Hi There,
So we have an XG Firewall setup, running "SFOS 17.1.2 MR-2", have been trying today to get a server on the LAN which hosts a web interface to be accessible externally, documentation for this server says it requires a Reverse Proxy setup which I have done, I have tried to port forward to the reverse proxy as well but that does not seem to work, if I port forward to the reverse proxy and go to PUBLIC_IP:80, the revers proxy just sends back the internal server name and tells the web browser to go to that.
Server IP: 192.168.0.50
Reverse Proxy(Ubuntu) IP: 192.168.0.51
I trie the following:
1.) Hosts and Services > IP Host > Create a IP host for 192.168.0.51
2.) Hosts and Services > Services > "Add" a new service with "TCP/UDP", Source Port "1:65535", Destination Port "80"
3.) Firewall > DNAT Rule :
Source Zones: Any
Allowed Client Networks: Any
Desination host/Network*: Port1- PUBLICIP
Services: Used new entry created in step 2
Protected Servers: Used new entry created in step 1
Protected Zone: LAN
Enabled "Rewrite source address (Masquerading)
With the above when I go to PUBLICIP:80, the reverse proxy tells the web browser to go to https://INTERNAL_SERVER_NAME/example_path/example_index.jsp
I then tried the following:
1.) Hosts and Services > IP Host > Create a IP host for 192.168.0.51
2.) Hosts and Services > Services > "Add" a new service with "TCP/UDP", Source Port "1:65535", Destination Port "80"
3.) Web Server > Created a web server, Host "192.168.0.51", type "HTTP", Port "80"
4.) Firewall > WAF:
Hosted Address: Port 1-PUBLICIP
Listening Port: 80
Web server List: Used new entry created in step 3
Allowed Client Networks: Any IPv4
When I go to PUBLICIP:80, the url it tries to redirect to is https://PUBLICIP/example_path/example_index.jsp, this always comes back with a "You do not have permission to access / on this server", I've tried the "Path-specific routing" and "Exceptions" options but that did not make any difference, could this also be a misconfiguration on the Reverse Proxy ?
Any help is appreciated.
This thread was automatically locked due to age.