LinuxQuestions.org
Did you know LQ has a Linux Hardware Compatibility List?
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
LinkBack Search this Thread
Old 08-25-2005, 03:39 PM   #1
kozaki
Member
 
Registered: Jun 2004
Location: France, UE
Distribution: Arch Linux, Mandriva x86_64, Knoppix (Kaella), Ubuntu, ...
Posts: 89

Rep: Reputation: 15
Lightbulb [SOLVED] IPTABLES How to access web server on gateway from LAN?


Hi,

I configured Iptables (masquerading) and a Zope server on an old PII with 2 NIC cards running Arch Linux, making it my LAN gateway.
Everything runs fine so far, with SSH access to the server from LAN

Now I just can't figure out how may I get access to the zope site on the server from LAN :
neither public IP nore LAN's server/gateway IP are accessibles from the LAN Sad

IPTABLES config for the LAN (eth1) looks like this :
Code:
iptables -A INPUT -i eth1 -j ACCEPT
iptables -A OUTPUT -o eth1 -j ACCEPT
I need access to the zope portal as I'm its administrator

Do you know how to enable this ?

Last edited by kozaki; 08-26-2005 at 11:30 AM.
 
Old 08-25-2005, 09:07 PM   #2
DaveG
Member
 
Registered: Nov 2001
Location: London, UK
Distribution: Fedora 16
Posts: 160

Rep: Reputation: 41
Since you can access the gateway box over SSH from the local network, the problem is probably with the Zope configuration.

I have NO EXPERIENCE with Zope, but...

Is the service bound to all interfaces or just the WAN port? I had a similar probem with Apache HTTPd - I was the only person in the world that couldn't connect to it - I got eth0 and eth1 IPs mixed up!
 
Old 08-26-2005, 05:53 AM   #3
kozaki
Member
 
Registered: Jun 2004
Location: France, UE
Distribution: Arch Linux, Mandriva x86_64, Knoppix (Kaella), Ubuntu, ...
Posts: 89

Original Poster
Rep: Reputation: 15
As for Zope (I'm talking about this server as well as the previous version that was running on my desktop PC), I tell it to listen on local IP. 'cause if i tell it to listen on my external IP, it fail to answer any request.
Same thing happens if I make it runs on my desktop PC (GW NATing external requests to it).

Now, as you pointed it out, it might be different when Zope runs on a gateway, but this is unclear to me !


PS : note that Peter Harrison says on his excellent iptables page :
Quote:
As a general rule, you won't be able to access the public NAT IP addresses from servers on your home network. Basic NAT testing requires you to ask a friend to try to connect to your home network from the Internet.
 
Old 08-26-2005, 08:35 AM   #4
DaveG
Member
 
Registered: Nov 2001
Location: London, UK
Distribution: Fedora 16
Posts: 160

Rep: Reputation: 41
Ok, I think I understand....

The Zope service is set up to listen on a local IP address, with NAT doing port-forwarding to allow external access to it.

You won't be able to access the service from the LAN using the public IP address, but you should be able to acces it using the local IP address. Try using the local IP address rather than a domain name when you connect.

If that works then you just need to sort out local DNS. A quick solution is to put an entry in your /etc/hosts to override external DNS. (check /etc/nsswitch.conf also)
 
Old 08-26-2005, 11:27 AM   #5
kozaki
Member
 
Registered: Jun 2004
Location: France, UE
Distribution: Arch Linux, Mandriva x86_64, Knoppix (Kaella), Ubuntu, ...
Posts: 89

Original Poster
Rep: Reputation: 15
Smile

Hi DaveG,

Well, actually Zope was configured to listen to 'localhost' IP since that worked (from outside as well as locally) fine when it runned on my Desktop PC.

Now when i installed it on the gateway PC, I first configured it to listen to my ISP's provided IP, but it didn't run this way, so i renned back & told it to listen to 127.0.0.1 as before...

... until I made a better iptables configuration !

I just tried again :
- tell Zope to listen to my ISP's provided IP,
- try to access it from my desktop PC
and that just runs fine

The problem here was an uncomplete iptables configuration, then a wrong configuration of the web server.
Thank you DaveG for helping me to solve my problem
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are Off
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
[IPTABLES] open ext access to web server on GW server kozaki Linux - Networking 3 08-27-2005 05:11 PM
cannot access web server from LAN puding Linux - Newbie 11 09-07-2004 12:06 AM
Allowing access to FTP server on LAN using IPTABLES - Help please sergio3986 Linux - Security 2 12-18-2003 12:22 PM
iptables does not allow me to access internal web server. JawjLindo Linux - Security 2 11-10-2003 02:23 PM
Can't access Linux web server web pages from LAN client jaydave Linux - Networking 4 03-16-2003 02:38 AM


All times are GMT -5. The time now is 08:53 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration