How do I portforward webmin/ssl/ssh (the whole world) onto another box

FunkFlex · 04-16-2002, 09:23 PM

1) https uses ssl.. correct?

2) Do I need to open the port for https/ssl 443 inorder to serve https?

3) I want to foward ssl and webmin to another linux box, how do i do that? I've tried these commands:
$IPT -t nat -A PREROUTING -p tcp --dport 10000 -i $IEXT -j DNAT --to 10.0.0.2
$IPT -A FORWARD -p tcp -i $IEXT -o $IINT -d 10.0.0.2 --dport 10000 -j ACCEPT

are there any other ports that webmin might use?

unSpawn · 04-17-2002, 01:47 AM

1. Yes.
2. Yes. "Opening a port" is done by the webserver, the IANA designated port is 443/tcp, but you could SSLify any port, redirect port 80 and 808 to 443 if you want to go SSL-only, etc etc, it's all in how you configure the daemon. *This doesn't count for packages that SSLify their own connections like Webmin using some Perl-SSL module, it doesn't need port 443 open...
3. Run netstat and find out, but I think Webmin only runs 10000/tcp. Btw hope you're aware Webmin has plaintext passwds in older versions...

FunkFlex · 04-17-2002, 07:18 AM

Older versions of Webmin uses plain text!!

ATM i've got the very latest webmin version released a couple of days ago.. does it still matter?

unSpawn · 04-17-2002, 11:33 AM

Wouldn't know. Better check their website for that.

PostDeals · 04-17-2002, 12:48 PM

i have tried

iptables -P INPUT ACCEPT
iptables -P FORWARD ACCEPT
iptables -P OUTPUT ACCEPT

will that do?

FunkFlex · 04-17-2002, 08:30 PM

I've done it..

the webmin service uses port 10000

but the client (browser) uses a range of unprivalaged source ports
hence the final resolution was:
$IPT -t nat -A PREROUTING -p tcp --sport $UNPRIVPORTS --dport 10000 -i $IEXT -j DNAT --to 10.0.0.2
$IPT -A FORWARD -p tcp -i $IEXT --sport $UNPRIVPORTS -o $IINT -d 10.0.0.2--dport 10000 -j ACCEPT