Can't access the server that NAT'ed

reyman · #1 (**permalink**) 01-23-2004, 07:49 AM

Hi all,

I have read 'Web server / DNAT' from doc.astaro.org, but I still can't access the Web-server (with IP global) from outside. From inside, I can access with IP global to the web-server. Is it because I just use 2 ethernet, 1 for LAN and the other for External ? I put my web-server global IP in External Interface.

Thanks

bagira · #2 (**permalink**) 01-23-2004, 03:35 PM

reyman,
did you define an additional interface on your external nic with the official ip of the Webserver? If not, do so and also define a dnat pointing to your Webserver (internal IP)?But note, you cannot use the global nic inside your LAN, because the ASL does not support two interfaces with the same network behind. Have a
look at this page, i hope that will resolve your problem.

Cheers,
Bagira

SecApp · #3 (**permalink**) 01-23-2004, 04:01 PM

Failing that, you will have to be more specific and start listing your DNAT, masquerade, and packetfilter rules. (sanitize public IPs for security reasons...)

reyman · #4 (**permalink**) 01-24-2004, 06:08 AM

Hi,

It works now.. [img]/images/graemlins/smile.gif[/img] So now if someone access my web thru browser, they'll redirect to server A (local IP1) and if they access thru ssh, they;ll redirect to server B (local IP2).
I dont know why yesterday I can't make my NAT'ed server access from outside, maybe because of iptables that runs in webserver. I add another eth and add it in my /etc/modules.conf, right now I have 3 eth, but only 2 that active. I don't know if it has anything to do with my problems.
Thanks guys..