Nie jesteś zalogowany. Proszę się zalogować lub zarejestrować.
eko.one.pl → Oprogramowanie / Software → Logowanie się na drugi router
Strony 1
Zaloguj się lub zarejestruj by napisać odpowiedź
Witam.
Mam dwa routery w sieci. Jeden z garoyle a drugi tp-link (służy jako switch, printserwer i ap).
Gargoyle 192.168.1.1 port 82
tp-link 192.168.1.2 port 8080
Mam zew IP czy jest możliwość wejścia do drugiego routera z WAN?
Próbowałem trasę statyczną 192.168.1.1 wan 192.168.1.2
Odblokować z wanu do lanu tplink oba 8080 192.168.1.197 8080 ale bez sukcesu.
Przekieruj sobie port 8080 na wanie na 192.168.1.2:8080. Zwykłe przekierowanie które robisz w gui.
PS. kto jest dostawcą internetu?
Mój dostawca to plascom.
Próbowałem tak:
# uci add firewall redirect
# uci set firewall.@redirect[-1].name=tplink
# uci set firewall.@redirect[-1].src=wan
# uci set firewall.@redirect[-1].proto=tcpudp
# uci set firewall.@redirect[-1].src_dport=8080
# uci set firewall.@redirect[-1].dest_port=8080
# uci set firewall.@redirect[-1].dest_ip=192.168.1.2
# uci commit firewall
i nawet gui.
chwilę myśli i brak strony.
192.168.1.2:8080 działa w lanie
Pytanie pomocnicze - jak włączysz zdalny dostęp w gagroyle to możesz się z internetu dostać na port 80 lub 22 (tylko testuj z innej sieci, nie będąc połączonym pod ten router).
Jaki adres pokazuje gargoyle na wanie?
Na porcie 80 ma swoje www
Dostęp do gui na 82
a ssh 2020.
Jak zaznaczę w gui wyłącz zdalny dostę ssh -> nie mogę wejść z wan jak odznaczę mogę.
i tak samo jest z http.
ip wan 192.168.219.147
Taki adres sugeruje że stoisz za kolejnym routerem i na nim też porty mają być przekierowane.
Dziwne bo ja mam z gniazdka od isp podłączony do routera z gargulcem. A mam zew ip.
Albo masz DMZ albo dostawca ci niektóre porty przekierował. Skoro ci działa 2020 to wyłącz ssh na na nim i zrób przekierowanie 2020 na 8080 i zobacz czy działa. Będziesz wiedział w czym problem.
Zmieniłem ssh na 2222 -> działa.
a na porcie 2020 dlaej to samo.
W DZM mam dodane to ip. dlaczego ?
Na gargoyle dmz nie masz włączonego jak widzisz. W końcu usługę masz na 8080 czy na 8282 jak zrobiłeś?
Wcześniej miałem 8080 a potem zmieniłem.
Teraz nawet zmieniłem ip na 192.168.1.3 i port 1982
po lanie mogę a po wanie nie
może po ssh jakieś logi lub konfigurację pokazać ?
Z sieci Wan:
Zrób na gargoyle
iptables -v -L
iptables -v -L -t nat
i pokaż wyniki.
root@Gargoyle:~# iptables -v -L
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
6572 1040K bw_ingress all -- eth0.2 any anywhere anywhere
13387 2240K delegate_input all -- any any anywhere anywhere
Chain FORWARD (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
76112 70M bw_ingress all -- eth0.2 any anywhere anywhere
76113 70M ingress_restrictions all -- eth0.2 any anywhere anywhere
56188 9984K egress_restrictions all -- any eth0.2 anywhere anywhere
132K 80M delegate_forward all -- any any anywhere anywhere
Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
8823 1789K delegate_output all -- any any anywhere anywhere
Chain bw_ingress (2 references)
pkts bytes target prot opt in out source destination
82684 71M CONNMARK all -- any any anywhere anywhere CONNMARK and 0xffffff
76112 70M CONNMARK all -- any any anywhere 192.168.1.0/24 CONNMARK xset 0xf000000/0xff000000
3379 380K CONNMARK all -- any any anywhere 192.168.219.147 CONNMARK xset 0xf000000/0xff000000
3193 660K RETURN all -- any any anywhere anywhere connmark match 0x0/0xf000000
79491 70M CONNMARK all -- any any anywhere anywhere CONNMARK and 0xffffff
0 0 all -- any any anywhere anywhere bandwidth --id total1-download-2-449 --type combined --current_bandwidth 0 --reset_interval 2 --reset_time 2 --intervals_to_save 449
0 0 all -- any any anywhere anywhere bandwidth --id bdist1-download-minute-15 --type individual_dst --reset_interval minute --intervals_to_save 15
0 0 all -- any any anywhere anywhere bandwidth --id total2-download-minute-359 --type combined --current_bandwidth 0 --reset_interval minute --intervals_to_save 359
0 0 all -- any any anywhere anywhere bandwidth --id bdist2-download-900-24 --type individual_dst --reset_interval 900 --reset_time 900 --intervals_to_save 24
0 0 all -- any any anywhere anywhere bandwidth --id total3-download-180-479 --type combined --current_bandwidth 0 --reset_interval 180 --reset_time 180 --intervals_to_save 479
0 0 all -- any any anywhere anywhere bandwidth --id bdist3-download-hour-24 --type individual_dst --reset_interval hour --intervals_to_save 24
0 0 all -- any any anywhere anywhere bandwidth --id total4-download-7200-359 --type combined --current_bandwidth 0 --reset_interval 7200 --reset_time 7200 --intervals_to_save 359
0 0 all -- any any anywhere anywhere bandwidth --id bdist4-download-day-31 --type individual_dst --reset_interval day --intervals_to_save 31
0 0 all -- any any anywhere anywhere bandwidth --id total5-download-day-365 --type combined --current_bandwidth 0 --reset_interval day --intervals_to_save 365
0 0 all -- any any anywhere anywhere bandwidth --id bdist5-download-month-12 --type individual_dst --reset_interval month --intervals_to_save 12
Chain delegate_forward (1 references)
pkts bytes target prot opt in out source destination
132K 80M forwarding_rule all -- any any anywhere anywhere /* user chain for forwarding */
127K 80M ACCEPT all -- any any anywhere anywhere ctstate RELATED,ESTABLISHED
5191 414K zone_lan_forward all -- br-lan any anywhere anywhere
65 3544 zone_wan_forward all -- eth0.2 any anywhere anywhere
0 0 reject all -- any any anywhere anywhere
Chain delegate_input (1 references)
pkts bytes target prot opt in out source destination
259 18620 ACCEPT all -- lo any anywhere anywhere
13128 2222K input_rule all -- any any anywhere anywhere /* user chain for input */
4810 511K ACCEPT all -- any any anywhere anywhere ctstate RELATED,ESTABLISHED
206 11768 syn_flood tcp -- any any anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN
4911 1036K zone_lan_input all -- br-lan any anywhere anywhere
3407 675K zone_wan_input all -- eth0.2 any anywhere anywhere
Chain delegate_output (1 references)
pkts bytes target prot opt in out source destination
259 18620 ACCEPT all -- any lo anywhere anywhere
8564 1770K output_rule all -- any any anywhere anywhere /* user chain for output */
6437 1618K ACCEPT all -- any any anywhere anywhere ctstate RELATED,ESTABLISHED
114 19416 zone_lan_output all -- any br-lan anywhere anywhere
2013 133K zone_wan_output all -- any eth0.2 anywhere anywhere
Chain egress_restrictions (1 references)
pkts bytes target prot opt in out source destination
56188 9984K egress_whitelist all -- any any anywhere anywhere
Chain egress_whitelist (1 references)
pkts bytes target prot opt in out source destination
Chain forwarding_lan_rule (1 references)
pkts bytes target prot opt in out source destination
Chain forwarding_rule (1 references)
pkts bytes target prot opt in out source destination
Chain forwarding_wan_rule (1 references)
pkts bytes target prot opt in out source destination
Chain ingress_restrictions (1 references)
pkts bytes target prot opt in out source destination
76113 70M ingress_whitelist all -- any any anywhere anywhere
Chain ingress_whitelist (1 references)
pkts bytes target prot opt in out source destination
Chain input_lan_rule (1 references)
pkts bytes target prot opt in out source destination
Chain input_rule (1 references)
pkts bytes target prot opt in out source destination
Chain input_wan_rule (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:ftp
0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpts:50990:50999
1 40 ACCEPT tcp -- any any anywhere anywhere tcp dpt:8081
0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:https
15 852 ACCEPT tcp -- any any anywhere anywhere tcp dpt:82
0 0 tcp -- any any anywhere anywhere tcp dpt:2222 recent: SET name: SSH_CHECK side: source mask: 255.255.255.255
0 0 DROP all -- any any anywhere anywhere recent: UPDATE seconds: 300 hit_count: 11 name: SSH_CHECK side: source mask: 255.255.255.255
0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:2222
0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:ftp
0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpts:50990:50999
0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:8081
0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:https
0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:82
0 0 tcp -- any any anywhere anywhere tcp dpt:2222 recent: SET name: SSH_CHECK side: source mask: 255.255.255.255
0 0 DROP all -- any any anywhere anywhere recent: UPDATE seconds: 300 hit_count: 11 name: SSH_CHECK side: source mask: 255.255.255.255
0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:2222
0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:ftp
0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpts:50990:50999
0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:8081
0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:https
0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:82
0 0 tcp -- any any anywhere anywhere tcp dpt:2222 recent: SET name: SSH_CHECK side: source mask: 255.255.255.255
0 0 DROP all -- any any anywhere anywhere recent: UPDATE seconds: 300 hit_count: 11 name: SSH_CHECK side: source mask: 255.255.255.255
0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:2222
Chain output_lan_rule (1 references)
pkts bytes target prot opt in out source destination
Chain output_rule (1 references)
pkts bytes target prot opt in out source destination
Chain output_wan_rule (1 references)
pkts bytes target prot opt in out source destination
Chain pf_loopback_B (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT tcp -- any any anywhere 192.168.1.2 tcp dpt:8282
0 0 ACCEPT udp -- any any anywhere 192.168.1.2 udp dpt:8282
0 0 ACCEPT tcp -- any any anywhere 192.168.1.3 tcp dpt:1982
0 0 ACCEPT udp -- any any anywhere 192.168.1.3 udp dpt:1982
Chain reject (3 references)
pkts bytes target prot opt in out source destination
60 3011 REJECT tcp -- any any anywhere anywhere reject-with tcp-reset
3053 617K REJECT all -- any any anywhere anywhere reject-with icmp-port-unreachable
Chain syn_flood (1 references)
pkts bytes target prot opt in out source destination
206 11768 RETURN tcp -- any any anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN limit: avg 25/sec burst 50
0 0 DROP all -- any any anywhere anywhere
Chain zone_lan_dest_ACCEPT (4 references)
pkts bytes target prot opt in out source destination
114 19416 ACCEPT all -- any br-lan anywhere anywhere
Chain zone_lan_forward (1 references)
pkts bytes target prot opt in out source destination
5191 414K pf_loopback_B all -- any any anywhere anywhere
0 0 ACCEPT all -- br-lan br-lan anywhere anywhere
5191 414K forwarding_lan_rule all -- any any anywhere anywhere /* user chain for forwarding */
5191 414K zone_wan_dest_ACCEPT all -- any any anywhere anywhere /* forwarding lan -> wan */
0 0 ACCEPT all -- any any anywhere anywhere ctstate DNAT /* Accept port forwards */
0 0 zone_lan_dest_ACCEPT all -- any any anywhere anywhere
Chain zone_lan_input (1 references)
pkts bytes target prot opt in out source destination
4911 1036K input_lan_rule all -- any any anywhere anywhere /* user chain for input */
0 0 ACCEPT all -- any any anywhere anywhere ctstate DNAT /* Accept port redirections */
4911 1036K zone_lan_src_ACCEPT all -- any any anywhere anywhere
Chain zone_lan_output (1 references)
pkts bytes target prot opt in out source destination
114 19416 output_lan_rule all -- any any anywhere anywhere /* user chain for output */
114 19416 zone_lan_dest_ACCEPT all -- any any anywhere anywhere
Chain zone_lan_src_ACCEPT (1 references)
pkts bytes target prot opt in out source destination
4911 1036K ACCEPT all -- br-lan any anywhere anywhere
Chain zone_wan_dest_ACCEPT (2 references)
pkts bytes target prot opt in out source destination
7204 547K ACCEPT all -- any eth0.2 anywhere anywhere
Chain zone_wan_dest_REJECT (1 references)
pkts bytes target prot opt in out source destination
0 0 reject all -- any eth0.2 anywhere anywhere
Chain zone_wan_forward (1 references)
pkts bytes target prot opt in out source destination
65 3544 forwarding_wan_rule all -- any any anywhere anywhere /* user chain for forwarding */
0 0 zone_lan_dest_ACCEPT esp -- any any anywhere anywhere /* @rule[7] */
0 0 zone_lan_dest_ACCEPT udp -- any any anywhere anywhere udp dpt:isakmp /* @rule[8] */
65 3544 ACCEPT all -- any any anywhere anywhere ctstate DNAT /* Accept port forwards */
0 0 zone_wan_dest_REJECT all -- any any anywhere anywhere
Chain zone_wan_input (1 references)
pkts bytes target prot opt in out source destination
3407 675K input_wan_rule all -- any any anywhere anywhere /* user chain for input */
138 45264 ACCEPT udp -- any any anywhere anywhere udp dpt:bootpc /* Allow-DHCP-Renew */
0 0 ACCEPT icmp -- any any anywhere anywhere icmp echo-request /* Allow-Ping */
9 288 ACCEPT igmp -- any any anywhere anywhere /* Allow-IGMP */
0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:9981 /* dvbt */
0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:9982 /* @rule[10] */
7 420 ACCEPT tcp -- any any anywhere anywhere tcp dpt:www /* wwwww */
124 7408 ACCEPT tcp -- any any anywhere anywhere tcp dpt:8001 /* icecast */
0 0 ACCEPT all -- any any anywhere anywhere ctstate DNAT /* Accept port redirections */
3113 620K zone_wan_src_REJECT all -- any any anywhere anywhere
Chain zone_wan_output (1 references)
pkts bytes target prot opt in out source destination
2013 133K output_wan_rule all -- any any anywhere anywhere /* user chain for output */
2013 133K zone_wan_dest_ACCEPT all -- any any anywhere anywhere
Chain zone_wan_src_REJECT (1 references)
pkts bytes target prot opt in out source destination
3113 620K reject all -- eth0.2 any anywhere anywhere
root@Gargoyle:~# iptables -v -L -t nat
Chain PREROUTING (policy ACCEPT 8098 packets, 980K bytes)
pkts bytes target prot opt in out source destination
8141 983K delegate_prerouting all -- any any anywhere anywhere
Chain INPUT (policy ACCEPT 1341 packets, 97910 bytes)
pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 1759 packets, 121K bytes)
pkts bytes target prot opt in out source destination
Chain POSTROUTING (policy ACCEPT 179 packets, 15768 bytes)
pkts bytes target prot opt in out source destination
5359 436K delegate_postrouting all -- any any anywhere anywhere
Chain delegate_postrouting (1 references)
pkts bytes target prot opt in out source destination
5359 436K postrouting_rule all -- any any anywhere anywhere /* user chain for postrouting */
43 5872 zone_lan_postrouting all -- any br-lan anywhere anywhere
5180 421K zone_wan_postrouting all -- any eth0.2 anywhere anywhere
Chain delegate_prerouting (1 references)
pkts bytes target prot opt in out source destination
8141 983K prerouting_rule all -- any any anywhere anywhere /* user chain for prerouting */
4803 401K zone_lan_prerouting all -- br-lan any anywhere anywhere
3338 582K zone_wan_prerouting all -- eth0.2 any anywhere anywhere
Chain pf_loopback_A (1 references)
pkts bytes target prot opt in out source destination
0 0 DNAT tcp -- any any anywhere anywhere tcp dpt:2020 to:192.168.1.2:8282
0 0 DNAT udp -- any any anywhere anywhere udp dpt:2020 to:192.168.1.2:8282
0 0 DNAT tcp -- any any anywhere anywhere tcp dpt:1982 to:192.168.1.3:1982
0 0 DNAT udp -- any any anywhere anywhere udp dpt:1982 to:192.168.1.3:1982
Chain pf_loopback_C (1 references)
pkts bytes target prot opt in out source destination
0 0 MASQUERADE tcp -- any any 192.168.1.0/24 192.168.1.2 tcp dpt:8282
0 0 MASQUERADE udp -- any any 192.168.1.0/24 192.168.1.2 udp dpt:8282
0 0 MASQUERADE tcp -- any any 192.168.1.0/24 192.168.1.3 tcp dpt:1982
0 0 MASQUERADE udp -- any any 192.168.1.0/24 192.168.1.3 udp dpt:1982
Chain postrouting_lan_rule (1 references)
pkts bytes target prot opt in out source destination
Chain postrouting_rule (1 references)
pkts bytes target prot opt in out source destination
43 5872 pf_loopback_C all -- any br-lan anywhere anywhere
Chain postrouting_wan_rule (1 references)
pkts bytes target prot opt in out source destination
Chain prerouting_lan_rule (1 references)
pkts bytes target prot opt in out source destination
Chain prerouting_rule (1 references)
pkts bytes target prot opt in out source destination
Chain prerouting_wan_rule (1 references)
pkts bytes target prot opt in out source destination
Chain zone_lan_postrouting (1 references)
pkts bytes target prot opt in out source destination
43 5872 postrouting_lan_rule all -- any any anywhere anywhere /* user chain for postrouting */
0 0 SNAT tcp -- any any 192.168.1.0/24 192.168.1.2 tcp dpt:8282 /* - (reflection) */ to:192.168.1.1
0 0 SNAT udp -- any any 192.168.1.0/24 192.168.1.2 udp dpt:8282 /* - (reflection) */ to:192.168.1.1
0 0 SNAT tcp -- any any 192.168.1.0/24 192.168.1.3 tcp dpt:1982 /* tplink2 (reflection) */ to:192.168.1.1
0 0 SNAT udp -- any any 192.168.1.0/24 192.168.1.3 udp dpt:1982 /* tplink2 (reflection) */ to:192.168.1.1
Chain zone_lan_prerouting (1 references)
pkts bytes target prot opt in out source destination
0 0 pf_loopback_A all -- any any anywhere 192.168.219.147
4803 401K prerouting_lan_rule all -- any any anywhere anywhere /* user chain for prerouting */
0 0 DNAT tcp -- any any 192.168.1.0/24 192.168.219.147 tcp dpt:2020 /* - (reflection) */ to:192.168.1.2:8282
0 0 DNAT udp -- any any 192.168.1.0/24 192.168.219.147 udp dpt:2020 /* - (reflection) */ to:192.168.1.2:8282
0 0 DNAT tcp -- any any 192.168.1.0/24 192.168.219.147 tcp dpt:1982 /* tplink2 (reflection) */ to:192.168.1.3:1982
0 0 DNAT udp -- any any 192.168.1.0/24 192.168.219.147 udp dpt:1982 /* tplink2 (reflection) */ to:192.168.1.3:1982
Chain zone_wan_postrouting (1 references)
pkts bytes target prot opt in out source destination
5180 421K postrouting_wan_rule all -- any any anywhere anywhere /* user chain for postrouting */
5180 421K MASQUERADE all -- any any anywhere anywhere
Chain zone_wan_prerouting (1 references)
pkts bytes target prot opt in out source destination
0 0 REDIRECT tcp -- any any anywhere anywhere tcp dpt:2222 redir ports 2222
15 852 REDIRECT tcp -- any any anywhere anywhere tcp dpt:82 redir ports 82
0 0 REDIRECT tcp -- any any anywhere anywhere tcp dpt:https redir ports 443
1 40 REDIRECT tcp -- any any anywhere anywhere tcp dpt:8081 redir ports 8081
0 0 REDIRECT tcp -- any any anywhere anywhere tcp dpts:50990:50999
0 0 REDIRECT tcp -- any any anywhere anywhere tcp dpt:ftp redir ports 21
3322 581K prerouting_wan_rule all -- any any anywhere anywhere /* user chain for prerouting */
5 300 DNAT tcp -- any any anywhere anywhere tcp dpt:2020 /* - */ to:192.168.1.2:8282
0 0 DNAT udp -- any any anywhere anywhere udp dpt:2020 /* - */ to:192.168.1.2:8282
20 1124 DNAT tcp -- any any anywhere anywhere tcp dpt:1982 /* tplink2 */ to:192.168.1.3:1982
0 0 DNAT udp -- any any anywhere anywhere udp dpt:1982 /* tplink2 */ to:192.168.1.3:1982
root@Gargoyle:~#Pakiety się zliczają na firewallu, więc tak jak by tp-link blokował.
Przywróciłem ustawienia fabryczne w tp-linku, wyłączyłem wszystkie firewall i wszystko na allow dalej lipa.
Kiedyś miałem tak: http://eko.one.pl/forum/viewtopic.php?id=13933 i działało
To po prostu musi działać...
Przywróciłem ustawienia fabryczne w tp-linku, wyłączyłem wszystkie firewall i wszystko na allow dalej lipa.
Kiedyś miałem tak: http://eko.one.pl/forum/viewtopic.php?id=13933 i działało
### cytat z ww tematu ###
Mam router nexxa z gargoyle jako główny i do nie go jak switch tp-link z oryginalnym softem.
Nexxa ma ip 192.168.1.1 - gui gargouyle i siec wifi gargoyle a tp-link 192.168.0.1:8080 ma siec wifi Przemek.
...
Bo kiedyś miałeś dobrze ustawione adresy, a teraz przy tym samym połączeniu kablowym LAN gargoyle -> WAN tp-link masz:
...
Gargoyle 192.168.1.1 port 82
tp-link 192.168.1.2 port 8080
...
Widzisz różnicę?
I napisał że kilka razy to zmieniał...
Tylko wtedy w sieci miałem dwa razy routing. Czyli inne ip po wanie w nexxie i inne w tplinku. Jak zrestartowałem nexxa to tplink i musiałem albo odnawiać dzierżawę albo też restart. A tplink ma służyć tylko jako switch, repetytor WIFI i Serwer wydruku. Nie używam serwera wydruku w openwrt bo nie działa mi skaner a na tp-linku mogę drukować i skanować.
Próbowałem tak ale też bez rezultatu:
Na tplinku zmieniłem IP 192.168.2.1
Na nexxie mam 192.168.1.1
W gargulcu przekierowałem sobie port 1982 na 192.168.2.1 1982.
W trasie statycznej cel: 192.168.2.1 wan 192.168.1.1
i dalej nie działa.
A podłącz tp-linka jednak przez wan. Żeby się nie okazało że tp-link nie ma gatewaya jak jestes przez lan podłączony i dlatego to może nie działać.
Strony 1
Zaloguj się lub zarejestruj by napisać odpowiedź
eko.one.pl → Oprogramowanie / Software → Logowanie się na drugi router
Forum oparte o PunBB, wspierane przez Informer Technologies, Inc