Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 2 subscribers
  • Views 1390 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Inbound HTTP Connections

aus1010
I am having problems connecting to my webpages that I am hosting behind the ASL. I have defined my web server in the Network as: webserver.domain.com 192.168.x.x 32

NAT's settings:
Inbound HTTP any->outside_Interface/HTTP  none  webserver.domain.com/HTTP
(also I have https, DNS done the same way)

For Packet Filter Rules:
ANY -> HTTP ->webserver.domain.com ->ALLOW

when I tested the port under the tool I get and error: inverse host lookup failed.

I don't know if it could be the way I setup the Masqurading it is:
eth0_Network -> all/all   MASQ_OUTSIDE_Interface.

Please help, no other place to turn  [:(]


This thread was automatically locked due to age.
Parents
  • 0
    Hi,

    Please try the following(if you haven't fixed yours yet). They work for me:

    MASQUERADE:
    Network: eth0_Interface__
    Interface: your_external_IP

    DNAT/SNAT:
    Packets to match:
    Any -> your_external_IP -> HTTP

    Change source to: your_firewall_IP
    Change destination to: your_webserver_IP -> HTTP(80)

    PACKET FILTER:
    Any -> HTTP -> Any -> Allow

    I hope that helps.

    jav
Reply
  • 0
    Hi,

    Please try the following(if you haven't fixed yours yet). They work for me:

    MASQUERADE:
    Network: eth0_Interface__
    Interface: your_external_IP

    DNAT/SNAT:
    Packets to match:
    Any -> your_external_IP -> HTTP

    Change source to: your_firewall_IP
    Change destination to: your_webserver_IP -> HTTP(80)

    PACKET FILTER:
    Any -> HTTP -> Any -> Allow

    I hope that helps.

    jav
Children
  • 0 in reply to javelin
    I am having the same problems.  Your suggestions fixed the issues with HTTP (although it is VERY slow), but they don't seem to work with FTP.  Basically, i want to be able to reach services by the EXTERNAL ip addresses.