LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Server (http://www.linuxquestions.org/questions/linux-server-73/)
-   -   secure server with ssl (http://www.linuxquestions.org/questions/linux-server-73/secure-server-with-ssl-800906/)

deco5003 04-08-2010 09:10 PM

secure server with ssl
 
I installed a debian lenny server. Now I have working apache with a web site, proftp and ispconfig3.The server is a secure server with ssl certificates, redirecting the request to https. Also a got a DYN DNS account for server.dnsalias.com and I had enabled that service on the cable modem the service is active. The problem is that I can access the web site with https://server.dnsalias.com but I cannot access ISPCONFIG3 or PROFTPD. I must use the server ip https://192.168.1.100:8080 or ftp://192.168.1.100
What I need to do in order to have access to this apps by server.dnsalias.com
>Thanks

mweed 04-08-2010 11:19 PM

Are you literally using the 192.168.x.x IP addresses or just using RFC1918 space as an example? If those IPs are the ones you are using you problem is that ports 8080 and 20/21 are blocked on the firewall. I am assuming you are using NAT from here on.

The dnsalias record will be using the public IP address. So when you try to access that IP it will go up the network stack and get NATed to the public ip. It will then attempt to access that public IP, but as if it were coming from the outside.

Configure your firewall to allow traffic from your public to your public IP.

Another, less likely, possibility is that you have a dynamic NAT situation where multiple private space IPs share a single public space IP. If this is the case they port forwarding is already set up for port 80. Add ports 8080 and 20/21 the same way port 80 is added. Be mindful of security consequences on access to administrative and ftp ports from the general internet. Only look into port forwarding if you know you are using dynamic NAT.

deco5003 04-09-2010 10:26 AM

secure server with ssl
 
Thanks for the advice IT Works!! I just enable that ports on the Firewall Cable Modem admin page and thats it!.

Thank you

deco5003 04-10-2010 01:24 PM

Configuring Mail Server
 
I installed a Debian lenny server. Now I have working apache with a web site, proftp and ispconfig3.The server is a secure server with ssl certificates, redirecting the request to https. Also a got a DYN DNS account for server.dnsalias.com and I had enabled that service on the cable modem the service is active. Now that I was able to enable the necessary ports on the cable modem firewall page I got everything working on. Now I can access my server from Internet. But I still need to do something. And is to setup the Mail server with squirrelmal. I try to follow this guide: “Virtual Users And Domains With Postfix, Courier, MySQL And SquirrelMail (Mandriva 2009.1 x86_64) Version 1.0 Author: Falko Timme”. First I don’t know if this guide also applies to Debian. And second I have this question. The domains table will store each virtual domain that Postfix should receive emails for (e.g. example.com). But in my case which would it be deccom.com (my hostname is dec1.deccom.com) or the one that I use to have internet access. This is deccom.dnsalias.com
Thank for your advice.

deco5003 04-12-2010 07:39 PM

Configuring a Mail server
 
Oh Thanks I found this new guide http://www.howtoforge.com/virtual-us...l-debian-lenny I guess is more appropriate than the other I was trying to follow. Well it just remains the question about the domains table which will store the virtual domain that Postfix should receive emails for (e.g. example.com). In my case which domain name must be included in this table? The domain name of host (dec1.deccom.com) or the one that I am using to connect the server to Internet deccom.dnsalias.com.
Thanks for the advice


All times are GMT -5. The time now is 11:13 PM.