Koozali.org: home of the SME Server

Cant access sites internally

Offline freemilk

  • 4
  • +0/-0
Cant access sites internally
« on: December 01, 2008, 04:04:02 PM »
I am sure this is a simple fix, i just cant seem to figure this one out.

sme 7.4 router / gateway 10.4.2.1
1 website, site.com

site is hosted on sme in primary/html
i have port forwards to another windows 2003 server, port 99 one site, port 8888 a moodle site.

externally everything is fine, can get to the main site and the webmail, and site.com:88 and site.com:8888

internally i can only get to site, and webmail..

is there some way to fix it so i cna access site.com:99 and site.com:8888 internally..?

i would just use ip:8888 or ip:99 however the mysql doesnt allow me to do that, it has to be www.site.com:8888

HELP

thanks.


Offline gzartman

  • *
  • 306
  • +0/-0
    • LEI Engineering & Surveying
Re: Cant access sites internally
« Reply #1 on: December 01, 2008, 11:28:19 PM »
Make sure your internal DNS is working correctly, in that all internal hosts resolve to the correct local IPs.
----
Greg J. Zartman
LEI Engineering & Surveying

SME user and community member since 2000.

Offline freemilk

  • 4
  • +0/-0
Re: Cant access sites internally
« Reply #2 on: December 02, 2008, 04:31:34 AM »
my computers are set to use the SME box as the dns
sme server ip is 10.4.2.1

dns 1 = 10.4.2.1
dns 2 = isp dns "tried 10.4.2.1 and others"

internally i can get to
site.com
www.site.com
but not www.site.com:8888
or:99
seems the port forward doesn't work internally.



Offline gzartman

  • *
  • 306
  • +0/-0
    • LEI Engineering & Surveying
Re: Cant access sites internally
« Reply #3 on: December 02, 2008, 05:04:33 AM »
You did not answer the question.

Once again, is your internal DNS setup correctly and can you resolve local IPs for the servers you are after?

In most instances, can simply ping the server from a client using the command:  ping hostname.

It is one thing to think you have set DNS correctly and another to know DNS is working.

Test your network.
----
Greg J. Zartman
LEI Engineering & Surveying

SME user and community member since 2000.

Offline freemilk

  • 4
  • +0/-0
Re: Cant access sites internally
« Reply #4 on: December 02, 2008, 05:13:33 AM »
 :eek:
Oops
Yes I can ping ip or hostname

Short answer typing on iPhone.  Lol

Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
Re: Cant access sites internally
« Reply #5 on: December 02, 2008, 06:22:06 AM »
site is hosted on sme in primary/html
i have port forwards to another windows 2003 server, port 99 one site, port 8888 a moodle site.

externally everything is fine, can get to the main site and the webmail, and site.com:88 and site.com:8888

internally i can only get to site, and webmail..

Port forwarding doesn't (and can't) work from the local network.

You'll need to access the internal sites via different URL from local network. Or use proxy-pass.

Offline freemilk

  • 4
  • +0/-0
Re: Cant access sites internally
« Reply #6 on: December 02, 2008, 05:32:42 PM »
Thanks for the help,, after working wiht my isp, we realised the problem is that SME isnt allowing port 8888 to go out, so it cant come back in..

how can i open 8888 up outgoing.

thanks

Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
Re: Cant access sites internally
« Reply #7 on: December 02, 2008, 11:08:21 PM »
... after working wiht my isp, we realised the problem is that SME isnt allowing port 8888 to go out, so it cant come back in..

SME server has no restrictions on port 8888 outbound traffic.

I've already given you the answer to your problem. You cannot use port forwarding to provide access to Internal websites from your local network. You need to use proxying on your SME server, or you need to use internal URLs directly from your LAN machines.