I have a 4.7 unraid server running with virtual box running in. The install for it was doable but entertaining.

I also run an untangle server as a router, spam and anti X box. My exchange server was easy to port over from a

vmware windows host. I am now trying to setup a second ethernet interface on unraid to support routing with untangle.

 

I tried putting some settings in the network.conf file and rebooted but ifconfig still only shows one network card and loopback. I am on comcast internet so the network card would be set on dhcp for the realtec. The onboard gig nic goes to the private lan. I ordered a second IP address from comcast today to untangle can have its own public ip.

 

In thinking about this i will also need to protect the unraid interface from evil.

 

All the service are available to outside world how do I turn these off on one interface?

 

Thanks

John

it does not disable the second Ethernet port, it is just not set up for use.

 

do a google search on manually configuring an Ethernet port and go from there.

I got the second nic working using  dhcpcd then the interface.  I looked in the logs and right away hackers were trying to get in. I set the root password to something and complex. Now I want to disable different deamons on the second nic. All it needs is virtualbox connected to it.

What is the best way of doing this?

 

With this virtaul box my power usage is down anouther 40 watts and dont have a vm on my htpc.

Just more step and life will be great (not) but nice thinking.

 

John

I got the second nic working using  dhcpcd then the interface.  I looked in the logs and right away hackers were trying to get in. I set the root password to something and complex. Now I want to disable different deamons on the second nic. All it needs is virtualbox connected to it.

What is the best way of doing this?

 

With this virtaul box my power usage is down anouther 40 watts and dont have a vm on my htpc.

Just more step and life will be great (not) but nice thinking.

 

John

 

So, you are saying you are running untangle inside a VM on your unRAID host?

This doesn't look like a good idea at all to me.

 

Remember: unRAID is, by design, not hardened and is not intended to be used that way.

This is not just a matter of disabling some services on a nic, I'd say.

Having both nics activated in unRAID in that kind of setup means calling for trouble.

The unRAID box is your VM host and providing file-services internally,

while your untangle server should do the connection between red and green interfaces.

The red interface- at minimum - should not be visible or shared with unRAID.

For the the green interface I'd personally would go the same route and only connect this to a real switch.

Then unRAID itself should only be reachable via that switch, too.

 

So, in order to "improve" your setup, I'd do the this:

- use nics no1 and no2 exclusively for your untangle VM

  Use bridged mode in VBox for both nics and only connect these to the untangle VM...do NOT activate the nics with an IP inside unRAID !

- you'll need a third, real nic in your unRAID host to be used as primary nic for unRAID.

- you could either employ a forth, real nic for all other VMs giving internal services, then set-up nic no4 like nic no3 for unRAID

  Alternatively, spare yourself nic no4, make nic no3 a bridge and share the internal VMs with unRAID (including sharing the bandwidth)

yeah I wouldn't expose unraid to the internet... the webui dies at the merest hint of someone doing something it doesn't like.

yeah I wouldn't expose unraid to the internet... the webui dies at the merest hint of someone doing something it doesn't like.

Not to mention that by using the web-gui you can completely trash your array by re-assigning disks in ways that would destroy the data on them.

 

Do NOT expose unRAID to the internet...  It is not "if" you'll get hacked, but how many ways you'll get hacked.