Solved

Trying to route all access from internet to a web box on a DMZ

Posted on 2007-11-27
6
301 Views
Last Modified: 2013-11-12
What is the best way to route traffice from internet to a dmz. I have foritage 100a router, all traffice that comes from internet on port 80 i want to force to a web box  which will host the web site, that is not on my current network.
The fortigate has ports all ready established for the dmz but im not sure where to set this up.

THanks
Jared
0
Comment
Question by:jbisordi
  • 3
  • 3
6 Comments
 
LVL 18

Expert Comment

by:Johnjces
ID: 20365820
The first problem, as I see it, is that this web server is not on the same network as your router.

Is that a correct understanding?

Is it in the same building and accessible?

There are a couple of ways that it can be done, but provide us with some more details... I.E. the IP subnet of the router's LAN and the IP of the web server you want to use.

John
0
 

Author Comment

by:jbisordi
ID: 20371065
yes the builing is accesible

internall network is on 192.168.1.0 255.255.255.0 gateway is 192.168.1.253
i have a server that is connect to same router  ip 192.168.50.1 with a cross over cable server ip 192.168.50.2

want to log on external ip and get to the 192.168.50.2 server.
0
 
LVL 18

Accepted Solution

by:
Johnjces earned 500 total points
ID: 20371165
Well, the firewall/router you have has two dmz ports that you can assign an IP address to that would allow access to your port 80 (http) server apparently at 192.168.50.2. I do not understand or I am confused about the hookups you are using.

Your fortigate should have a LAN IP of 192,168,1,253 for your main LAN, correct?
So you have your web server connected to this fortigate as well on one of the interfaces which has an IP of 192.168.50.1. I hope I have this correct.

Normally a DMZ a demilitarized zone, is open to all incoming traffic from the web/WAN interfaces. I would never put more than one machine on a DMZ as all those machines PCs and servers, are very vulnerable.

In your case, I would port forward port 80 to 192.168.50.2 and not put it on any of the DMZ interfaces.

The fortigate should have a web interface that you can set up the ports, IP addresses, firewall rules and it will allow you to port forward.

I hope I have started to answer your question.

John
0
What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

 

Author Comment

by:jbisordi
ID: 20375454
got it working using the dmz  all externall traffic coming in on port 80 gets forwarded to 192.168.50.2 webserver  that works fine however i would also like to be able to work on that computer remotlely i tried making a rule saying any traffic coming from a certain ip address get forward to that same server port 3389 for remote desktop. can that work as well? the dmz port on the foritgate is 192.168.50.1 that is the only to things on the 50 network


thanks
0
 
LVL 18

Expert Comment

by:Johnjces
ID: 20375529
OK. So that DMZ will allow you to block all ports and allow the forwarding one port. That is great!

You should be able to allow multiple ports to forward to that IP doing the same thing you did before. As it is usually necessary in a lot of web servers to forward port 25, 80, 21 and others to that same server.

John
0
 

Author Comment

by:jbisordi
ID: 20376832
seems to be ok hopefully i can take care of everything else remotly
Thanks

0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Configuring a /30 IP block and a /26 IP block 6 152
ping a url gives different ip addresses 5 68
The purpose of Root Bridge 7 55
eBGP policy and ACL in interface 7 52
Article by: rfc1180
The Maximum Segment size (MSS) is an important consideration when troubleshooting connectivity via the Internet/Intranet. As the packets are routed via the Internet/Intranet, the packets must traverse through multiple routers in the path between two…
I know for anybody starting from Beginner to Expert in Networking knows what OSI model. But this tutorial is for freshers or those who are new to networking world. Why I am putting OSI in such simple and compact manner is because it enables you to k…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

785 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question