This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Can't access website on port 81

I can't get to a website that's on port 81.  What settings do I need to enter in astaro (v7) to get this working.  I looked around on the forum and I'm confused if I need a packet filter or a NAT rule.  I would appreciate it if someone could give me a detailed description of what to do.

--Scott


This thread was automatically locked due to age.
Parents
  • Which way are you trying to access it?  (From internet to inside your network or from your network out to a remote web server ?)

    When calling the address of the website are you using www.blah.com:81 oryou want port 80 redirected to 81? (NAT)  You always need a packet filter rule.
  • You should only need a packet rule for port 81 (unless you've defined an Internal -> Any Service -> Any Destination rule).  Now, if you have the HTTP Proxy enabled, you will need to add a service for port 81 to the allowed protocols under the advanced tab.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • I do use HTTP Proxy.  

    I setup a service in the definitions section called HTTP Port 81
    Type: TCP
    Source: 81
    Destination: 1:65535

    Is the packet filter rule I need this: 

    Internal (Network) > HTTP Port 81 > Any

    Do I need to do anything else because of the HTTP proxy
  • I'm assuming you are talking about outbound access to an external site on port 81 ... if so...

    You've got it (the service definition) exactly backwards!  Service definition should be:

    Source Port=1024:65535
    Destination Port=81
    Type=TCP

    Add this service to your HTTP Allowed services in the HTTP Proxy Advanced Tab, as well as adding the packet filter rule as you have listed.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Reply
  • I'm assuming you are talking about outbound access to an external site on port 81 ... if so...

    You've got it (the service definition) exactly backwards!  Service definition should be:

    Source Port=1024:65535
    Destination Port=81
    Type=TCP

    Add this service to your HTTP Allowed services in the HTTP Proxy Advanced Tab, as well as adding the packet filter rule as you have listed.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Children