Re: [SLUG] Confusing Server setup.

From: Kwan Lowe (kwan@digitalhermit.com)
Date: Mon Nov 29 2004 - 18:19:14 EST


> Ok here is my situation. I have a server (192.168.1.10) running E-Smith
> SME server 5.6. On it i have my website and e-mail setup and working.
> We will call it abc.com. I also have domain xyz.com and would like to
> set it up on a Citadel portal site. My server does not have the
> necessary dependencies to setup Citadel. I have it up and running on my
> desktop.
>
> Ok enough background, what I want is a way to have xyz.com be
> reccognized and served in my desktop and abc.com to be served on my
> server. I already have port 504 forwarded on my linksys router to my
> desktop but it does not redirect it to my desktop. Oh, Citadel runs
> on https if that helps.
>

You can try running tcpdump on the desktop and listen for connections on port
504:

[root@feynman] tcpdump port 504

Then try to hit the website on that port from both internal and external
machines. If you don't see anything then it's probably some routing issue.

Keep in mind that most Linksys routers handle internal requests to external IP
addresses in bizarre and creative ways. E.g., if you have an external IP of
11.12.13.14 and a 192.168.0. internal network (NAT), then accessing
11.12.13.14 from the LAN may not work as expected. This is doubly true for
multiple external IPs, depending on which Linksys router you're using.

As a workaround (and general security practice) you may want to setup
different DNS zones for the internal and external accesses. I.e., internal
requests to the DNS server will get served 192.168.0.x addresses; external
requests get the external IPs.

Though I'm not sure from your post, also keep in mind that any secured channel
may have problems if the internal address does not match the external. I.e.,
if your desktop is on the private network it will very likely fail
verifications since many use hostname/ip combos as part of the validation.

If the tcpdump doesn't return anything, make sure you're using the correct
ports. HTTPS is usually on 443, IIRC.

-- 
* The Digital Hermit   http://www.digitalhermit.com
* Unix and Linux Solutions   kwan@digitalhermit.com
-----------------------------------------------------------------------
This list is provided as an unmoderated internet service by Networked
Knowledge Systems (NKS).  Views and opinions expressed in messages
posted are those of the author and do not necessarily reflect the
official policy or position of NKS or any of its employees.



This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 18:41:25 EDT