webpage redirection behind a secure site

uks · 02-06-2009, 07:30 AM

Hello ,

I have installed a monitoring system(zenoss) behind a secure site https:xxxx.com

Now I want to redirect anythhing that hits the site like this example:

https:///xxxx.com/zport -> redirect to http://192.168.76.222:8080/zport

which means that the xerver xxx.com can reach the machine 192.168.76.222 .

When I write the follwoing in ssl.conf

ProxyPass /zport/ http://192.168.76.222:8080/zport
ProxyPassReverse /zport/ http://192.168.76.222:8080/zport

I get to the login screen of the site ok, but once I login it says"page cannot be displayed"....

Any assistance would be greatly appreciated.

--Ukesh Upendran

redhawk1973 · 02-06-2009, 09:10 AM

Use Iptables to redirect the website to the port.

I am running Zenoss and I have the redirect in place.
Since I am not in the office. I can not post the code.
When I get into the office I will post the code that I used

uks · 02-09-2009, 04:39 AM

Thanks very much for the suggestion.
I am looking forward to the code you are going to post.
Is it as simple as directing all traffice that hits the actual machine on port 8080 to the machine you have zenoss on ?
I am awaiting your response.

uks · 02-10-2009, 01:10 AM

Another thing I noticed here was that the redirection happens only for the first screen, and any other page after that, the url converts to http://192.168.76.222:8080/zport from https://xxx/zport/....
and hence becomes inaccessible. So I want the redirection to be stable and never convert to the ip. Where am I going wrong ?

camh · 02-10-2009, 05:49 AM

You might want to look into mod_rewrite for the url conversion

redhawk1973 · 02-11-2009, 10:10 AM

This is the command I used
iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 8080

uks · 02-12-2009, 09:57 AM

Thanks much for that.
I have got the Rewrite rule to do this.
In this case I think you are redirecting the access from port 80 to 8080.
But I have zenoss on a different machine altogether and the weserver on a different machne, meaning, if someone access xxxx:80/zenoss it should go to machine yyyy:8080

I greatly appreciate your suggestion, Thank you.