Welcome, Guest. Please login or register.
Did you miss your activation email?
Thursday 26 December 2024, 08:45:45 am

Login with username, password and session length

Visit the official Endian Community Mailinglist  HERE
14262 Posts in 4377 Topics by 6517 Members
Latest Member: Sandro
Search:     Advanced search
+  EFW Support
|-+  Support
| |-+  General Support
| | |-+  Assigning PUblic ip and allowing LAN machine to be accesible outside world
0 Members and 13 Guests are viewing this topic. « previous next »
Pages: [1] 2  All Go Down Print
Author Topic: Assigning PUblic ip and allowing LAN machine to be accesible outside world  (Read 39837 times)
nicolethomson
Full Member
***
Offline Offline

Posts: 27


« on: Wednesday 09 November 2011, 12:53:50 am »

Hi
Good day everybody,
Forgive me for being so dumb,
I am trying to allow my apache webserver accessible for outside people, today my isp gave me a public ip,

Internet ->122.xx..12:80->192.168.1.2:80

at present i have only Green zone enabled, didnt use other zones. my machine is in Green zone. with static lan ip

How this can be done, since i dont know the terminology tobe used, not able to search through the forum.
pls help

Nic
Logged
nicolethomson
Full Member
***
Offline Offline

Posts: 27


« Reply #1 on: Wednesday 09 November 2011, 03:53:44 pm »

oh my god, is it so tough, havent even got a single response guide?
Logged
nicolethomson
Full Member
***
Offline Offline

Posts: 27


« Reply #2 on: Wednesday 09 November 2011, 07:39:04 pm »

is this the one i need to?

www . efwsupport . com/index.php?topic=1422.0

can someone out there help me pls
Logged
mrkroket
Hero Member
*****
Offline Offline

Posts: 495


« Reply #3 on: Thursday 10 November 2011, 02:21:27 am »

Because this is a basic routing question.
If you don't know how to make a port forward, I can't recommend you to make a public Web Server.             

Anyways, just use you public IP as RED interface, check that you can surf internet.
Then create a rule on Firewall->Port Forwarding to allow TCP ports 80 and 443  and forward them to your internal GREEN ip.
Logged
nicolethomson
Full Member
***
Offline Offline

Posts: 27


« Reply #4 on: Friday 11 November 2011, 03:14:17 pm »

thanks mrkroket,

i am trying to add another red interface, but not getting that, spent yesterday in searching, System->Network configuration->Ethernet Interface-> shows only orange and blue, red is not available.

Already in red interface i have added one public ip, but the isp provided me 8 more ip's, so i thought of using one of them other than my outgoing public ip, (btw, i am already using apache 2.2x webserver in amazon cloud which hosts my photos/),

now instead of paying amazon, i thought i will use the resource what i have.

If that is not wrong pls help me ..

Nicole
always we will be learning in our life .
Logged
mrkroket
Hero Member
*****
Offline Offline

Posts: 495


« Reply #5 on: Saturday 12 November 2011, 03:17:18 am »

Uplinks are defined on Network->Interfaces. But there is no need, you can add additional IP's to your same RED interface.
Logged
nicolethomson
Full Member
***
Offline Offline

Posts: 27


« Reply #6 on: Tuesday 15 November 2011, 03:43:22 am »

thanks mrkroket

accept my apologies for not responding for last two days.

added additional IP's to same red now.

and did port forwarding 122.xx..12 Incoming service port 80 -> Translate to 192.168.xx.12 port/range 80 NAT  clicked on enabled.

position after rule number 1


is this right
Logged
mrkroket
Hero Member
*****
Offline Offline

Posts: 495


« Reply #7 on: Tuesday 15 November 2011, 03:54:58 am »

That's correct. You can also use the <ANY Uplink> instead of your public IP, it's easier if by any reason you change your public IP or have more than one.
Logged
nicolethomson
Full Member
***
Offline Offline

Posts: 27


« Reply #8 on: Tuesday 15 November 2011, 06:25:52 am »

still not able to access?

actually for 121...20 the subnet is 255.255.255.252

and the public ip i am trying is 122...12 /255.255.255.248

is that the reason it is not allowing to access?
Logged
nicolethomson
Full Member
***
Offline Offline

Posts: 27


« Reply #9 on: Wednesday 16 November 2011, 05:51:12 pm »

okay had some success with a compromise

yes, i move the port forwarding rule moved to top, but now the openvpn seems getting affected,

Uplink ANY  <ANY>ALLOW with IPS     192.x.x.13    up0down0disable0add_external0anyedit0delete0
     ALLOW with IPS from:  <ANY>

Uplink ANY  <ANY>ALLOW with IPS     192.x.x.2   vpn

can u pls help me
Logged
mrkroket
Hero Member
*****
Offline Offline

Posts: 495


« Reply #10 on: Thursday 17 November 2011, 02:04:51 am »

You dont need to create any openvpn rule, they are auto-created.
On port forward rule you must define the ports you want to relay.  TCP 80 for http and TCP 443 for https
Logged
nicolethomson
Full Member
***
Offline Offline

Posts: 27


« Reply #11 on: Thursday 17 November 2011, 03:21:21 pm »

thanks for spending your time

initially i tried with 80 when i was having difficulty, i tried it with "any any",

yes openvpn generated its own rule, but here i am finding the issue is who will be first, if webservice is in first, then i can access the webserver, vpn is not working, if vpn is in first then it works fine, but webservice is having difficult.
Logged
nicolethomson
Full Member
***
Offline Offline

Posts: 27


« Reply #12 on: Friday 18 November 2011, 04:25:13 pm »

still i am priorotizing the rule manually, is there any ways we can do this?
Logged
mrkroket
Hero Member
*****
Offline Offline

Posts: 495


« Reply #13 on: Saturday 19 November 2011, 04:07:44 am »

You must do something wrong. Port forwanding works ok when you define ports.
I can't recommend to tweak anything to get the ANY ANY rule to work.  Maybe tweaking the config templates, but it's better to just create the correct rule.

I attached the incoming rule I have for HTTP. It works for me.
Logged
nicolethomson
Full Member
***
Offline Offline

Posts: 27


« Reply #14 on: Friday 25 November 2011, 05:34:13 pm »

really dont know where i am doing wrong,
Logged
Pages: [1] 2  All Go Up Print 
« previous next »
Jump to:  

Page created in 0.109 seconds with 21 queries.
Powered by SMF 1.1 RC2 | SMF © 2001-2005, Lewis Media Design by 7dana.com