Problem with NAT redirecting specific port traffic

[jdanna]

Hi all-

I've been having a strange issue today...please see below!

Problem: I have a Win2K SP3 server with 1 external and 1 internal interface running RRAS acting as an internet router for a small LAN (4 internal clients with static private IPs). I'd like to route inbound internet traffic on port 1990 to one of the internal clients with an address of 192.168.0.21.

Background: The W2K server is running a small website on the external address that links to pages on being hosted on the internal machine running a webserver on port 1990. I need the link "http://externaladdress:1990" to be redirected to the internal webserver.

Tried: In the RRAS console, go to IP Routing/NAT/Properties of the external interface/Special Ports tab. I've added a TCP entry with the following data:

Public Address: "On this interface"
Incoming Port: 1990
Private Address: 192.168.0.21
Outgoing Port: 1990

Weird Part: This worked fine yesterday. However, today I get a 404 when browsing the http://externaladdres:1990 from the internet. Nothing has changed (that I can determine).

I've verified that the webserver on 192.168.0.21:1990 is up and running, as I can browse it from other internal clients. Blackice is running on the W2K server with rules set to allow TCP on port 1990. However, I've also tried it with the Blackice service stopped to no avail.

I know this problem may appear vague, but if anyone has any ideas please let me know! Also, if you need more info, please post to that effect.

Thanks!
Jeff

 

[Seaspray0]

Do you have a fixed ip address on your interent connection or is it dynamically assigned? If fixed...

http://x.x.x.x:1990

should work with x.x.x.x being your ip address to the public interface and from an internet client. To use the fqdn, it needs to be registered on a root domain DNS server accessible from the internet.

 

[jdanna]

Its a dynamically assigned address, however I am using a dynamic DNS service. A service runs on the server that, every 5 minutes, reports my external IP address to the company hosting my DNS. However, I've tried both

http://fqdn:1990

and

http://x.x.x.x:1990

with no luck.

 

[ScreeminChikin]

So is the web server running on the win2k server or the 192.168.0.21 box? Also, are you trying to hit that outside IP from a box on the phisical network or from a machine somewhere else? If you are trying to hit that outside IP from on the network, it wont work.

 

[GiaBetiu]

What is the error saying?
Activate the "maximum log of information" for your NAT. See the logs. What can you see there? Gia Betiu
giabetiu@chello.nl
Computer Eng. CNE 4, CNE 5, MCSE Win2K

 

[Seaspray0]

From the internet (not on your LAN), ping fqdn and see if your DNS provider is resolving to your dynamically assigned ip address.