Ubuntu Servers :: Apache2 SSL Forward To Another Port?
Dec 1, 2010
I have an apache2 server on a Debian box that I am using as the reverse proxy for my sites that are sitting behind it and everyone is happy. But now I want to be able to access my vmware server console from outside the network without exposing the vmware server port to the internet. So I did this I created a new virtual host for apache and it looks like this (edited for the real world)
Code:
<VirtualHost *:80>
ServerName server.my.domain
# RewriteLog "/var/log/apache2/rewrite.log"
# RewriteLogLevel 9
[Code]....
So here is what I want to be able to do. I want to be able to punch in [URL] and have the reverse proxy just take care of everything else without having to punch in the port number or anything else. I'd also like to have if possible the ssl on the vmware box just pass through the proxy back to the end user. If that isn't possible and I need to create a new ssl for the apache box then that is ok too. I have googled this and looked at several other sites but I'm still a little bit lost.
View 2 Replies
ADVERTISEMENT
Feb 9, 2010
i have a web site and i need to forward all requests to the same page. Basically i would like to show a maintenance page while we are working with our database behind the application and in the meantime i would like to redirect all url in the root directory as following :
http:[url].....
http:[url]....
i tried to perform the action using mod_rewrite in this manner :
Code:
RewriteEngine On
RewriteRule . http://www.mysite.com [L][code].....
The webpage at http:[url]....has resulted in too many redirects. Clearing your cookies for this site or allowing third-party cookies may fix the problem. If not, it is possibly a server configuration issue and not a problem with your computer.
View 2 Replies
View Related
Jan 6, 2010
I'm running some vm's in FC12 with kvm-qemu and using virt machine manager. I'd like to have some ports automatically forward on startup and be able to add redirections on the fly. Redirection on the fly is talked about here, but I am getting lost on what should be basic instructions.[URL]
As far as startup, In the past I just ran qemu from the cli and manually specified redirection with redir. I can't figure out how to do it with The virt machine manager which I am using to start my VM's now. I do not want the guests to see the host. From cli startup without virt machine manager, it looked like this: qemu -m 256 -hda vm.img -redir tcp:5555::80 -redir tcp:5556::445 &
View 2 Replies
View Related
Apr 4, 2011
I'm trying to use iptables in order to forward all the incoming packets for port 5555 to port 5556 on the same server (192.168.2.101).
I wrote the following commands:
iptables -A PREROUTING -t nat -i any -p tcp --dport 5555 -j DNAT --to 192.168.2.101:5556
iptables -A FORWARD -p tcp -m state --state NEW -d 192.168.2.101 --dport 5556 -j ACCEPT
View 3 Replies
View Related
Feb 20, 2010
I'm using a Debian servers, as router/firwall.. I've two ethernet interfaces into the server, one for wan and one for lan. The i use SNAT so my LAN clients can access the internet throgh the debian router. That is working... Now i want to be able to access servers on the LAN site from the WAN site, and i wanna use port address translation (PAT). I have a FTP server running on a lan server, so i'm trying to portward port 21.
iptables -t nat -A PREROUTING -p tcp -i eth1 -d (WANIP) --dport 21 -j DNAT --to 192.168.1.2:21
When people try to access my FTP from the WAN site, they are redirected to the local FTP server, and they are promted for crendentials, but when the credentials are typed, and the local ftp server should answer the wan request, the connections dies.
The wan clients are being promted for credentials, so they are redirected to the local lan server, but after that the connections dies, so i think there is some kind of nat problem, when the local lan server is trying to respond to the wan request..
Here i my iptables script:
#flush table
iptables -F
#input regler
[code]....
View 6 Replies
View Related
Aug 5, 2009
If I forward port 80 to port 3128 for squid with an iptable rule, does port 3128 have to be open on the firewall or is this all routed behind the firewall?
View 4 Replies
View Related
Apr 29, 2010
I tried following the instructions below but I don't see the "Automatically map port" option. What am I missing here??[URL]
View 1 Replies
View Related
Jan 22, 2010
I'd really like to know how to port forward firefox, so I can browse and stream my movies faster... is this possible?
View 8 Replies
View Related
May 4, 2010
I`m running a rather simple iptables script, but no matter what port i try to forward it wont open. Here are the basics:
Code:
ipt="/usr/sbin/iptables"
$ipt -F
[code]...
View 2 Replies
View Related
Apr 1, 2010
I have a host and a client both running linux. Host has internet through eth2. Client needs to share that connection. The computers are connected directly using a crossover. I can ping from both fine. I figured I needed to port forward eth2 to eth0 to gain internet access in the client. How?
Code:
eth0 Link encap:Ethernet HWaddr 00:26:18:a6:fd:a3
inet addr:192.168.0.1 Bcast:192.168.0.255 Mask:255.255.255.0
inet6 addr: fe80::226:18ff:fea6:fda3/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
[code]...
View 5 Replies
View Related
May 16, 2010
While I have Transmission running, whether it be up/downloading or just open with one thing unpaused and no activity, all other computer functions that need internet access are unusable. Transmission says my port is closed in its preferences.
1. How do I find and open port?
2. Will finding an open port solve the problem of all things internet not working while Transmission is?
3. Do I need to create a static ip in order to forward a port through my router?
4. Will creating a static ip and forwarding that port solve my problem of only being able to use the internet while Transmission is on?
View 9 Replies
View Related
Jan 28, 2010
I have ssh installed, using port 22. I installed apache2, and forwarded port 82 to 80. For some reason, the following message occurs when connecting to IP:
82: SSH-2.0-OpenSSH_5.1p1 Debian-6ubuntu2
I can view my page file through things like http://localhost.
View 2 Replies
View Related
May 7, 2009
I need to forward a port to use dtella. I'm using Fedora 10, using iptables for my firewall.
I'm currently trying to forward it from terminal with this command:
Code:
sudo iptables -t nat -A PREROUTING -p udp -i eth0 -d [ip address] --dport 11823 -j DNAT --to 192.168.0.2:80
this is what I get from iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
[Code].....
View 9 Replies
View Related
Feb 9, 2011
Just setup an ssh server...kinda. I need to forward the port (22) through my router. I have forwarded ports before for programs so the whole thing isnt a mystery. But i need to know what to put in for a couple boxes.... Private ip: ? protocol type: tcp, udp, or both?
View 3 Replies
View Related
Jul 27, 2011
Well I have been searching for more than a month now and I think I have read every single post related to this subject and finally decided to make a thread.
Now before I begin I am running Openvpn on my CentOS VPS. I have set static IP's for everyone.
Now what I am looking for is this lets say one of my clients wants port 60005 forwarded through my VPS to the internet what are the correct commands to run.
server-ip:60005 to loacl-ip:60005
Sever IP 24.xx.xx.xx
Client IP 192.168.1.2
View 3 Replies
View Related
Nov 15, 2010
Lets say i have two machines on public ips. If i get incoming traffic on machine #1 on port 55242 i would just like to forward it to machine #2 on port 35000.I would just like to use machine #1 same way as a dns server works. It just redirects the traffic and tells the client where to go.
View 6 Replies
View Related
Sep 28, 2010
I can't port forward to ftp behind my firewall, I tried several attempts but none worked.
Can anyone help me solve this?
View 10 Replies
View Related
Mar 24, 2011
I notice that my bittorrent client is capable of automatically setting up port forwards with my router, and I want to know if I can do the same in a shell script. The reason is, that since my router is stupid and won't let me keep static IP addresses (it seems they forced a DHCP refresh every week to make me want to pay for a more expensive model which doesn't), I need to get my computer to change the port forward to follow my computer's changing internal network IP address. I have a couple of port forward manually entered into my router settings for web interfaces to bittorrent etc, but of course these have a good chance of being invalidated at each DHCP refresh cycle.
View 1 Replies
View Related
Mar 22, 2010
Having trouble visualising how IP-Based Virtual Host (with SSL) would work. Here is my vhosts.conf file:
Code:
#Define Name Virtal Host
NameVirtualHost 10.10.0.54:80
#Used to replace the main server host. The log file will reside in /var/log/httpd/error_log
[Code]....
How will it work? I will need to forward port 443 to the 10.10.0.55 interface right? Without doing that, there is no way this is going to work... is there? And that means that I can't run more than 1 ip-based SSL virtual host on one machine because I can't forward 443 to two different interfaces.
Also, do I use internal ip address or external ip address in the <VirtualHost > tag? I only have one static public ip.
View 5 Replies
View Related
Nov 23, 2010
I have just set up the transmission bittorrent client on my server (using the web interface), and am trying to get the port forwarding right. After noticing low download speeds (and rare uploading), I decided to check if a port needed to be forwarded.
I found many conflicting sites, mentioning both the ranges 6881-6999 and the port 51413 (as well as TCP and UDP versus just TCP). My current configuration is to forward TCP and UDP port 51413 to my server.
View 2 Replies
View Related
Jun 2, 2011
My kind isp had set up a authoratitive dns server that can't be cancelled that points to the wrong ip address. Hence I need to take all the traffic going into server A at the ip address aa.aa.aa.aa and send it all onto server B at ip address bb.bb.bb.bb. After much head scratching, I managed to achieve it as follows:- On the server at ip address A, set up following :-
iptables -t nat -A PREROUTING -d aa.aa.aa.aa -j DNAT --to bb.bb.bb.bb
iptables -t nat -A POSTROUTING -d bb.bb.bb.bb -j MASQUERADE
View 1 Replies
View Related
May 17, 2011
Im trying to learn BIND DNS! (yes im bored) Running Ubuntu Server 10.04 LTS.
What files to edit.
1) I want to add a A record for a machine
2) I want to forward none-discoverable lookups to another DNS server.
I found on google seems a bit harsh for me to understand.
View 2 Replies
View Related
Mar 5, 2010
I am using Squid Proxy Server alongwith Dansguardian, dhcp3 and ClamAV on my local network. Everything is working fine except for .flv files like [URL]. The problem is that Squid wants to download the whole .flv file first to its cache and then serve it to the client.
It has an advantage that the whole video loads at once on the client's browser but that is not what our users want.
What they want is that these files load on the fly as they do on a normal internet connection. How do I configure squid to serve .flv files on the fly to the client PCs?
View 9 Replies
View Related
Sep 8, 2010
I have linux server setup on a network with 2 interfaces. One (eth0) is connected to the regular network and the other (eth1) has a DHCP server and transparent web cache listening on it. The machines connected on the eth1 side are on a different subnet and the linux server is there gateway. Untrusted machines are introduced to this network to keep them isolated.
This isolation works well, too well. There are a small set of resources on the regular network I would like to make available to machines on untrustworthy network. I think I need to use iptables but alas I've had no luck in piecing together the command I need (in one case looking myself out and having to physically reset the machine).
View 3 Replies
View Related
Sep 13, 2010
I am not a complete GNU/Linux newbie, each day I discover how little I know of this wonderful OS. The title of this post is actually a question for which I already have an answer, however, I can't seem to figure out why this happens. In order to enable ip_forwarding, I always enable it the same way, by issuing an:
#echo "1" > /proc/sys/net/ipv4/ipv4_forwarding.
I don't enable forwarding at boot time on purpose, I prefer to do it manually if the server crashes.
The thing is, I always write rules for iptables in order to enable it to NAT my packages through the router. However, last night, I forgot to load the proper iptables script, and instead, used a script I am currently tweaking. In this script, no rules are listed for both the forward chain and nat table in the POSTROUTING chain. Since forwarding was working (to my surprise, I might add) this could only mean, that the kernel default forwarding policies include masquerading. Is there a way to verify this?
View 9 Replies
View Related
Apr 17, 2010
my server runs fedora 12 i686 LXDE and has an 80 gig hd.on ftp i have a high volume of files that do not fit on the 80 gig hd, however if i could somehow connect to a lan fileserver on the lan and make it accessible through the server, all my problem would be solved. how do i do this?the reason i dont attach more HD's to the server is that all my hard drives are sata and the server doesnt support this
View 11 Replies
View Related
Feb 4, 2010
I think my apache2 is owned and running as root. I don't know if I installed it like a noob a while ago but I would like to secure it now especially since I just figured out how setup virtual hosts and I may want to eventually let people host sites on my server and I obviously don't want to have to give them root access. How can I confirm that apache2 is running as root and how do I take it away from the root user?
View 6 Replies
View Related
Aug 29, 2010
I am using Ubuntu Server 10.04 64bit. I am getting an Apache2 start up error after I setup my certificates and configure Apache2 for HTTPS. At the point on start up where I need to type in my certificate pass code I get a lockup due to the Apache2 process being in a hung state. I reboot if needed and switch to console tty2. When I type in the command.
Code:
I get the following error.
Code:
To correct the problem I do this.
Code:
From the output of the command above I look for the apache2 process and make note of its process ID. Then, I kill that process ID. For example, the command below has an apache2 process ID of 1131.
Code:
Next, when I run this command.
Code:
The apache2 server starts up and asks for my certificate password, accepts it when I type it in, and runs perfectly fine afterward.
Fortunately this instance of Ubuntu Server is running inside a VMWare virtual machine. I can just "pause" the virtual machine if I need to rather than going through this crude and tedious start up process too frequently.
Crude and tedious are feelings I'm having too frequently lately with Ubuntu Server.
View 5 Replies
View Related
Oct 18, 2010
I've reinstalled my system and installed apache. I've installed php5. 'a2enmod php5' returns with a message telling me that php5 is already enabled.
However, this code does not parse:
Code:
</php
phpinfo() ;
/>
I get a blank page. When I view the source code for the page, I see the php code.
How do I get php to work?
View 3 Replies
View Related
Jan 5, 2011
So I've got a box running 10.04LTS Server, and on it is running the latest build of Apache2.It's a home box - a server set up for the sole purpose of experimenting and having fun with. So far, the fun is mostly breaking it over SSH and then fixing it when I get home and can log into it via recovery.What I really want to do is to get this box set up with Apache2 the way it seems like it was designed - with Apache2 serving web pages from its default file location (/var/www) but also being able to log in and upload/download new web page files to that directory over SCP or SFTP. I keep hitting snags.Here's what I've done so far:
1. The server is set up in a DMZ at home and my router updates a Dynamic DNS record; so far I can SSH into it no problem.
2. Apache is working. I get my "it works!" page when I enter either the IP or the dyndns domain name.
3. SFTP is sort of working. I can log on using WinSCP and see the files and download them, but I can't upload to the default directory with my normal login.
Here's my issues: 1. I want to set up Apache *correctly*. To me, that means leaving it pointing to the default directory, but still being able to upload to that directory. I have not (and probably will not) enable the root account. I've set the permissions to 755. I've tried chown'ing the directory, but then it seems I can't view the webpages.As a workaround, I created a www folder in my default user home directory and pointed Apache2 there in the 'default' file in /etc/apache2/sites-available. The changes read as follows:
Code:
DocumentRoot /home/username/www
<Directory />
Options FollowSymLinks[code]...
That gives me a workaround for the default directory SFTP issue, but I would rather learn what I need to do to have it set up and working with default values.
2. You may notice I added Includes under the Options. My goal is to get server-side includes working. But they aren't. I have some existing webpages my work has set up - I using these as a template to use to adapt a flash movie I made to a specific resolution, as well as to learn how to optimize my flash for a webpage. Our webhost uses virtual hosting; I am not yet doing so. I'm not sure what they've done to set up the server-side includes, but the files they are using are all html files - no shtml. The include files themselves have either .htm or .html extensions. All of the pages have .html extensions.
My reading said that I need mod_include installed in Apache2. Where can I check to see that it is installed? Where do I need to add the Includes under Options?Is it in the right place? And finally, where do I need to add XBitHack on to enable it? This is the method that Apache suggests, but the documentation offers no clue as to where to put it. Most of the documentation out there refers to apache.conf, but that's the Apache 1.3 way of doing things.I really just want this to be set up according to the defaults as much as possible.I want to have a good working knowledge of Apache and of how to set it up and configure it, but dang it if it isn't a frustrating process.
View 8 Replies
View Related
