Subject: Re: smoothwall and httpd questions
From: James Gibson (twistedhammer@subdimension.com)
Date: Wed Mar 20 2002 - 05:42:28 AKST
On Tue, 19 Mar 2002, Justin Dieters wrote:
>
> Hey all. Got a couple questions for you smoothwall and apache guru's..
>
> I am playing around with setting up my web server behind my smoothwall,
> but I had a couple questions pop up - one has to do with smoothwall port
> forwarding issue, and the other has to do with apache (or maybe it's a
> port-forwarding issue as well, i'm not sure)
>
> 1st) I have port forwarding going from my red interface (gci cable
> modem) to my green interface and then through a hub to my laptop, which
> is running apache. From outside the internal network I can access my
> site by going to the 24.237.x.x ip, and the connection gets forwarded
> and all fine. But when I'm trying to connect from inside my network, I
> have to go to 192.168.1.51, which is the IP assigned to me by
> smoothwall. Is there some way I can get set up so I can access my site
> from inside the green network by going to the 24.237.x.x ip?
a.) you might take a look at the exact rules that smoothwall sets up. the
file is /etc/init.d/firewall* (I don't remember the exact filename.. it
might be somehere else in /etc too) I distinctly remember the docs saying
something about the green interface not being allowed to talk to the
orange interface (which is the USUAL target for port forwarding.. see
below) so... maybe it's a feature, not a bug. =p
<soap-box>
b.) my security training forces me to point out the security problems
inherent in having your server on the same subnet as your internal
computers. if someone breaks into your server they have access to all your
machines. the usual way to set this stuff up is to have the server on a
seperate network, so if the server is penetrated all the hacker has access
to is that single machine.
</soap-box>
That being said.. it IS your setup, so it's your call. =)
>
> 2nd) When I go to my site, instead of opening up index.html in the web
> browser it asks be to save it to the hard drive. I've tried Netscape,
> Konquorer on my computer, IE on another computer, lynx from UAA, and I
> had a friend in Idaho try it and they all do the same thing, so I'm
> guessing it's something with apache being set up wrong, instead of a
> browser issue. Although I think it might have to do with smoothwall's
> port forwarding messing something up. I am using SuSE 7.3's default
> configuration, with the exception of the host address and such changed.
> If you want to try it for yourself, the ip is 24.237.9.180..
Sounds like a mime-type issue, except that you said you didn't tweak
anything, and your site a.) appears to be feeding the correct mime-type
and b.) works fine for me (Mozilla 0.9.8). =) have you tweaked anything
since sending this e-mail?
>
> Any ideas?
>
> Thanks,
> Justin
>
James Gibson
twistedhammer@subdimension.com
This archive was generated by hypermail 2a23 : Tue Mar 19 2002 - 20:09:01 AKST