Contact Zimbra from WAN ok, from DMZ more or less

[wodanymir]

Hello, how are you?

I have some problems with a fresh installation of Zimbra on a server (Ubuntu server 8.04 64-bit) with two NIC (Dell PowerEdge R200). I also have an IPCop firewall which provides WAN, LAN and DMZ areas and five static IPs assign by my internet provider.

TARGET
Contact Zimbra both from internet and from LAN (no need routing between networks).

CONFIGURATION

• eth0/WAN: one static IP assign by my internet provider (different from IPCop's WAN);
• eth1/DMZ: one static IP;
• /etc/network/interfaces file:
  

  # This file describes the network interfaces available on your system
  # and how to activate them. For more information, see interfaces(5).
  
  # The loopback network interface
  auto lo
  iface lo inet loopback
  
  # The primary network interface
  auto eth0
  iface eth0 inet static
  	address xxx.yyy.zzz.98
  	netmask 255.255.255.248
  	network xxx.yyy.zzz.96
  	broadcast xxx.yyy.zzz.103
  	gateway xxx.yyy.zzz.102
  	# dns-* options are implemented by the resolvconf package, if installed
  	dns-nameservers 62.149.128.2
  	dns-search vattelapesca.ok
  
  # The secondary network interface
  auto eth1
  iface eth1 inet static
  	address 192.168.3.2
  	netmask 255.255.255.0
  	network 192.168.3.0
  	broadcast 192.168.3.255
  	gateway 192.168.3.254
  	# dns-* options are implemented by the resolvconf package, if installed
  	dns-nameservers 62.149.128.2

• /etc/hosts file:
  

  127.0.0.1	localhost
  xxx.yyy.zzz.98	zimbra.vattelapesca.ok	zimbra
  192.168.3.2	zimbra.vattelapesca.ok	zimbra
  
  # The following lines are desirable for IPv6 capable hosts
  ::1     ip6-localhost ip6-loopback
  fe00::0 ip6-localnet
  ff00::0 ip6-mcastprefix
  ff02::1 ip6-allnodes
  ff02::2 ip6-allrouters
  ff02::3 ip6-allhosts

• /etc/resolv.conf file:
  

  search vattelapesca.ok
  nameserver 62.149.128.2

PROBLEMS
Sometime the ZD2 installations on LAN desktops miss the connection with the server or I can't login via SSH (or a SSH session freeze) or ping it.
During "connection lost time" the server is reachable from the WAN NIC, also by LAN desktops.


I don't understand if this behavior depends on wrong configurations or other.

Could you help me, please?

Thanks a lot,
wo