This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Web Server behind Astaro not accessible

I have a network of this configuration;
A Public IP address on the External Interface of my Astaro firewall (Version 5), Internal Network with private IP address on the Internal Interface and a DMZ for my web server.

I have followed instructions on Web Server/DNAT documentation i found on http://docs.astaro.org/ but still could not browse my Web Server which I have placed on the DMZ behind my firewall. I configured DNAT as follows (Any -> External Address/HTTP None Web_Server_Private/HTTP) and Packet Filter Rules as (Any / HTTP -> Web_Server_Private Allow). I also have Http Proxy enabled.

Each time I tried to browse using the registered domain name, it only stops at the public IP address of the firewall without loading the page from my web server.

What should i do? Can anyone tell me what i am missing out.

Any help will be appreciated.

This thread was automatically locked due to age.

0 BarryG over 20 years ago

Are you sure your ISP doesn't block port 80?

you can try tcptraceroute to test.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 Dalton_Chuks over 20 years ago in reply to BarryG

Hi,

I confirmed from my ISP that none of the ports are being blocked. I even asked a friend to traceroute my url and it kept stopping at my Astaro External IP which happened to be one of my public IPs.

Find attached some screenshots of some of my settings.
Cancel
Vote Up 0 Vote Down

Cancel
0 Dalton_Chuks over 20 years ago in reply to Dalton_Chuks

more attachment
Cancel
Vote Up 0 Vote Down

Cancel
0 Dalton_Chuks over 20 years ago in reply to Dalton_Chuks

Packet filter rules screen
Cancel
Vote Up 0 Vote Down

Cancel
0 Dalton_Chuks over 20 years ago in reply to Dalton_Chuks

Http Proxy screen
Cancel
Vote Up 0 Vote Down

Cancel
0 Dalton_Chuks over 20 years ago in reply to Dalton_Chuks

Network Definition screen
Cancel
Vote Up 0 Vote Down

Cancel
0 NimmdirKeks over 20 years ago in reply to Dalton_Chuks

Hi,

Problem is in your packet-filter I think. You say from server to any service http. Well this dosent work, because service http means a destination port 80, but your server talks with source port 80 to a client.
what you need is a service with: proto tcp source-port 80 destination-port 1024:65535. And this service you apply on your secon pf rule.

Chris
Cancel
Vote Up 0 Vote Down

Cancel
0 bmwRS100 over 20 years ago

In Antwort auf:

...
Each time I tried to browse using the registered domain name, it only stops at the public IP address of the firewall without loading the page from my web server.

What should i do? Can anyone tell me what i am missing out.

Any help will be appreciated.

[/ QUOTE ]

Hello,

you have to create a DNAT - Rule - look at the attachment.
- there the dest adress is the public IP and the destination to Ip is my WEB Server (Web_Server_Private).

Hope this fix your problem.

Harald
- 59305-DNAT.jpg
- View
- Hide
Cancel
Vote Up 0 Vote Down

Cancel
0 NimmdirKeks over 20 years ago in reply to bmwRS100

Hi BMWler

"I configured DNAT as follows (Any -> External Address/HTTP None Web_Server_Private/HTTP) and Packet Filter Rules as (Any / HTTP -> Web_Server_Private Allow)"

Think he allready made the DNAT rule.

//switch to local language
I glaub des hoda scho gmacht.
So genug für heut, jetzt machma a bissal freude am fahren (und zwar ohne dach solangs no schön is). Servus mitanand. [:)]
// switch back

Chris
Cancel
Vote Up 0 Vote Down

Cancel