5268AC Firewall not configuring correctly?

[pockyken007]

If you don't have NAT Reflection I would suggest something like this provided your set up matches what I described below .

Assuming you have the following setup:

Public IP: 201.206.x.y
Private IP: 192.168.0.50
Port forwarding for all 80 (and 443 if you're doing SSL) on IP 201.206.x.y → 192.168.0.50
You then type the following in your browser, while you're in your internal network:

http://www.yourwebsite.com
and the error occurs. So, solution: hack your hosts file.

On Windows, go to C:\windows\system32\drivers\etc\hosts (notice, there's no extension on that file). On Linux, the file is located in /etc/hosts.

If you open that file up in Notepad, you can then see any entries that are used to override DNS. If you wish to update that file, you will need to open Notepad (or whatever program you're using to edit the file) with Administrator rights – otherwise you can't save the file.

Add this to your hosts file:

192.168.0.50 http://www.yourwebsite.com

Then restart your browser, enter the URL and violà! It's working. So this means, your browser doesn't rely on your DNS to resolve your domain to the IP. Instead, we're overriding this and saying: Browser, just go to my internal IP for that domain name, instead of asking DNS for the IP address.

If you're in an office, then you can get all the people who need to access this internal website, to hack their hosts file, or if you have an internal DNS, then you can add an entry into that.

Another idea is to have an internal proxy server (for all web surfing, etc) and then hack the hosts file on the proxy server. This means your browser will say, Proxy, can you please get me the resource http://www.mywebsite.com and the proxy says Sure, and because I've been told to ignore DNS for that domain, I'll just give the IP which has been hard-coded in my hosts file.

[Guest]

Since I want to access this through DNS instead of direct IP, I'll try adding a DNS entry to the router (similar to gateway.sonic.net) that will handle anything on the internal network. Not exactly getting the router to "do the right thing", but it'll all look the same to me (i.e. domain.com will work from inside or outside the network).

I'll try that tonight and hopefully have one final post that says it all worked!

[Guest]

And we're all good! Thanks everyone!

[pockyken007]

And we're all good! Thanks everyone!

out of curiosity what solved your problem ?

[dherr]

Read the new post "Pace 5268AC DNS search domain". I suspect that was the trick used.

[Joe]

So is there a way to make this work without hacking your 'hosts' file? I have a laptop that I use from within the network and from outside the network. I don't want to hack my 'hosts' file every time I walk out the door.

[Guest]

So is there a way to make this work without hacking your 'hosts' file? I have a laptop that I use from within the network and from outside the network. I don't want to hack my 'hosts' file every time I walk out the door.

You can probably do this by "hacking" a proxy auto-config file. It's much more involved but most likely will allow you to have transparent access to your internal server depending on what WAN IP you're using. https://en.wikipedia.org/wiki/Proxy_auto-config

[Joe]

You can probably do this by "hacking" a proxy auto-config file. It's much more involved but most likely will allow you to have transparent access to your internal server depending on what WAN IP you're using. https://en.wikipedia.org/wiki/Proxy_auto-config

That should work for the web-browser.

However, I also need it to work for Subversion server over the straight SVN protocol, not https+svn or ssh+svn. I also use straight ssh, but it's a little more forgiving than SVN is, since I can give it an arbitrary alias. Maybe there's an SVN flag I can use to tell it to use a different server than the one associated with a repository temporarily.

With my previous 2WIRE box, I was able to set up DNS aliases for my internal machines. That worked reasonably well. And for all my wired-to-the-home hosts, /etc/hosts does the trick. It's just the follow-me-everywhere developer laptop that's proving to be a bit annoying.

[Guest]

However, I also need it to work for Subversion server over the straight SVN protocol, not https+svn or ssh+svn. I also use straight ssh, but it's a little more forgiving than SVN is, since I can give it an arbitrary alias. Maybe there's an SVN flag I can use to tell it to use a different server than the one associated with a repository temporarily.

If you use ssh for transport you can have shell script code in your authorized_keys entry which should allow you some flexibility to accomplish what you want.