Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 7 replies
  • Subscribers 2 subscribers
  • Views 1925 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

HTTPS & freenet problems.

Alasdair_01
Another plea for help please.

I have spent a couple of days trying to get the finer points of ASG7 working but am now really stuck.

I have a netgear DG834 which is set up to route all traffic to a DMZ 192.168.1.123 ( the address of the Astaro External gateway ). The internal gateway is 192.168.0.1

I have got most of the services running OK including a web server on 192.163.0.2:80 which I finally fixed with DNAT.

However I can only get HTTPS surfing when I set the HTTP proxy to Standard mode. Is there any reason why this doesn't work in Transparent mode with a filter on 443 passing everything from internal to external and vv?

The other problem I have is with a freenet server which operates using port 192.168.0.2:40253.  I have DNET'd it and put a filter in allowing everything to pass both ways on that port.   I also have masquerading Internal -> External but I cannot get the thing to work.

I have also tried a global filter of Any -> Any  to no avail.

Any help would really be appreciated as I am getting to the point when I think that I will have to wrap up this project.

Many thanks.


This thread was automatically locked due to age.
Parents
  • 0
    Things would be easier if you didn't have the netgear router.
    Can you put the router in bridged mode, or remove it altogether?

    If not, you'll need to do NAT on it as well.

    Barry
  • 0 in reply to BarryG
    Barry,  Thanks for the reply.  
    I cannot see any settings in the Netgear that allows it to work in bridge mode, however I will search around some more.

    I had hoped ( probably a bit optimistically ) that setting everything to be diverted to a DMZ host would have created a sort of bridge.

    The other plan was to replace all the netgear filter rules with the IP address of the gateway, but as it is a bit more long winded I was trying the DMZ instead.

    Regards.
  • 0 in reply to Alasdair_01
    The DG834 series can't be put into bridging mode, as far as I can recall they have an inbuilt ADSL modem which can't be disabled. That might be just the "D" suffix version I am thinking of.

    Ian M
  • 0 in reply to RFCat_vk_01
    In any event, "Double-NATting" a network connection is a bad idea... it can affect things like VPN function, etc.  I'd eliminate the Netgear.  If you need it for wireless, just configure the internal interface and use it as an Access Point.  Not sure if it has anything to do with your HTTPS issue, but it's a suggestion.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Reply
  • 0 in reply to RFCat_vk_01
    In any event, "Double-NATting" a network connection is a bad idea... it can affect things like VPN function, etc.  I'd eliminate the Netgear.  If you need it for wireless, just configure the internal interface and use it as an Access Point.  Not sure if it has anything to do with your HTTPS issue, but it's a suggestion.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Children
  • 0 in reply to BrucekConvergent
    Thanks for the reply.   I have been trying to find a modem that doesn't have a router attached but cannot, but if it is going to connect via a LAN then isn't it going to have to work as a router and do NAT from my ISP allocated IP address and my internal address?
    Are there any modems that anyone can recommend?
    Many thanks.
  • 0 in reply to Alasdair_01
    The cheapo Westel that I got from Bellsouth (now AT&T) supports bridged mode, seems to work OK.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to Alasdair_01
    isn't it going to have to work as a router and do NAT from my ISP allocated IP address and my internal address?


    No, you don't need the modem to do NAT because Astaro will be doing NAT.

    A couple of years ago, almost all DSL modems were just modems, and not routers. Regardless, many DSL routers can be put in bridged mode.

    Try googling for the docs for yours, and for the default passwords as you'll probably need those as well.

    Barry
Cookie Information Banner