Koozali.org: home of the SME Server

Legacy Forums => Experienced User Forum => Topic started by: Smitheux on August 23, 2002, 01:43:32 PM

Title: Internet Access
Post by: Smitheux on August 23, 2002, 01:43:32 PM
Hello,
I have installed SME in server-only behind a Dlink router-n-switch (DI-206).
I've got a dyndn.org domain.name (mine.nu) updated normally.
All access in Lan (4 win98) works very well , but i can't access from WAN (Internet Access) neither to my server and my web site nor to e-bays.
I did understand that i had to forward port 80 from my router to my SME . I did my best but nothing good got out of that.
I really don't think that my ISP blocks ports (wanadoo).
This problem drives me crasy because i can't go ahead and conf. other mail and wab servers and stuff on my SME.
Please if you have resolved this problem post
I saw the white papers for filters of Dlink.... no results
If you met such a problem , need ur help.

Newb :)
Title: Re: Internet Access
Post by: Jan on August 23, 2002, 04:12:23 PM
Hello,

Opening only port 80 on the router will give you access to your webpage only. For mail you need at least port 25 open for smtp (mail). For https (webmail) you need port 465 (I think).

I myself have a server-only setup behind a router/firewall and have redirected some of these ports to the internal ip of the server. Using NAT portredirect option, I don't know the type of router you use but I imagine it will not be that different. (I believe its called the NAPT or NAT feature and it does allow you to redirect to a speciffic internal IP address)

You will also have to allow certain services to be accessible from the net using the server manager. (webmail and ftp and i-bays for instance) So the main job lies with NAT on your router and also setting the permissions on your SME.

I hope this helps.

Regards,

Jan
Title: Re: Internet Access
Post by: Smitheux on August 27, 2002, 07:28:41 PM
Jan wrote:
>
> Hello,
. Using NAT portredirect option, I don't know the
> type of router you use but I imagine it will not be that
> different. (I believe its called the NAPT or NAT feature and
> it does allow you to redirect to a speciffic internal IP
> address)
>
> You will also have to allow certain services to be accessible
> from the net using the server manager. (webmail and ftp and
> i-bays for instance) So the main job lies with NAT on your
> router and also setting the permissions on your SME.




Hello jan and others readers,
Sorry for answering lately : very very busy..
I thank you very much jan
My router - switch is a DLink DI-206 .
I gonna try what you 've suggested Jan.
I have tried,  a little time ago , to configure the NAPT menu of my Router , with no result.
Furthermore, my SME is wide opened to every connection inside or outside (ftp, web, ssh and so on)
I 'll post next to give results i was able to obtain
Title: Re: Internet Access
Post by: Ron on August 28, 2002, 07:28:59 AM
Hi,

I have done this with a NetGear Cable Router.  You should setup your server as Server and gateway with an option in the setup saying you have a firewall between the server and the Internet.

I have setup a Mitel Server Version 5.1 in server mode only plus another with a Version 5.1 server in Server-mode and Gateway in front of it and got the Server Mode only box to talk to the internet as well.  

From memory in the server mode setup there is a question about "Is there a server between you and the internet ", you supply the Internal IP address of the Server & Gateway box."

For users on the internet to connect to that box required a SSL connection with port forwarding turned on.  I've used Teraterm Pro or Putty.

Procedure was:
Teraterm Pro

1. Login to box attached to the Internet Eg www.mydomain.com using SSH service
2. Enter userid ID and password (User ID must have been given SSL Access)
3. Click on Setup, SSH Forwarding, Add,
     Forward Local Port = 443
     to remote machine = Internal IP Address of Server Only machine
     port = 443
4. Minimise TeraTerm Pro

5. Start your preferred Browser and type HTTPS://localhost/xxxxx

where xxxxx is the Web page or application.  I've run Twiggi via this method.

You can do the same with Putty.  Although the settings are slightly different.

Hope this helps

Ron