Solved

Web access crawling on non-default port, something lost in translation?

Posted on 2006-10-23
6
257 Views
Last Modified: 2010-04-12
Group,
Wanted to ask you a question, we have a apache server that is a dev box we are using right now. We already had a webserver on another IP (.3) running on port 80. This is correctly mapped and everything is working great. The Apache server we are running (.6) we changed to port 81 and internally everything works great. I added this to our ACL and our static mappings, however access from the outside CRAWLS, on Firefox you can see on the bottom "connecting to 192.168.0.6" and it seems as if it is having a very hard time loading images. What do you guys think?

Update, something interesting, keeping in mind I am outside the firewall so I have to type www.domain.com:81 which is in the 24.73.166.x block. If I click on a link I am getting a "connection timed out" error saying the server at 192.168.0.6 is taking to long to respond, shouldn't this be my outside IP address, do I have a mapping backwards?
0
Comment
Question by:blakmoon91
  • 3
  • 2
6 Comments
 
LVL 11

Accepted Solution

by:
prueconsulting earned 250 total points
Comment Utility
Post your static statements and acls which are applicable.

Also did you do a clear xlate following updating the rules and the statics

0
 

Author Comment

by:blakmoon91
Comment Utility
No, I didn't clear the xlate, I will have to remember that. I will post the ACL's and Static when I get back tonight
Thanks for the response.
0
 
LVL 51

Expert Comment

by:Keith Alabaster
Comment Utility
Assuming it is a pix, should look like this for the second server

static (inside,outside) tcp interface 81 192.168.0.6 81 netmask 255.255.255.255 0 0
access-list outside_access_in permit tcp any interface outside eq 81
access-group in interface outside
0
Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 

Author Comment

by:blakmoon91
Comment Utility
Here are the statements as I have it in my Pix 6.3(5)

access-list outside_access_in permit tcp any host 24.73.166.50 eq 81

and

static (inside,outside) tcp 24.73.166.50 81 192.168.0.6 81 netmask 255.255.255.255 0 0

I just re-applied the group and cleared the xlate, I will let you know if it made a difference tomorrow.
0
 
LVL 11

Expert Comment

by:prueconsulting
Comment Utility
That should work just fine for you.. clearing the xlate is an important step to making it function proprely
0
 

Author Comment

by:blakmoon91
Comment Utility
Group,
Thanks for all the response, I was able to work out the issue, however it was actually un-related to the Pix. I do however agree that anytime you apple or re-apply a access-group you need to be sure to clear the xlate, a step that I had forgotten. I do appreciate your time!
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Do you have a windows based Checkpoint SmartCenter for centralized Checkpoint management?  Have you ever backed up the firewall policy residing on the SmartCenter?  If you have then you know the hassles of connecting to the server, doing an upgrade_…
To setup a SonicWALL for policy based routing to be used with the Websense Content Gateway there are several steps that need to be completed. Below is a rough guide for accomplishing this. One thing of note is this guide is intended to assist in the…
It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

7 Experts available now in Live!

Get 1:1 Help Now