This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Need help configuring ports for HTTP & POP3

Hi All,

I’m having a hard time trying to figure out how to get my POP3 and HTTPS ports open and how to direct the requests to the right server. I’ve read all the information that I could find on this site, but no luck. By the way, I’m new at this, so please don’t flame me to badly. This is my setup:

Eth0=192.168.x.x
Eth1=201.2.x.x
Nat= Masquerade
Packet Filter= any any any allow

Would someone please give me a step-by-step instruction on how to get traffic to and from my web and mail server?

Thanks.

PS: I did read the manual, RTFM.
PPS: Since I can't get the ports to my mail server open, please send responce to jdzimmerm@hotmail.com.

This thread was automatically locked due to age.

Parents

0 Andy_01 over 22 years ago

Is your mail and webserver internal or external?
Cancel
Vote Up 0 Vote Down

Cancel
0 zimmerman over 22 years ago in reply to Andy_01

My mail and webserver is internal.
Cancel
Vote Up 0 Vote Down

Cancel
0 Andy_01 over 22 years ago in reply to zimmerman

ok, what you need is a DNAT rule for POP3 and HTTP/HTTPS. Inbound SMTP can be done with the SMTP relay (or DNAT as well).

Let's say your external interface is called eth1 and has the IP 1.2.3.4, the http server has 192.168.0.1.

1) create a definition for the http server, let's say http_server 192.168.0.1/32
2) create a DNAT rule ANY -> eth1_Interface/HTTP -> http_server/HTTP
3) create a packet filter rule ANY -> http_server/HTTP -> Allow

Now if you try http://1.2.3.4 it should do the trick. The other services can be done similar.
Cancel
Vote Up 0 Vote Down

Cancel
0 zimmerman over 22 years ago in reply to Andy_01

Andy,

Thanks for the help. When I get home tonight, I'll try this out. Another question, do you know of any good ports scanners that I can use to scan my system from the outside and inside?

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel
0 JimmyM over 22 years ago in reply to zimmerman

You also want to change your existing packet filter rule to Eth0-Any-Any-Allow.
Since you are exposing services to the internet, you should consider a DMZ. It's pretty easy to set up and adds security.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 JimmyM over 22 years ago in reply to zimmerman

You also want to change your existing packet filter rule to Eth0-Any-Any-Allow.
Since you are exposing services to the internet, you should consider a DMZ. It's pretty easy to set up and adds security.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data