web server when in server only mode

[SailFishing]

I have my bubba 2 set up in server only mode connected via the LAN port to a netgear wifi adsl access points LAN port, I have set up port forwarding on the router to ports 80 and 443. this appears ok.

I can access bubba from the lan but when i put my public ip address in the connection times out...

Any help with this would be great...


Many thanks,

Kev

[acidtv]

Does your bubba use the correct default gateway?

[SailFishing]

I think so, if i log in via ssh I can ping internet ips...

[acidtv]

Did you try to reach your public ip from outside your local lan?

Maybe you can use tcpdump to check if the internet traffic actually arrives at your bubba;

Code: Select all

$ su root
# apt-get install tcpdump
# tcpdump -i eth1 port 80

[SailFishing]

Which repository should i be using? I have the excitos listed in /etc/apt/sources.list and got package not found message,

thanks for the help

kev

[acidtv]

My sources.list includes:

deb http://update.excito.org/ marielle main
deb http://update.excito.org/ upstream_etch main
deb http://ftp.se.debian.org/debian etch main

Don't forget to 'apt-get update' if you change your sources.list

[SailFishing]

Have just checks my sources, I have the same, so ran apt-get update and tried again, still to no avail... any other ideas?

[acidtv]

Hmm no, it should be working

[SailFishing]

Have tcpdump installed from debian...
When doing nothing I get...
20:21:28.573003 IP bubba.localdomain.www > 192.168.0.4.49929: S 1264493341:1264493341(0) ack 1095086393 win 5840 <mss 1460,nop,nop,sackOK,nop,wscale 4>
20:21:31.972894 IP bubba.localdomain.www > 192.168.0.4.49928: S 930983809:930983809(0) ack 981089741 win 5840 <mss 1460,nop,nop,sackOK,nop,wscale 4>
20:21:52.572892 IP bubba.localdomain.www > 192.168.0.4.49929: S 1264493341:1264493341(0) ack 1095086393 win 5840 <mss 1460,nop,nop,sackOK,nop,wscale 4>

When trying to access i get...
listening on eth1, link-type EN10MB (Ethernet), capture size 96 bytes
20:23:17.271510 IP 192.168.0.4.49935 > bubba.localdomain.www: S 4089324630:4089324630(0) win 8192 <mss 1460,nop,wscale 2,nop,nop,sackOK>
20:23:17.317062 IP bubba.localdomain.www > 192.168.0.4.49935: S 3305561865:3305561865(0) ack 4089324631 win 5840 <mss 1460,nop,nop,sackOK,nop,wscale 4>
20:23:20.259129 IP 192.168.0.4.49935 > bubba.localdomain.www: S 4089324630:4089324630(0) win 8192 <mss 1460,nop,wscale 2,nop,nop,sackOK>
20:23:20.259299 IP bubba.localdomain.www > 192.168.0.4.49935: S 3305561865:3305561865(0) ack 4089324631 win 5840 <mss 1460,nop,nop,sackOK,nop,wscale 4>
20:23:20.972892 IP bubba.localdomain.www > 192.168.0.4.49935: S 3305561865:3305561865(0) ack 4089324631 win 5840 <mss 1460,nop,nop,sackOK,nop,wscale 4>
20:23:26.260521 IP 192.168.0.4.49935 > bubba.localdomain.www: S 4089324630:4089324630(0) win 8192 <mss 1460,nop,nop,sackOK>
20:23:26.260697 IP bubba.localdomain.www > 192.168.0.4.49935: S 3305561865:3305561865(0) ack 4089324631 win 5840 <mss 1460,nop,nop,sackOK,nop,wscale 4>
20:23:26.972892 IP bubba.localdomain.www > 192.168.0.4.49935: S 3305561865:3305561865(0) ack 4089324631 win 5840 <mss 1460,nop,nop,sackOK,nop,wscale 4>

local ip of bubba is 192.168.0.2? not sure what 4 is??

[acidtv]

The ip of your pc?

[SailFishing]

Yeah i checked that after i posted last night, 192.168.0.4 is the pc i was using... So it looks like the traffic is getting through? I am just trying to view the default page in home/web/ could it some sort of firewall (http from www is enabled), what I dont understand though is doesn't bubba just see this connection coming from the router?

Would it be possible to connect the WAN port to the network at the same time as LAN port with a different ip and forward the services I want to that instead of the LAN card ip? or is that the wrong way to go?

[SailFishing]

My appologise, this appears to work, i just tried browsing to the site from a proxy based anonymous site and it works, must not like trying to connect to itself from inside the network using the outsite ip...? not sure why?

My question is now, I can access up to admin password from outside, Id like to disable this / store my site in a different location to add sequrity any thoughts?

[asparak]

Have a look back through the forums. There was a howto about 2 weeks ago telling you how to secure the outside webserver.