🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.os.linux.networking
Article #164

Re: IP-Chains and external access to internal network...HELP

#164
From: Anthony White
Date: Mon, 14 Feb 2000 00:00
46 lines
2286 bytes
Anthony White wrote:
> 
> Anthony White wrote:
> >
> > This is getting to much...
> 
> Please read on...I have more info to the following.
> 

Final information....

I have now got things to work and think
that some one out there may have had the
same issues as I.

The prolem getting it to work was the lack
of a IPChains rule to allow access on port 80.

When I installed Pmfirewall one of the options
was to say yes to a www server.  I said NO as the
firewall was not going to run as a server for
anything.  It is strictly a gateway.

Reading and cross referencing between various
documentation it turns out that if you want to run
a www server on an internal machine behind the
firewall machine then the rule must be set to ACCEPT
port 80 requests on the input chain.  If not set
the requests don't even reach the port forwarding
code before being 'killed'.

With port forwarding ON the request gets through
and is then forwarded to the internal network
as specified.

That is a clasic 'got-ya' situation.  Had I set
Pmfirewall up to allow the gateway to be a www
server, all would have been fine.

Well, it is a learning experience to work with
linux...:-)

Now I can attack getting mail up and running.


Anthony
Technical Details
Message-ID: <38A7EA4D.94F8D351@c031.aone.net.au>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail
References: <38A7C93C.B6CC7780@c031.aone.net.au> <38A7DD65.DB0D2A49@c031.aone.net.au>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: fa777,1b76483f642b37c2
X-Google-Attributes: gidfa777,public
X-Google-Thread: 102983,1b76483f642b37c2
X-Google-Attributes: gid102983,public
X-Google-Thread: 10669a,1b76483f642b37c2
X-Google-Attributes: gid10669a,public
From: Anthony White <movielink@c031.aone.net.au>
Subject: Re: IP-Chains and external access to internal network...HELP
Date: 2000/02/14
Message-ID: <38A7EA4D.94F8D351@c031.aone.net.au>
X-Deja-AN: 585694004
Content-Transfer-Encoding: 7bit
References: <38A7C93C.B6CC7780@c031.aone.net.au> <38A7DD65.DB0D2A49@c031.aone.net.au>
X-Accept-Language: en
Content-Type: text/plain; charset=us-ascii
X-Complaints-To: abuse@telstra.net
X-Trace: vic.nntp.telstra.net 950528634 139.130.11.172 (Mon, 14 Feb 2000 22:43:54 EST)
Organization: Movielink
MIME-Version: 1.0
Reply-To: movielink@c031.aone.net.au
NNTP-Posting-Date: Mon, 14 Feb 2000 22:43:54 EST
Newsgroups: comp.os.linux.networking,aus.computers.linux,redhat.networking.general