My lan clients cannot browse internal web server.

[mawdryn]

Hello All,

This may be difficult to explain, but I'll try.

I have a network with 5 systems. 3 windows, 2 linux.

Linux box 1(NAT router) is a Redhat 8 system with two network cards and and ADSL connection to the outside world.

Interface 1 is eth0 which services the internal
windows clients.
Interface 2 is eth1 which is services the other linux
system. (NOT set up as DMZ presently)

Linux box 2 is a Slackware 8 system which is a http/ftp server.

Problem is that the windows machines on eth0 cannot browse to web server using the domain name or external ip address. Only by the private IP address. These windows machines can ping the web server fine by int/ext ip or domain.
Even the webserver itself cannot browse to the external ip or the domain name

It may be worth noting that any external host can browse to the web server fine.

I feel it's an iptables rule problem, as I had to manually add a rule to allow ftp'ing from eth0/1 to work.

I'm using gShield as the firewall script.
I currently have forward set up that looks like this:
================================================
Allow from Type Sourceort Destinationort

0/0 tcp 0/0:80 192.168.1.2:8080
0/0 tcp 0/0:8080 192.168.1.2:8080
================================================

If anyone has any ideas, I'd be very grateful... maybe even a different firewall prog. Must be console configurable as the router does not have httpd or xwindows on it.

 

[mawdryn]

Here's something that may help...

Telneting to the webserver from the router on port 8080

[root@espace tboon]# telnet espace.hopto.org 8080
Trying 203.102.232.29...
telnet: connect to address 203.102.232.29: Connection refused

[root@espace tboon]# telnet 203.102.232.29 8080
Trying 203.102.232.29...
telnet: connect to address 203.102.232.29: Connection refused

[root@espace tboon]# telnet 192.168.1.2 8080
Trying 192.168.1.2...
Connected to 192.168.1.2.
Escape character is '^]'.
<Ctrl C>
Connection closed by foreign host.

 

[mawdryn]

Ok, Now I'm convinced it's a firewall issue, as I set up http and webmin on my router (192.168.0.1) and can browse to it using the domain, espace.hopto.org from the windows machines...

crazy stuff...

 

[mawdryn]

Hello All,

All fixed now.

I added the following iptables rule:

iptables -t nat -A PREROUTING -d espace.hopto.org -p tcp --dport 80 -j DNAT --to 192.168.1.2

and now it routes properly. yay!

thank you everyone for the effort you have gone to to help.
Appreciate it very much.