Re: [SLUG] Confusing Server setup.

From: vzd1s11k (vzd1s11k@verizon.net)
Date: Mon Nov 29 2004 - 18:50:56 EST


On Mon, 2004-11-29 at 18:19, Kwan Lowe wrote:
> > Ok here is my situation. I have a server (192.168.1.10) running E-Smith
> > SME server 5.6. On it i have my website and e-mail setup and working.
> > We will call it abc.com. I also have domain xyz.com and would like to
> > set it up on a Citadel portal site. My server does not have the
> > necessary dependencies to setup Citadel. I have it up and running on my
> > desktop.
> >
> > Ok enough background, what I want is a way to have xyz.com be
> > reccognized and served in my desktop and abc.com to be served on my
> > server. I already have port 504 forwarded on my linksys router to my
> > desktop but it does not redirect it to my desktop. Oh, Citadel runs
> > on https if that helps.
> >
>
> You can try running tcpdump on the desktop and listen for connections on port
> 504:
>
> [root@feynman] tcpdump port 504
>
> Then try to hit the website on that port from both internal and external
> machines. If you don't see anything then it's probably some routing issue.
>
> Keep in mind that most Linksys routers handle internal requests to external IP
> addresses in bizarre and creative ways. E.g., if you have an external IP of
> 11.12.13.14 and a 192.168.0. internal network (NAT), then accessing
> 11.12.13.14 from the LAN may not work as expected. This is doubly true for
> multiple external IPs, depending on which Linksys router you're using.
>
> As a workaround (and general security practice) you may want to setup
> different DNS zones for the internal and external accesses. I.e., internal
> requests to the DNS server will get served 192.168.0.x addresses; external
> requests get the external IPs.
>
> Though I'm not sure from your post, also keep in mind that any secured channel
> may have problems if the internal address does not match the external. I.e.,
> if your desktop is on the private network it will very likely fail
> verifications since many use hostname/ip combos as part of the validation.
>
> If the tcpdump doesn't return anything, make sure you're using the correct
> ports. HTTPS is usually on 443, IIRC.

Very enlightening
Thanks

-----------------------------------------------------------------------
This list is provided as an unmoderated internet service by Networked
Knowledge Systems (NKS). Views and opinions expressed in messages
posted are those of the author and do not necessarily reflect the
official policy or position of NKS or any of its employees.



This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 18:41:35 EDT