HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials

HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials (http://www.howtoforge.com/forums/index.php)
-   Server Operation (http://www.howtoforge.com/forums/forumdisplay.php?f=5)
-   -   Still HTTPS (http://www.howtoforge.com/forums/showthread.php?t=58479)

alphaman36 3rd September 2012 01:55

Still HTTPS
 
After getting my firewall configured correcly, my Wordpress web site (no ssl is enabled) the site will only respond to traffic on ssl

TiTex 3rd September 2012 09:13

you should provide more informations
like what linux distribution are you using , your network setup , if you're using virtual hosts on your webserver

alphaman36 3rd September 2012 23:55

Https
 
Quote:

Originally Posted by TiTex (Post 284620)
you should provide more informations
like what linux distribution are you using , your network setup , if you're using virtual hosts on your webserver


Sorry about that. I am Ubuntu 12.04. Everything is virtual. The network setup is 192.168.1.0/26. I open the firewall and NAT rules to permit traffic. I open the rule for https and I see the entire conversation (passing the dnat rule, then the firewall inbound rule) I change the rule to http I see it pass the dnat rule but never returns anything back on the packet filter rule

falko 4th September 2012 21:29

What are the outputs of
Code:

iptables -L
and
Code:

netstat -tap
?

alphaman36 5th September 2012 01:13

1 Attachment(s)
Quote:

Originally Posted by falko (Post 284856)
What are the outputs of
Code:

iptables -L
and
Code:

netstat -tap
?

I added the nestat -tap from the firewall. Output is attached. I am guessing that's where the command was to be executed due to the iptables command you wanted executed. I got an error when I ran the iptables -L came back as an invalid command. I am using Astaro as the firewall. The one funny thing I did notice is when the inbound rule is enabled, when the ISP Config web server makes an http request (apt get I am guessing) that http request gets blocked even though the very first rule I have in my firewall is permit all outbounf http requests. As a side note, I see it getting processed by the DNAT rule, but not by the inbound rule, unless it's https then it will pass

alphaman36 5th September 2012 01:48

2 Attachment(s)
I also attached the two commands output from the web server itself. The attachment is labeled atlas - netstat and atlas iptables.

Again thank you for the help, but the problem turned out to be a really weird one. I run a transparent proxy for my internal network and for some reason it was also applying it to the WAN interface. Once I worked around that problem, I was able to successfully get to the web site from the outside. Thank you again for the help with this problem


All times are GMT +2. The time now is 11:47.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.