Koozali.org: home of the SME Server

Cant port forward ?

Offline steve288

  • *
  • 336
  • +0/-0
Cant port forward ?
« on: January 16, 2007, 05:49:01 PM »
I have two sme systems.  SME6 and SME7 (indicating the os version)
SME7 has two network cards where one is connected to the local net and the other to the outside with its own ip address. Both are server/gateways.

I simply want to go from SME7(201.x.x.x):80 --> to  SME6(10.1.0.251):80
So from outside to inside. From port 80 on sme7 to port 80 on sme6.
Its just a web page.  Im asuming that is the way I would do it.

But when I do it, it never gets forwarded. In fact you just get the enabled web page on sme7.

Can anyone idenify where the problem lies or what Im missing?

Regards

Offline bpivk

  • *
  • 908
  • +0/-0
    • http://www.bezigrad.com
Cant port forward ?
« Reply #1 on: January 16, 2007, 07:06:49 PM »
Well i don't see the point in having two servers and forwarding web from one to another but you should know that your server manager (correct me if i'm wrong) won't work as well.
"It should just work" if it doesn't report it. Thanks!

Offline steve288

  • *
  • 336
  • +0/-0
Cant port forward ?
« Reply #2 on: January 16, 2007, 10:05:52 PM »
Im not sure I know what you mean. Unless what you mean is that I cannt run the server-manager from the outside web address. Unless I enable with htpps. In either case I will will not be using it from out side.

I just want to forward a web page from one sme7 to sme6 Outside to inside. This doesnt seem to work for me.

Thanks

Offline bpivk

  • *
  • 908
  • +0/-0
    • http://www.bezigrad.com
Cant port forward ?
« Reply #3 on: January 16, 2007, 11:42:38 PM »
But why would you need two servers if one can do the job of both?

And what i ment to say is that if you disable https (on sme7)  server manager on it won't work at all.
"It should just work" if it doesn't report it. Thanks!

Offline steve288

  • *
  • 336
  • +0/-0
Cant port forward ?
« Reply #4 on: January 17, 2007, 02:37:38 PM »
Actually I dont want to do this. Its is just a test to see IF I can do it.  It seems like a simple thing to do, that should work for me out of the box. Once I do it I want to do some other things with it. But I cant even do this seemingly simple thing. Does anyone know how to do it? Or where I might be going wrong in how to do this.

Regards

Offline raem

  • *
  • 3,972
  • +4/-0
Cant port forward ?
« Reply #5 on: January 17, 2007, 03:59:38 PM »
steve288

> Does anyone know how to do it? Or where I might be going wrong in how to do this.

The proxy pass contrib will forward a web site to another server, not sure if that's what you want to do though.

If you really want to port forward I think you have to stop using that port before you can forward it.
...

Offline steve288

  • *
  • 336
  • +0/-0
Cant port forward ?
« Reply #6 on: January 17, 2007, 05:19:22 PM »
Im sorry I dont know what you mean ?

>The proxy pass contrib will forward a web site to another server, not >sure if that's what you want to do though.

What is the proxy pass contrib, Is that the the software that comes with sme that I have been using in the server-manager/security/portforward ? If that is what you are talking about, I have tried this but I cannot seem to get it to work. Thats really what the original question was. That this built in software I cant get to work. I set it up but nothing happens.


>If you really want to port forward I think you have to stop using that >port before you can forward it.
Sorry I dont really know what you mean.
If i port forward sme7 port 80 to sme6 port 80. doesnt it automatically forward it from sme7 to sme6.

Thanks

Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
Re: Cant port forward ?
« Reply #7 on: January 17, 2007, 08:26:43 PM »
Quote from: "steve288"

But when I do it, it never gets forwarded.


Are you quite sure? Port forwardings only work, and can only be tested, from the Internet side. You can't test a port forwarding from the local network.

Offline steve288

  • *
  • 336
  • +0/-0
Cant port forward ?
« Reply #8 on: January 17, 2007, 08:34:36 PM »
Thanks for your response.
I have a dial up  connection as well as a dedicated connection. I have tryed from the dial up but I still cant seem to work.

Thanks
Regards

Offline raem

  • *
  • 3,972
  • +4/-0
Cant port forward ?
« Reply #9 on: January 18, 2007, 03:32:16 AM »
steve288

> What is the proxy pass contrib

Install the contrib from here and configure it using the new panel added to server manager. It will redirect requests for a certain web site URL to another server or URL.
http://www.saco-support.de/index.php?_m=downloads&_a=view&parentcategoryid=3&pcid=0&nav=0



> If i port forward sme7 port 80 to sme6 port 80....

Try forwarding a different port that is not in use eg port 8080 or 9090 to see if it works for you.
...

Offline steve288

  • *
  • 336
  • +0/-0
Cant port forward ?
« Reply #10 on: January 18, 2007, 10:29:39 PM »
Thanks for the advice.

I have downloaded and installed the proxypass software.

Im not sure what Im suppose to put in the various windwos. Ive tried to search on the net but dont really understand it.

For example if Im trying to get to the exchange server which is
10.1.2/exchange I put /exchange/ int the path and
10.1.0.2/exchange/ in the target. I get the following error.

"Error occurred while restarting httpd-e-smith."

Im not sure what Im suppose to put in the fields?

As far as your other comment
>Try forwarding a different port that is not in use eg port 8080 or 9090 to see if it works for you.
I a have tried a variety of things. Do you mean forward port 8080 of one comptuer to port 8080 of another ? I have tried that but I could not get it to work. If you mean something else please explain.
thanks

Offline raem

  • *
  • 3,972
  • +4/-0
Cant port forward ?
« Reply #11 on: January 19, 2007, 02:16:34 AM »
steve288

For a ProxyPass URL entry, enter
/exchange/
and
http://10.1.0.2/exchange/

but the ibay (exchange) must exist on your  first server and the URL must be a valid site on your second server.

If you then access http://yourmaindomain/exchange it will redirect you to the other server.


I'm thinking the ProxyPass virtual domain entry may suit your purposes better.
I assume it is a domain that you are forwarding, so just select that domain from the pull down list and then set the target to a valid URL ie http://10.1.0.2/exchange/


> Do you mean forward port 8080 of one comptuer to port 8080 of another ?
> I have tried that but I could not get it to work.

That's what I mean (assuming you are not using port 8080 already ie with Dansguardian), but your answer "I could not get it to work" tells us virtually nothing. You have to tell us exactly what you entered, where you entered it, what you did to access it and where did you access it from.
Also get someone who is external to your site to try accessing it & advise outcome.

After setting the port forward try restarting your server for changes to take (in case they are not taking).
...

Offline steve288

  • *
  • 336
  • +0/-0
Cant port forward ?
« Reply #12 on: January 19, 2007, 10:20:33 PM »
Thanks for your help, I have had some limited success.
Here are my notes.

Firstly a few notes ProxyPass.
*************************
I created an Ibay called exchange
I put http://10.1.0.2/exchange/ into the Virtual domain entry
Then I go to my outside ip address (vial dial up connection) and it gives me the password for the exchnage and seems to be opening the outlook web mail window, a frame shows, but then after about 30 seconds it dispalays “page cannot be displayed in the two frames.

Being that exchange I think is suppose to work on htpps:// I duplicate the above settings accept I put in the address https (note S)
This time get Bad Gateway – The proxy server received an invalid response from an upstream server.

Next I try something simpler.
I put in  http://10.1.0.251/ in the Virtual domain entry. (Am I suppose to create a ibay for it, I don’t know) anyway when I do this it works fine. When I put in my browser my outside ip http:// 123.456.123.123 it automatically takes me to the internal web site. Great wonderful, unfortunately what I really want to work is the exchange.


Using port forwarding.

I try to port forward from sme7(outside ip address)  to sme6  (which is a web page Inside address)

I put from tcp port 9090  to port 80 of sme6 (ip 10.1.0.151)
I dial up from Internet, (completely different service provider that we use in house)

I put in browser:
 http://sme.7.ip.outside.ipaddress##:9090
I get “
“Page cannot be Displayed.”

When I look at IPTraf on both computers SME7 and SME6 I see the following.

IPTraf from SME7
****************
.---my.dial.up.ip.##:3463                         =       3       186 S---   eth1  
|
.---sme.7.ip.outside.ipaddress##:9090                        =       0         0 ----   eth1  



IPTraf from SME6
***************
.---my.dial.up.ip.##:3464                         =       2        88 RESET  eth0  │
|
.---10.1.0.251:80                               =       1        48 S-A-   eth0

Internally I can get to the web site by putting in a browser by typing in http://10.1.0.251/

When you look at the IPTraf it looks like it works but it does not.  I just get Page cannot be displayed.  I dont understand.

Offline raem

  • *
  • 3,972
  • +4/-0
Cant port forward ?
« Reply #13 on: January 20, 2007, 09:30:20 AM »
steve288

What is the real URL that will access exchange (obfuscate it if you wish) ?
You should use that.
...

Offline steve288

  • *
  • 336
  • +0/-0
Cant port forward ?
« Reply #14 on: January 22, 2007, 05:28:56 PM »
Well the real url is the internal url.

Of course its an internal address.

eg http://10.1.0.2/exchange
we also have a forward that takes you there internally if you just type
http://10.1.02