Routing http port 80 traffic.

[NicBurns]

I have two ASDL one goes thorough a firebox and the other through a pix box I want to route all the port 80 internet traffic to the firebox is there anyway to do this without interrupting any other traffic that is separated out on these two devices.


It's always a PEBKAC problem.

 

[franklin97355]

Block port 80 on the one and allow it on the other?

 

[Castor66]

As these external ADSL lines can't have the same IP address just set the DNS entry of the server serving http traffic to the external IP of the firewall you want to serve port 80 traffic. Add a port forwarding rule to this firewall to send the port 80 traffic onto your webserver.

e.g.

http://www.domain.com

A 1.2.3.4 where 1.2.3.4 is the external IP of the pix. The pix then forwards port 80 traffic to the webserver.

Things will get awkward if you wanted anything more complex than this, e.g. HTTP on one firewall and SSL on the otehr firewall. You would need port redirection for that. The simplest way would be to hardcode any SSL links to go to something link secure.domain.com which points to the other firewall.

e.g. secure.domain.com A 1.2.3.5 where 1.2.3.5 is your firebox. The firebox then forwards port 443 traffic to your secure server.

Kludgy but it would work. You would need to remember to send the users back to the right server once any secure transactions are completed.

The last way to do this would be to get your upstream router to move the traffic for you. It would have a port forward rule on it which directs port 80 traffic to 1.2.3.4 and port 443 traffic to 1.2.3.5. Not feasible over ADSL though.

I suppose you would call this a DNS & Networking issue rather than an Ethernet issue.