Stange Access error using BSD router.

lil_drummaboy · 12-21-2004, 06:06 AM

Hi

I am running a OpenBSD 3.6 router with PF (obviously) and I am having troubles accessing from the outside of it from my windows machines. I'll 'draw' out my network map for you but people outside my network can access my site but I cannot. It's quite strange.

Here is how my network is setup:

Code:

     Motorola Cable Modem
               |
        Basic 3Com Router
       /            \
Windows            OpenBSD
Machines           Router
                      |
                    Switch
                      |
                   Servers

sbassett · 12-21-2004, 01:49 PM

Are you trying to access the public IP from the windows machines??? If so that will not work. You will be able to access them via internal IP. That will go for the same for FQDNs. If this is not the case, please ignore. I only thought this because of the comment that those outside could access.
Also, does the forwarding rules for the BSD router have a stipulation that it will be coming from the router? That will cause a problem.

lil_drummaboy · 12-21-2004, 06:02 PM

So maybe have an allow rule from the 3Com router. By everyone can access it, i mean that everyone can see it @ mydomain.info and my 3Com router's IP (dhcped from my ISP). So even though my router is accepting "from any to any" connections, i should I try specificaly allowing myself through the router?

Thanks

lil_drummaboy · 12-21-2004, 06:38 PM

That didn't work, still having major issues. I tested a "lynx mydomain.com" from the servers, same deal. I also commented out all block related rules on my PF and it still didn't work.

Please, can anyone help me?

sbassett · 12-22-2004, 04:51 AM

OK, you are attempting to access "mydomain.com" from within your network. Is this what the local network is being called? Or is this a registered domain. Either way it looks like it will not work. If this is a local domain, try hitting servername.mydomain.com. If this is a registered domain name, try hitting servername.mylocaldomain.com or just servername (as long as the hostname is either in a local DNS server or host file). If you are trying to access a public server that you are hosting from within your own network, it will not work. As you had posted earlier, other's from the outside can access this service, but you cannot.

lil_drummaboy · 12-24-2004, 10:03 PM

Hi,

Thanks for your reply. Currently i own the domain tvwd.info, before i had my bsd router, my servers were under my 3com router and from my xp machines connected to the same router, i could access the server via it's full public domain name www.tvwd.info. At that point my xp machines were using my ISP dns server and the request went through the dns tree outside my network and looped back to my server fine. Now that I have put the servers behind a bsd router, which i think isn't it's fault, it no longer works via www.tvwd.info. I wouldn't really care but it did work previously using the full domain name and now it doesn't. I don't see how putting the servers behind another router would matter seeing that the bsd router is NAT-ing so the 3com router (which is DMZing to it) should just think it is one single server and, correct me if i am wrong, should work exactly the same.

Thanks in advance for any replies.