2 webservers behind firewall? HOW
D. Abuan
know how to port forward one webserver
if there is a request to my external PC's IP address at port 80. But I want
to set up another one....running NT (for
my room mate who wants to run IIS) how can I set this up????
--
Kart
"D. Abuan" <den...@exposoft.net> wrote in message
news:blKw5.2368$3u6.2...@news20.bellglobal.com...
If you have only one IP, you can't.
I think it's been answered hundred of times before, have a look in the
archives ...
> --
>
>
>
>
Cavey
> I have two webservers behind a Redhat 6.2 PC running IP Masquerading. I
> know how to port forward one webserver
This is something I stopped trying after losing every packet on the firewall
;)
So I set up apache on the firewall and used the proxy and reverse proxy
options
to redirect traffic to my webserver.
# httpd.conf
# << snippet >>
<VirtualHost _default_:80>
ProxyRequests On
ProxyPass / http://192.168.0.5/
# ProxyPassReverse / http://192.168.0.5/
</VirtualHost>
This routes everything comming in on port 80 to my internal server.
Using:
ProxyPass /other/ http://192.168.0.6/
would route to the seconds machine that now is reachable through
http://yourmachine/other/ ???
> if there is a request to my external PC's IP address at port 80. But I
want
> to set up another one....running NT (for
> my room mate who wants to run IIS) how can I set this up????
The only thing I can think of is to do the same thing you did on a different
port. Problem is that you
need to specify the port when you connect from the outside.
Hope this helps a bit.
Greetings,
Pim
Chris J/#6
>I have two webservers behind a Redhat 6.2 PC running IP Masquerading. I
>know how to port forward one webserver
>to set up another one....running NT (for
>my room mate who wants to run IIS) how can I set this up????
You could use ipchains with port forwarding, so any http requests coming
into (say) port 8000 get forwarded to port 80 on your roomie's IIS box.
Chris...
--
@}-,'-------------------------------------------------- Chris Johnson --'-{@
/ "(it is) crucial that we learn the difference / si...@nccnet.co.uk \
/ between Sex and Gender. Therein lies the key / \
/ to our freedom" -- LB / www.nccnet.co.uk/~sixie \
D. Abuan
But how would you tell a persons browser on the net to point to that port
8000 when a web
browser's default request port is 80? Any work around here??
--
"Chris J/#6" <ch...@infinitum.madhouse> wrote in message
news:8q09iq$4gm$1...@infinitum.madhouse...
Fester
>Thanks there Chris,
>
>
>But how would you tell a persons browser on the net to point to that port
>8000 when a web
>browser's default request port is 80? Any work around here??
Easy. Instead of http://www.foo.com/, use http://www.foo.com:8000/.
--
-- Fester
We like Roy.
======================================
Chris J/#6
>Thanks there Chris,
>
>
>But how would you tell a persons browser on the net to point to that port
>8000 when a web
>browser's default request port is 80? Any work around here??
>
Its a stanadrd part of the URL - just is rarely used (for obvious reasons :).
just point your browser in the direction of:
http://name.of.your.server:portnumber/
eg,
http://www.mymachine.net:8000/
Scott Alfter
Hash: SHA1
In article <blKw5.2368$3u6.2...@news20.bellglobal.com>,
D. Abuan <den...@exposoft.net> wrote:
>I have two webservers behind a Redhat 6.2 PC running IP Masquerading. I
>know how to port forward one webserver
>if there is a request to my external PC's IP address at port 80. But I want
>to set up another one....running NT (for
>my room mate who wants to run IIS) how can I set this up????
Use port forwarding for the other server. If yours is running on port 80,
though, your roommate's IIS will need to be forwarded from a different port
(say, port 81). The URL for your server's homepage will be
http://www.yourdomain.com, while his will be http://www.yourdomain.com:81
(or whatever port you decide to use).
If the idea of tacking on ":81" to the URL isn't too appealing, you can set
up Apache on your server to have http://www.roommates-domain.com go to a
redirect page to http://www.yourdomain.com:81. In this case, the IP
addresses associated with www.yourdomain.com and www.roommates-domain.com
need to be the same.
_/_
/ v \
(IIGS( Scott Alfter (remove Voyager's hull number for email address)
\_^_/ http://salfter.dyndns.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.2 (GNU/Linux)
Comment: For info see http://www.gnupg.org
iD8DBQE5xQftVgTKos01OwkRAo+0AKDMDic9xGFXqk5m0m+U6Tgw8FvDxQCfcSMD
3CGMweH8Ue3FNUXDffZxTZU=
=iAHh
-----END PGP SIGNATURE-----
Bernd Eckenfels
> I have two webservers behind a Redhat 6.2 PC running IP Masquerading. I
> know how to port forward one webserver
> if there is a request to my external PC's IP address at port 80. But I want
> to set up another one....running NT (for
> my room mate who wants to run IIS) how can I set this up????
Asuming you dont want to have two different ports (which is easy and will
work as long as you can tell the users what URL to use) you have to assign
your firewall two oficial ip addresses or use a reverse proxy with url
rewriting or host-name-based virtual hosts. Apache can do this for example.
Then you can assign two DNS names to your one official address, or you can
have two different directories point to two different servers:
www.aaa.com = www.bbb.com = 1.2.3.4
http://www.aaa.com/ -> http://10.0.0.1
http://www.bbb.com/ -> http://10.0.0.2
or
http://www.aaa.com/s1/* -> http://10.0.0.1/*
http://www.aaa.com/s2/* -> http://10.0.0.2/*
this is done in apache with mod_proxy like this:
--
NameVirtualHost 1.2.3.4
<VirtualHost www.aaa.com:80>
ServerName www.aaa.com
ProxyPass / http://10.0.0.1/
</VirtualHost>
<VirtualHost www.bbb.com:80>
ServerName www.bbb.com
ProxyPass / http://10.0.0.2/
</VirtualHost>
--
Greetings
Bernd
Willem
OK, I have the same problem (kind off).
I have a couple of switches BEHIND my firewall which have to be accessible from
the outside. So I want to be able to forward ALL ip-traffic to those machines.
When I do:
# route add -host $IP dev eth0
I can reach the switch (which has an IP-address that should be on the outside,
I know this should change, but bare with me).
Then, when I do an:
# ifconfig eth1:1 $IP
I can reach the firewall using the IP-address of the switch.
Now when i bring the interface down using:
# ifconfig eth1:1 $IP down
I can reach the switch behind the firewall using it's own IP-address for like
90 seconds (that's when the intermediate router decides to empty it's ARP-entry
:-)
OK, actually this is exactly what I want to achiev (only all the time instead
of just 1.5 minutes :-)
I want to reach telnet, snmp, http, and even ping of all the machines.
anyone know how to do this (port forwarding is out, but I was more thinking of
... ip-forwarding... ???)
>In comp.os.linux.networking D. Abuan <den...@exposoft.net> wrote:
>> I have two webservers behind a Redhat 6.2 PC running IP Masquerading.
>> I know how to port forward one webserver
>> if there is a request to my external PC's IP address at port 80. But
>> I want to set up another one....running NT (for
>> my room mate who wants to run IIS) how can I set this up????
Regards, Willem.
--
Please CC: W.Ko...@europe.com