IP Routing Help

[SpeedDemon]

Hi everyone, Ok here my situaton...

I have a Win2k Server on my network and a Linux redhat Machine.

Win2k : 192.168.0.1
Readhat : 192.168.0.8

When the Win2k Box gets a request on Port 80, I'd like it to forward it to port 80 on the redhat box.

How do I go about doing this, I have got it working using a shareware app, however after about 10 requests it cuts out

I know this must be possible, i just dunno how, please HELP!

 

[MattWray]

I may be off, but I think you can do it with RRAS. Either with ports or a static route, not too sure tho... Matt Wray
CCNA, MCP
mwray77518@yahoo.com

 

[SpeedDemon]

Any help setting it up, im not a server newbie, however RRAS is an issue i've never touched before.

The server is configured to accept connections as a VPN, so I think I do have Routing working, its just getting the port forwarding working that I need.

 

[snooze821]

Is the RedHat machine a webserver?

 

[SpeedDemon]

Yup, redhats a webserver

 

[dankelt]

SpeedDemon,

I'm assuming this Win 2000 server is multihomed. One Private Interface (192.168.0.1) and a public interface. And what you want is to forward requests from the public interface to 192.168.0.8 (the linux box).
Is this correct?
If you just want requests to 192.168.0.1 to go to 192.168.0.8 tell people to stop browsing to .1 and start browsing to .8 ;-)


Dan

 

[SpeedDemon]

Not That simple dan, 192.168.0.1 is also accessable via the web (hence VPN required), the machine dummies as a web server but actually forwards requests to the redhat box.

Still need help,
Cheers

 

[Evilbart]

IIS forwarding can also be used I guess, I thinck that will be the easiest solution if you just want to forward http traffic on port 80.

Bart

 

[SpeedDemon]

I dont wwant IIS on the box at all, its too damm vuneralble

Can Win2k sot forward data on on incoming port to anoother?!

Cheers

 

[Evilbart]

owkay, i got your drift

apache on w32 an option? I've implemented it once and with proper NTFS you're pretty safe....

port forwarding on a w2k box: i'll have to look that up, don't know if it's possible.

Haven't got a router or appliance box that you can use to do portforwarding? A linux box is also owkay ;-)

Bart

 

[dankelt]

SpeedDemon,

If your users can access 192.168.0.1 via the VPN, why can't they access 192.168.0.8?

 

[SpeedDemon]

Its not for VPN, I dont want people to log into the VPNB to access the webserver, I want them to type in my External IP in any browser and access the website loacted on the second box.

 

[MattWray]

Win2k should be able to do it with NAT according to the help in the RRAS snap-in.
I think this is how:
Open RRAS, click NAT and highlight the interface your going to forward->Select properties->Special Ports TCP port 80 and if this is right I'm sure you can take it from there.
I don't know for a fact if this will work, but it seems to me it should... Matt Wray
CCNA, MCP
mwray77518@yahoo.com

 

[SpeedDemon]

Hi matt, cheers for the reply.

Im currently using ICS to share the internet connection, Its linked into DHCP, can I turn this of and then startup NAT?

Cheers

 

[MattWray]

Yes, you can just stop ICS and start NAT thru RRAS. You will need 2 NICs in the server, though.
To add NAT in RRAS:
Open RRAS->expand IP routing-> right-click general-> new routing protocol. Then add NAT.
Good Luck! Matt Wray
CCNA, MCP
mwray77518@yahoo.com

 

[SpeedDemon]

My Internet COnection comes in the Form of a USB ADSL model (Green from provided by BT)

I have a static internet IP, should I still use NAT?

Cheers

 

[MattWray]

Well you stumped me now. I really don't know about the USB modems, never worked with one.
I'm assuming right now your static IP is on the modem? That is somewhat like ours. We have a static IP on a dsl router. From there all traffic passes thru the server and on to the LAN. I have 2 NICs in my server with RRAS/NAT running. The WAN NIC gets IPs from the router and the LAN NIC hands out IPs via DHCP.
Does the usb port get an IP? I don't really know how that whole thing works. Matt Wray
CCNA, MCP
mwray77518@yahoo.com

 

[SpeedDemon]

Its just like a dial up using a modem or ISDN card, the ADSL connection appears how a normal dialup connection would.

The server treats the connection as a ISDN device under most circumstances.

doing a 'ipconfig /all' in a dos promtp, the system identifies the adapter as:

PPP adapter Speed Touch USB

The description: WAN <PPP/SLIP> Interface

It has its own Mac address etc etc.

Any ideas? If I need to completely reconfigue the system to use NAT, I think it would be betterm but I need help

Cheers

 

[MattWray]

I don't think RRAS in the situation I've described will work with that. I believe it has to use a network connection. You might want to check this link,

http://www.practicallynetworked.com/reviews/draytek_vigor2200usb.asp

It is a USB router, that might be what you could get in order to set everything up..
See what you think.. Matt Wray
CCNA, MCP
mwray77518@yahoo.com

 

[dankelt]

Ahh, &quot;I see&quot;, said the blind man You confused me with all your talk about VPN.
You should be able to do what Matt is suggesting with NAT. I don't think You actually need two NICs, what you need is two interfaces that show up as network connections.

You should be able to add NAT, then add your two Interfaces to the NAT protocol. Add the 192.168.0.1 as a Private Interface, then add your modem as a Public and check the &quot;Translate TCP/UDP headers&quot; option. Also on the same window is a &quot;Special Ports&quot; tab. Like Matt said, this is where you should be able to forward http traffic to 192.168.0.8

The topic &quot;Deploying network address translation&quot; in Windows 2000 help describes exactly how to do all this.

Hope this helps,
Dan