Can only access the internet in DMZ

vanstarr · 11-29-2009, 09:46 PM

I've just set up a webserver and forwarded ports 80, and 22, and I cannot access the inernet on that machine but I can connect via ssh and visit a page on the server when on a different network.

When I put the router in dmz mode I can connect to the internet properly.

Any suggestions?

evo2 · 11-29-2009, 09:52 PM

Sounds like your outgoing nat is not setup. I'm guessing it was working earlier and somehow it got broken when you modified your router setup to forward ports 22 and 80 for incoming traffic. Please check your router configuration.

Evo2.

alunduil · 11-29-2009, 09:53 PM

What exactly is your setup? You talk about setting up a server as a DMZ through your router and you can't connect from the server to the Internet? But the reverse situation works just fine? Have you tried pinging from all possible directions and see what that tells you about your connection?

Regards,

Alunduil

vanstarr · 11-29-2009, 10:20 PM

Quote:

Originally Posted by evo2

Sounds like your outgoing nat is not setup. I'm guessing it was working earlier and somehow it got broken when you modified your router setup to forward ports 22 and 80 for incoming traffic. Please check your router configuration.

Evo2.

My router configuration looks fine. But you're right, it was working fine, then after I forwarded ports, it suddenly stopped working. I've pretty much looked through all my routers settings and havnt noticed anything wrong. Maybe I'm overlooking something?

vanstarr · 11-29-2009, 10:23 PM

Quote:

Originally Posted by alunduil

What exactly is your setup? You talk about setting up a server as a DMZ through your router and you can't connect from the server to the Internet? But the reverse situation works just fine? Have you tried pinging from all possible directions and see what that tells you about your connection?

Regards,

Alunduil

Yes that's correct. I tried pinging other domains but I get "unkown host". Now when ik putmy router in dmz mode it works fine. Maybe there is some other port that needs forwarding besideds 80 and 22

alunduil · 11-29-2009, 10:28 PM

What do you mean by, "put my router in DMZ mode?" Do you mean configure your server as a DMZ in the router? It seems like you simply have a DNS issue to work through regardless. So you have a router and a server and when the server is not the DMZ it can't get to the Internet, but when it is it can? What is the difference in /etc/resolv.conf in both of those cases?

Regards,

Alunduil

vanstarr · 11-29-2009, 10:37 PM

Quote:

Originally Posted by alunduil

What do you mean by, "put my router in DMZ mode?" Do you mean configure your server as a DMZ in the router? It seems like you simply have a DNS issue to work through regardless. So you have a router and a server and when the server is not the DMZ it can't get to the Internet, but when it is it can? What is the difference in /etc/resolv.conf in both of those cases?

Regards,

Alunduil

Yes, that's correct. There is no difference in resolv.conf whe sn I make the changes.
Would you like for me to cat /etc/resolv.conf?

alunduil · 11-29-2009, 10:41 PM

No, if there is no difference then an autoconfiguration isn't muddling with it. What kind of router are you using as your middle man?

Regards,

Alunduil

vanstarr · 11-29-2009, 10:47 PM

2wire 1701hg

alunduil · 11-29-2009, 11:09 PM

Does this link (http://www.avforums.com/forums/netwo...er-before.html) have anything like what you are observing? Without more information as to what's going on I don't know how helpful I can be in troubleshooting.

Regards,

Alunduil

vanstarr · 12-01-2009, 01:49 AM

Actually, I can't access the website from a different network when the computer is not in DMZ. Also, is it safe to just leave it in DMZ for the time being until I can get it fixed? What are the risks?

Any suggestions?

alunduil · 12-02-2009, 02:00 PM

Leaving it in the DMZ is just fine but be aware that you are making that particular host directly accessible from the Internet. Double check your security and everything should be just fine.

Regards,

Alunduil