EFW Support

I install Endian 3.0 community edition, with 2 network card (red-green configuration). I use it to share the internet connection using the proxy, and i want to access from outside (internet) a web server on my LAN working on port 3000.  I use following port  forward rule:
Incoming IP: Uplink main uplink
Service: TCP/80
Policy: accept
Translate: webserverIP:3000
Allow From: any

but is not working, i test my red interface from a ping.eu site and show that the port 80 is closed

I read some old posts and proved all sugestion without any result.
Can any have any idea about the solution??

Thanks
   

Hi fsendoya

I think this will help you (remove space after http:):

http: //help.endian.com/entries/20061226-DNAT-Port-Forward-Basic-Setup

http: //help.endian.com/entries/20061216-DNAT-Port-Forward-Advanced-Setup

Gabriel

Thanks Gabriel
But, not help. My rule is identical to the basic setup, but still not working, another suggestions????

 

Hi fsendoya,

Try this:

http ://help.endian.com/entries/25766798-Troubleshooting-Port-Forwarding-

I think that you should use port 3000 on Service, not 80.

I have an e-mail server on green interface and works fine, but without changing port (webmail access on port 80).
I will try to reproduce your situation tomorrow.

Gabriel

Thanks again, i can't change the port 3000 for a webserver because is a webmail service that we use for many years. In the red interface for us, is better to use port 80 and redirect using a rule to that port (3000). I read the post that you suggest, and prove some instructions, but finally when i check from the internet, the port 80 is still closed. I use my Endian box like proxy too. Another idea?????

Fsendoya
   

You don't must to change webmail port.
Change the port forwarding rule (this is like like my rule):

Incoming IP: Uplink main uplink
Incoming Service/Port:
                   Service: User defined:3000
                   Protocol: TCP
Policy: accept
Translate to:
                   Insert IP: webserverIP
                   Port range: nothing
                   NAT: NAT
Access From
                   SourceType: ANY
Filter policy
                  ALLOW with IPS

And you check from Internet: webserverip:3000

Gabriel

Still nothing, some time a go i probe with another distribution and a same rule works, but finally i use Endian box because we have an Windows AD, and we use to authenticate on the proxy (its very easy to configure and put it work)

 

You can do a port translation without any problem, so it's ok to use uplink any/TCP/80 to webserver/TCP/3000

Check if webserver is using endian as default gateway.
If possible, check with another webserver, this is to discard any misconfiguration on your real webserver.