External access to internal server

[Guest]

[mediaguy]

Hello - I need to allow external access to a webserver that is behind Endian 2.4. I am lost as to how to configure the FW. Is anyone willing to point me in the right direction?

[llysty]

Hello - I need to allow external access to a webserver that is behind Endian 2.4. I am lost as to how to configure the FW. Is anyone willing to point me in the right direction?

Not something I've had to do but the first point in the right direction is to have the webserver in the orange zone. this allows you to open up traffic to the webserver while still protecting your internal network. Once in orange, it should just be a case of opening up the port to the orange segment.

I like the pdf manual on endian's website for more info on how to configure the firewall and concepts behind the different parts of efw and reckon this will probably get you to where you want to be (just remember as it's for the commercial 2.2 version, some stuff isn't available on community). I can't post a link here to it so go to the main endian website (endian dot com) and from the top buttons go: support: documentation. Pdf of manual is on the lower right of the page. Page 9 introduces you to the orange zone concept.

Good luck and post back if your struggling and I'll see if I can't help.

[mediaguy]

Thanks for your reply, but I have run into a problem. Endian doesn't seem to support onboard ethernet so I have two NICs installed to support my red and green networks. There isn't room on my board for a third NIC. Any ideas why the onboard ethernet doesn't work? When I go through the Endian Network Configuration eth2 is listed but has a red X in the link column.

[phqr58]

If you have no space to build a third card, the
alternative is to redirect the port 80 or port
are using the web server, the source can be
any network or network address or unique, destined for
ip on your LAN.

[mediaguy]

OK I have setup port forwarding using any uplink as the source and the server IP as the destination including the port. Still nothing. I'm thinking the firewall in my modem may be the problem. I've setup a Pinhole but am unsure what internal address to use - the firewall or the webserver.

If I run a port scan from t1shopper.com it says port 80 is not responding. Where do I go from here?

[llysty]

I'm struggling with my own portforward issues on efw but based on my current firewall, I would say the red ip address on efw.

[mediaguy]

Awesome! Thank you, that worked.

Now I need to make my external domain name resolve to an internal IP when used internally. Is there anything I need to do at the firewall level or is it all handled in DNS?