my router is a debian box with dual NICs, routing to eth0 from the internet on eth1 using iptables


i have a webserver running on 192.168.1.5 on port 6080. When i request http://domain:6080 from within the same LAN as the webserver, I get connection refused. When I connect to http://192.168.1.5:6080 within the LAN, it works perfectly.
When someone outside the network requests http://domain:6080, it works fine.

I am currently using my super-unstable linksys router until I can resolve this, so that I can put the linux box back in.

yay for you guys!


edit: this happens with all ports that are accessed from within the LAN via the domain, so I need this issue to be resolved for all ports (although I suppose any fix would fix that)

When you do http://domain/server from the inside you will be getting the outside address as a dns response. So an inside device will be attempting to access the outside interface address. I don't know for sure if this is the issue but some routers will not allow it. You will probably need to use a static host entry if you really want to resolve the name. Is it really a biggy?

yes it is a biggy. I could live with it, but there are 3 other people in this house who use that server for hosting things(sites, images), and they wouldn't understand why it has always worked and now doesnt.

What is this about a static host entry? I wouldn't mind going an extra step or two to make this work

if you check out /etc/hosts its a file for manually entering hostnames. IP should theoretically check the hosts file first before attemting a DNS resolution, so if you stick an entry in it pointing your domain name at the internal address it should sort you out. You do need to do it on each of your workstations tho...

Its also possible that you need an IP tables entry specifically allowing traffic sourced from your internal network destined to the external address, that might also sort it.

the iptables solution sounds better, because then i could route the traffic to different computers internally depending on what port, right?

I actually run 2 webservers in the LAN, and it sounds like the static host file entry would route all requests to the domain from within the LAN to that one box, whereas with the iptables entry I'd be able to specify ports.

Is this the correct impression?