laptop and desktop can access via lan or wirelessly without monowall.
This is my connection without monowall.

----MODEM---->Wireless router (DLINK) DI524----> MONOWALL with 2 NIC---> Wireless router AP DWL-2000AP+ ---> laptop
This is connection to be add in with monowall.

Default gateway from wireless router DI524): 192.168.0.1
Monowall WAN IP: 192.168.0.105
Monowall LAN IP: 192.168.0.100 (http://192.168.0.100)
-------------------------------------------------------------------

Diagnostics: Ping
-----------------
Host: 192.168.0.1
Interface: LAN
Count: 5

ping: sendto: Host is down
ping: sendto: Host is down
ping: sendto: Host is down
ping: sendto: Host is down
PING 192.168.0.1 (192.168.0.1) from 192.168.0.100: 56 data bytes

--- 192.168.0.1 ping statistics ---
5 packets transmitted, 0 packets received, 100% packet loss


Host: www.google.com
Interface: WAN
Count: 5

ping: cannot resolve www.google.com: Host name lookup failure


Host: 192.168.0.100
Interface: LAN
Count: 5

PING 192.168.0.100 (192.168.0.100) from 192.168.0.100: 56 data bytes
64 bytes from 192.168.0.100: icmp_seq=0 ttl=64 time=0.082 ms
64 bytes from 192.168.0.100: icmp_seq=1 ttl=64 time=0.053 ms
64 bytes from 192.168.0.100: icmp_seq=2 ttl=64 time=0.073 ms
64 bytes from 192.168.0.100: icmp_seq=3 ttl=64 time=0.073 ms
64 bytes from 192.168.0.100: icmp_seq=4 ttl=64 time=0.073 ms

--- 192.168.0.100 ping statistics ---
5 packets transmitted, 5 packets received, 0% packet loss
round-trip min/avg/max/stddev = 0.053/0.071/0.082/0.010 ms


--------------------------------------------------------------------

DLINK DI524
-----------
IP Gateway: 192.168.0.1

AP DWL-2000AP+
--------------
IP Gateway: 192.168.0.100

MONOWALL
--------
IP: 192.168.0.105
Gateway: 192.168.0.1

I hope this infomation can help me to solve the problem. Please...
 

The first thing that I see, is that your LAN subnet and your Router/Mono WAN subnet are the same.  THey need to be different.  Change your LAN interface to 192.168.1.x and the DHCP to match.

markb,

Can i have your e-mail address? Because i unable attach my file from here... please... or you can send to my e-mail address at sheikh1976@gmail.com.

Hi Mark,
 
Sorry, but I have no idea.... I still cannot done my configuration... failed!!! I need your help please!!!
 
modem---> monowall ---> AP (its working fine. Monowall set as PPOE put username and password)
 and now i need to configure like this...
 
modem --> router ---> monowall ---> AP
 
router: IP 192.168.0.1 (dhcp 192.168.0.100 to .199)
monowall: IP 192.168.1.1 (192.168.1.2 to .100)
AP: gateway 192.168.1.1
 
Configure from monowall:
press no1.
rl0 - LAN
rl1 - WAN
both is up
 
press no2.
set ip 192.168.1.1
24
range 192.168.1.2 to 192.168.1.100)
 
Please guide me.....oh please!!!

Hi,
Let's start at the beginning.
You have a modem router that is making your connection to your ISP.
The username and password are set in there for your connection.  It's LAN address is 192.168.0.1. Subnet mask 255.255.255.0 (Sometimes refered to as /24) It has DHCP configured 192.168.0.100-199.  Your Monowall needs it's WAN interface configured as DHCP so it gets an IP address from the Modem/Router. (No username and password required) The LAN IP of the Monowall should be 192.168.1.1/24 and the DHCP on the Monowall 192.168.1.2-100  Your AP should then pick up an IP address and pass traffic through to your wireless clients.

You will also need to uncheck the box at the bottom of the WAN config page that Blocks private IP ranges (This is because the WAN address lies on a private network range)  You also need to make sure that you have a rule in the LAN rules to allow traffic.  For testing purposes, I would suggest a rules that Allows all LAN on Any protocol to Any destination.


When we first talked, your WAN had a static address, so I am not sure where the PPPoE has come from.  You would use PPPoE if your DSL modem was in bridge mode and your ISP supported PPPoE.  The above configuration assumes that your DSL Modem/Router is handling the authentication with your ISP.  If this is not the case, let me know.
Also, I would recommend doing the reconfiguration via the Monowall web config GUI not via the command line interface.

Mark.