How to Map website to different port.

[mdwu]

I have two website on the same webserver. one site is port 80 and the other is port 8888

When I try to access the website that's for port 8888, it doesn't get to it, instead it brings me to the port 80 website. the only way around to manually put :8888 whenever from the browser. I am sure checkpoint can perform an automatic convert of port so the vistor from outside doesn't need to put :8888.

Example:

abc.123.com is port 80
def.123.com is port 8888

 

[lancelote]

this is not checkpoint which do this !
This is IIS or your redirection !


LaNceLoT

 

[mdwu]

Thanks Lancelote and I know that. I knew it's the IIS. But whenever def.123.com which suppose to go to the port 8888 website, it went to the port 80 website instead.

 

[Piloria]

you may be able to do this via port redirection (using Manual NAT rules)
the firewall is only interested in ip addresses and not aliases so if both your two websites have the same external ip address i dont beleive you can do this at the firewall.
if they have diferent external addresses you can create two objects for them (using external ip addresses) and one for the internal webserver.
then click on the Address tyranslation tab in firewall dashboard and add a new rule at the top (have to use rules add not right mouse click as it wont let you)
specifing original object and port and translated object and port.

 

[rn4it]

I believe Piloria is correct, if you look at your NAT rules you have Orig source, dest, service then translated source, dest and service. I think you can use the service columns to take care of your Port address translations. I haven't tested this. good luck

 

[stooo]

It will work with manual NAT rules, or you can use the http_mapped service, and change the advanced properties to read SRV_REDIRECT(80,0.0.0.0,8888) - which will re-direct traffic on port 80, to it's original ip (or change 0.0.0.0 to forward to a different ip) on port 8888

Both websites will need to be on different ip's for this to work. If they are both on the same ip, then you will need to allow normal http through on port 80, and use host headers on your webserver to seperate the 2 sites

 

[mdwu]

Thanks Stooo

with ip address, do you mean I need diiferent external ip or internal. I have only 1 legit public ip, i can assign 2 different internal ip, will this work with your method.

 

[Piloria]

if you only have one external ip then i think you are stuck. at trying to use the firewall.

i think a better approach would be have both sites on port 80 on the same ip but allow the webserver to diferentiate between them