Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 26 Jun 2003 20:35:15 +0800
From:      "Gav..." <ipv6guru@bigpond.net.au>
To:        Bill Moran <wmoran@potentialtech.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Web Server not allowing external visitors
Message-ID:  <000f01c33bdf$6591ddf0$0100a8c0@madaboutipv6>
References:  <001301c33a58$bbfb5690$0100a8c0@madaboutipv6> <3EF867AA.8060700@potentialtech.com>

next in thread | previous in thread | raw e-mail | index | archive | help

----- Original Message ----- 
From: "Bill Moran" <wmoran@potentialtech.com>
|
| I would suggest using natd's divert capability, because I've had it
working
| for a while with no problems.  I'm not sure if what you're trying to do
will
| even work.
| Alter your natd_flags to something like
| "-f /etc/natd.conf -redired_port tcp 192.168.0.1:80 80"
| (this will direct anything that comes in on port 80 to 192.168.0.1 ... see
| the man page for natd for more details on the syntax)
|

Hmm, no good for the current set up, I'm not trying to redirect port 80 no
more, I just
want to have 'this' port 80 available. Web Server on FreeBSD router machine
now.
And DNS updater program is also on router machine.

| > // 192.168.0.2 is on ed0 card going to internal network
| > //192.168.2.1 is on ed2 card going to another network (eventually web
server
| > proper)
| >
| > At this point I'd like to mention something in my ifconfig readout.
| >
| > Now, ed0 ed2 lp0 ppp0 seem to me to be fine (and must be if internal
network
| > can browse internet etc)
| >
| > tun0 , although above suggests it is working fine , gives me an unusual
| > alias address. :-
| >
| > tun0: flags=8051(UP,POINTTOPOINT,RUNNING,MULTICAST> mtu 1500
| >     inet 14x1xx.xxx.xxx --> 172.31.22.152 netmask 0xffffff00.
|
| I've seen this before.  A lot of ISPs are using private IPs for a lot of
| their routers and hop points.  If everything is configured properly, it
| works OK and doesn't cause problems (that I've seen) but ...
| Get your testers to try traceroutes to see how far traffic is getting.  I
had
| an ISP once that had an endless routing loop in one of their routers that
it
| took us a week to convince them wasn't our mistake.
| Also ... can the testers connect via IP or hostname?  Can they ping Ip or
| hostname?
|

I'll let you know when I get an answer.

| > Ok, I've masked my ISP assig ed IP address for now as it is
semi-permanent,
| > but why has it aliased with a Class C
| > internal IP address, when all my network is Class B 192.x.x.x addresses
,
| > can this be the cause of why external visitors can not access my
sites.???
| >
| > What other information do you need ???
|
| The results of ping and traceroute tests above would help narrow things
down.
|
| -- 
| Bill Moran
| Potential Technologies
| http://www.potentialtech.com
|


---
Checked for Viruses (Viri) , Gav...
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.491 / Virus Database: 290 - Release Date: 18/06/2003



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?000f01c33bdf$6591ddf0$0100a8c0>