Koozali.org: home of the SME Server

How do I setup a DMZ

edlentz

How do I setup a DMZ
« on: February 05, 2006, 10:26:48 PM »
I need to expose a machine on my network to the internet.  I am using SME in Server/Gateway mode.  Is there a How to somewhere?

Thanks

Offline tog

  • **
  • 31
  • +0/-0
    • http://dev.wordevelopment.com
How do I setup a DMZ
« Reply #1 on: February 05, 2006, 11:14:09 PM »
On the left hand nav, go to port forwarding.  Is you need more specific info, repost.

Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
Re: How do I setup a DMZ
« Reply #2 on: February 05, 2006, 11:22:20 PM »
Quote from: "edlentz"
I need to expose a machine on my network to the internet.


You can't (at least not without doing major surgery). You can expose selected ports on the machine, using port forwarding.

edlentz

How do I setup a DMZ
« Reply #3 on: February 06, 2006, 03:27:09 AM »
Port forwarding isn't working I can't  get to an Apache server behind the SME Server.  Enetered a bug report several days ago, been trying things there, was looking for another way.

Thanks

Offline Jean-Philippe Pialasse

  • *
  • 2,907
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
How do I setup a DMZ
« Reply #4 on: February 06, 2006, 09:44:41 AM »
It's not a bug...

I had the same question. As the SME box has already an Apache/httpd server, you need to configure this server via the template-custom system of the httpd.conf to forward all the adresses you want for the http.

I.e.: if you want http://www2.mydomain.com to point to a local machine
or http://www.mydomain.com/serveur2/ or both, or more.

To know how to do it, simply search in the apache docs.

You can trigger port but it will works only from the outside of the LAN: trigger port public IP 8080 (on ethernet card 0)  to IPlocalmachine 80 (on ethernet card 1) => http://www.mydomain.com:8080/bonjour.htm will only works from the outside. Inside not working because you are working only on the eth card 1 !

For other protocols, you need to trigger port, or destroy the architecture of the sme if it is already working a deamon for this protocol.

Jean-Philippe

Offline rick1908

  • ***
  • 56
  • +0/-0
    • http://theevansfamily.com/
How do I setup a DMZ
« Reply #5 on: February 06, 2006, 12:01:54 PM »
Is is possilble to use the hostnames section of server-manager and publish the internal workstation globally?

I do not know how to ellaborate on this more but just thought this might generate some discussion on the possibility.

-Rick
Seeeeeeeeeeeeeeee ya,
Rick :pint:

Offline funkusmunkus

  • *
  • 220
  • +0/-0
How do I setup a DMZ
« Reply #6 on: February 07, 2006, 02:10:52 AM »
Quote from: "edlentz"
Port forwarding isn't working I can't  get to an Apache server behind the SME Server.  Enetered a bug report several days ago, been trying things there, was looking for another way.

Thanks


try proxypass http://mirror.contribs.org/smeserver/contribs//aloveless/contribs/proxypass/
.........