New user's registration have been closed due to high spamming and low trafic on this forum. Please contact forum admins directly if you need an account. Thanks !

Port forwarding

Got problems with your B2 or B3? Share and get helped!
Post Reply
Lars
Posts: 5
Joined: 03 Jan 2007, 05:02
Location: Lund, Sweden

Port forwarding

Post by Lars »

I am configuring the firewall with the following port forwarding:
SourceIP: All
Public port: 443
Private port: 443
Protocol: tcp

The resulting behaviour is now that any call to port forwarding from inside the firewall is redirected to my bubba.

e.g.
When I enter "https://www.avanza.se" in my browser, I end up at the website of my bubba!
pa
Posts: 308
Joined: 06 Dec 2006, 04:38
Location: Sweden
Contact:

Post by pa »

To which IP-address is it forwarded?

/PA
Lars
Posts: 5
Joined: 03 Jan 2007, 05:02
Location: Lund, Sweden

Post by Lars »

Here is the complete setup (i forgot the Private IP):
SourceIP: All
Public port: 443
Private port: 443
Private IP: 192.168.0.51 (=internal bubba2 server ip)
Protocol: tcp
pa
Posts: 308
Joined: 06 Dec 2006, 04:38
Location: Sweden
Contact:

Post by pa »

Hi Lars,

I have tried this myself and confirmed that it is a bug in our software. The portforward "hijacks" all traffic on that port and sends it along according to the portforward.

It it marked as a high priority bug and we will try to get this in an update as soon as possible.

/PA
pa
Posts: 308
Joined: 06 Dec 2006, 04:38
Location: Sweden
Contact:

Post by pa »

Just came to think of it, if I understand this correctly you want to open up https to the outside but not http? And that is why you can not use the checkbox?

If this is the case, you should select "Bubba|Two public port" and not do a regular portforward. Then enter 443 as port number.

This will allow access to Bubba|Two on port 443 without the above faulty behavior.

/PA
Lars
Posts: 5
Joined: 03 Jan 2007, 05:02
Location: Lund, Sweden

Post by Lars »

Yes, I don't want the ability to login to the admin or mail interface from a http connection, since I then might reveal my password.

I solved it by splitting the website in the apache setup so:
- The http connection lead you to my website.
- The https connection lead you to my bubba admin site.

In another idea I had, I wanted forward one port on the outside to another port on the inside, since the port on the outside was blocked on my office. This must wait until you have fixed the bug!

/Lars
pa
Posts: 308
Joined: 06 Dec 2006, 04:38
Location: Sweden
Contact:

Post by pa »

But this might still work, depending on weather the outside port is used for any other outgoing traffic or not.

Say you would like to forward port 222 on the external interface to port 22 on the internal, this would work as long as you do not try to access anything on from within your lan to somewhere in on the internet on port 222.

But maybe you can not choose the port freely since it needs to be open at your work as well.

/PA
Post Reply