Koozali.org: home of the SME Server

port forward

Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
Re: port forward
« Reply #30 on: July 02, 2015, 05:22:39 AM »
however

telnet SMEserver_ip 9000

says telnet: Unable to connect to remote host: Connection refused

from both the SME and the opensimserver

Please read again what I have written earlier. It seems you are still not understanding what I have written.

Offline janet

  • *****
  • 4,812
  • +0/-0
Re: port forward
« Reply #31 on: July 02, 2015, 06:33:28 AM »
enchesss

Port forwarding does not provide a method for connecting to your second server from workstations on the LAN (behind sme server).
You have been told why this is so a number of times in this thread.
Port forward ONLY works from external WAN sources to the LAN destination. It cannot forward internal LAN to LAN traffic.
You need to address the 2nd server using the LAN IP eg
http://192.168.2.18:9000

This is no longer a sme server issue. Port forwarding appears to be working correctly now.

Your problem is a network configuration issue.

Maybe you would be better off putting opensim onto sme server or perhaps proxy passing the whole domain to the second server, see FAQ for proxy pass.

Please search before asking, an answer may already exist.
The Search & other links to useful information are at top of Forum.

Offline enchesss

  • ***
  • 69
  • +0/-0
Re: port forward
« Reply #32 on: July 02, 2015, 06:54:41 AM »
Janet,

Apologies for the frustration (You have been told why this is so a number of times in this thread.)

however

I am still not able to access the opensim through the viewer by putting the localip address e.g. http://localip:9000

It says socket time out and seems to be getting blocked by the SME server

This means that currently there is no access to opensim on the local network - even from the host itself - because SME is blocking it

not sure if it is a network configuration issue -  can you explain where to find more info about this


Also - they are great suggestions about using a proxy pass

If you know how to install mono on SME to be able to run opensim then please point me in the right direction




Offline stephdl

  • *
  • 1,523
  • +0/-0
    • Linux et Geekeries
Re: port forward
« Reply #33 on: July 02, 2015, 07:29:43 AM »
Also - they are great suggestions about using a proxy pass

If you know how to install mono on SME to be able to run opensim then please point me in the right direction
http://wiki.contribs.org/Mono
&
http://wiki.contribs.org/SME_Server:Documentation:ProxyPass

Please if you can get something workable, can you upgrade the mono howto (not relevant yet to sme9)
See http://wiki.contribs.org/Koozali_Foundation
irc : Freenode #sme_server #sme-fr

!!! Please write your knowledge to the Wiki !!!

Offline enchesss

  • ***
  • 69
  • +0/-0
Re: port forward
« Reply #34 on: July 02, 2015, 07:51:43 AM »
Thanks Stefano

The Mono contribs is out of date and the links no longer work - hence running a second server

Will have a go at teh proxy pass - but still confused about this (and the need for it)

Is there any way to get access on the LAN to the opensim in the meantime?

work needs to be completed on it soon





Offline janet

  • *****
  • 4,812
  • +0/-0
Re: port forward
« Reply #35 on: July 02, 2015, 08:18:27 AM »
enchesss

Remove the port forward, remove the domain from the Domains panel & configure the proxy pass as per FAQ link.
It should take all of 5 minutes to do, so you will get an answer quickly.

Quote
Is there any way to get access on the LAN to the opensim in the meantime?

If still persisting with the port forward, then use whatever method (URL) that is accessible on the second server eg
http://localIP/opensim (or whatever).
If proxy pass works OK, then just use the same URL as you would use externally eg http://domainname/opensim

Please search before asking, an answer may already exist.
The Search & other links to useful information are at top of Forum.

Offline enchesss

  • ***
  • 69
  • +0/-0
Re: port forward
« Reply #36 on: July 02, 2015, 08:35:54 AM »
Janet

I would like to 'persist' with the port forward because currently the server is working well from the internet.

However there is currently no way to access opensim (using the opensim viewer) from the local network

by using the LAN_ip_address:9000 of the opensim server

Very confused -

can i set up a route? or masq?



Offline Daniel B.

  • *
  • 1,700
  • +0/-0
    • Firewall Services, la sécurité des réseaux
Re: port forward
« Reply #37 on: July 02, 2015, 08:52:37 AM »
I would like to 'persist' with the port forward because currently the server is working well from the internet.
You should define more clearly what's setup, what's working and what is not, 'cause nothing is clear to me. Here you're saying it's working from the outside
However there is currently no way to access opensim (using the opensim viewer) from the local network
by using the LAN_ip_address:9000 of the opensim server

And here that it's not working from the LAN. If it's working from the outside then your portfoward is already setup, and working. To access it from the LAN itself, SME is not involved at all, clients talk directly to the end box running your app, you you have to debug why opensim isn't responding on port 9000 (which is a non sens: why would it accept connexions from the outside and not from the LAN ?)
C'est la fin du monde !!! :lol:

Offline enchesss

  • ***
  • 69
  • +0/-0
Re: port forward
« Reply #38 on: July 02, 2015, 08:58:47 AM »
Thanks

The opensim server is accessible from the internet but not from the LAN - using the opensim viewer

I have absolutely no idea why

my only suggestion is that it is being blocked by the SME becuase it is the gateway and when I was using a modem/ router previously as the gateway - the opensim viewer worked well from the internet and the LAN


Offline Daniel B.

  • *
  • 1,700
  • +0/-0
    • Firewall Services, la sécurité des réseaux
Re: port forward
« Reply #39 on: July 02, 2015, 09:04:02 AM »
Nothing is being blocked by SME because SME is not (or should not) be involved. My guess is that in opensim viewer, you have setup WAN_IP:9000 instead of LAN_IP:9000 to reach the server. so packets are directed to the SME server, which has nothing running on port 9000, and as the packet isn't comming from the WAN side, the portforwarding isn't applied. Your old modem probably included a NAT reflexion mecanism (which can apply port forwarding also from the inside), which could explain why it's working before. Anyway, you should just use a correct DNS name/IP from the LAN and it'll work. If you want it to work from both inside and outside, you should setup your domain in such a way that the same name resolve to the public WAN IP from the outside, and to the LAN IP from the inside
C'est la fin du monde !!! :lol:

Offline janet

  • *****
  • 4,812
  • +0/-0
Re: port forward
« Reply #40 on: July 02, 2015, 11:10:18 AM »
enchesss

Quote
......when I was using a modem/ router previously as the gateway - the opensim viewer worked well from the internet and the LAN

Because there was no second server involved.
If everything was installed on sme server, you would not have any problem.

Quote
I would like to 'persist' with the port forward because currently the server is working well from the internet.

You need to use a different arrangement if you want the same URL to resolve from externally & internally when you are using 2 servers.

I suspect proxy pass may work & it will take you 5 minutes to find out.
You can easily & quickly revert to the port forward if proxy pass does not work as expected.

Remember the old saying, You can lead a horse to water, but you cannot make it drink !
Please search before asking, an answer may already exist.
The Search & other links to useful information are at top of Forum.

Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
Re: port forward
« Reply #41 on: July 02, 2015, 02:26:21 PM »
Maybe you would be better off putting opensim onto sme server or perhaps proxy passing the whole domain to the second server, see FAQ for proxy pass.

Proxy pass only works for http and https traffic. AFAIK, opensim isn't http.

Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
Re: port forward
« Reply #42 on: July 02, 2015, 02:27:36 PM »
The opensim server is accessible from the internet ...

Which means that port forwarding is working, and you have been wasting our time...

Offline enchesss

  • ***
  • 69
  • +0/-0
Re: port forward
« Reply #43 on: July 02, 2015, 03:52:05 PM »
Well - if I have been wasting your time - then I apologise for that

However - my concern is that there is still no way to demonstrate that I have been wasting your time because that comment implies that I have purposely sought to distract you - or - recklessly provided you with wrong information. Which I have not.

In fact - I have diligently followed your instructions - and still have several issues that will prevent the use of a SME server from being used because no solution has been provided.

If the port forwarding settings in the SME server-manager behaved as the port forwarding settings in the router - then there would be no problem, but they do not.

If your time has been wasted then - sorry - but I do not have a working solution - so maybe we can all benefit from learning how to fix it - otherwise - I can just return to the modem


Offline Daniel B.

  • *
  • 1,700
  • +0/-0
    • Firewall Services, la sécurité des réseaux
Re: port forward
« Reply #44 on: July 02, 2015, 03:57:56 PM »
You should just have started with the fact that the port forwarding is working (because access is working from the outside). Now, it looks like you expect portforwarding to work also from the LAN, but this shouldn't be needed. As expained, it was working before 'cause your modem has a NAT reflection mecanism, which is not the same as NAT (and IMHO, it was more working by accident than by design). A solution has been provided: from the LAN, clients should point directly to the internal machine running the opensim server, instead of pointing at the SME server itself. You can do this either by changing the IP to the internal one, or by using a DNS name which, from the oustide, resolves to the SME Server's WAN IP (that it'll pass through the port forwarding), and, from the inside, resolve directly to the opensim server's LAN IP
C'est la fin du monde !!! :lol: