This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DNAT/SNAT

I am trying to setup dnat/snat rules to allow a website which i am hosting be externally accessable.

I have setup my dnat/snat rules as follows;

Any -> external_Interface__ / HTTP None Scan / HTTP

My Packetfilter is setup as follows;

ANY HTTP Scan ALLOW

Scan is defined as 192.168.2.1 with a mask of 255.255.255.255

Also if I VPN into the local network and open explorer and type in 192.168.2.1 the website will comeup thus i know its working properly

However the site is still not exernally accessable??

I am really at a loss??

any ideas

I must be overlooking something small here

asher
[:S]

This thread was automatically locked due to age.

Parents

0 Andy_01 over 21 years ago

asher,

do you have other packet filter rules in front blocking HTTP maybe? Does Scan use the Astaro as default gateway? How do you test, from the inside or the outside?
Cancel
Vote Up 0 Vote Down

Cancel
0 asher over 21 years ago in reply to Andy_01

there are only 2 other packet filter rules;

eth0_Network__ Any Any Allow

PPTP-Pool Any Any Allow

Scan has the following ip settings;

Static Ip;

192.168.2.1
255.255.255.0
Gateway 192.168.2.100 (astaro)

I am testing from the outside and vpn into the network to test that it works locally

asher
Cancel
Vote Up 0 Vote Down

Cancel
0 Andy_01 over 21 years ago in reply to asher

any other filtering device in your network? Are you running the proxy on ASL, if yes, which mode and what are the allowed networks?
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Andy_01 over 21 years ago in reply to asher

any other filtering device in your network? Are you running the proxy on ASL, if yes, which mode and what are the allowed networks?
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 asher over 21 years ago in reply to Andy_01

there are no other filters on my network

I am only running the dns proxy with eth0 allowed and PPTP pool allowed...no other proxys are running on the asl

the webserver is apache listening on port 80

i am really stumped

asher
Cancel
Vote Up 0 Vote Down

Cancel
0 Andy_01 over 21 years ago in reply to asher

what does the network definition you created for Scan look like? What version of ASL are you using? Any sort of access restriction on this apache?
Cancel
Vote Up 0 Vote Down

Cancel
0 asher over 21 years ago in reply to Andy_01

network is defined as; scan 192.168.2.1 255.255.255.255

asl version 4.015

standard apache install no access restriction as far as i can tell (as stated before when i vpn into the network i can type the local ip address into my browser and the website comes up fine)

man this is making me nuts to figure this out

asher
[:S]
Cancel
Vote Up 0 Vote Down

Cancel