Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 3 > Installation/Configuration

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 5th February 2013, 02:03
rlischer rlischer is offline
Senior Member
 
Join Date: Jul 2009
Posts: 120
Thanks: 5
Thanked 1 Time in 1 Post
Default Basics of ISPConfig and internal / external ips

My ISP provided me with 1 ip, I used this ip for my Firewall, I then set up ISPConfig 3 at 10.0.0.60 and used NAT to forward the required ports for ISPConfig 3 to 10.0.0.60. Everything seems to work fine, but all of my sites are set up on IPv4 * so it listens on all ips, even though I only have 10.0.0.60.
My question is, do I need to add the external ip so it also appears in the drop down? I am wanting to try SSL on multiple sites on this 1 IP, and I don't understand if that IP is supposed to be the 10.0.0.60 or the real external IP which is used in my Firewall only. I am told you can't run SSL on "*", even though its running SSL fine on one site that uses "*" Also, if I do pick 10.0.0.60 for a website, it seems to "break" things. For instance, other sites become the site that has 10.0.0.60 picked instead of *.

Hope this makes sense. I just need a basic understanding of what IPs I need to be using on the ISPConfig 3 side. I guess I could keep using *, but that's not working with multiple SSL sites on the one IP, at least Godaddy signed SSL certs.

Thanks!
Reply With Quote
Sponsored Links
  #2  
Old 5th February 2013, 03:30
tahunasky tahunasky is offline
Member
 
Join Date: Jul 2012
Location: Buenos Aires
Posts: 84
Thanks: 1
Thanked 8 Times in 8 Posts
Default

Unless you are going to use your server with ISPConfig on it to serve dns requests for your domain/s, there is not need to use the external/WAN ip address in ispconfig. Even SSL wont have problems as long as you forward the port/s (443 / 993 etc) to the server.
Reply With Quote
  #3  
Old 5th February 2013, 12:21
rlischer rlischer is offline
Senior Member
 
Join Date: Jul 2009
Posts: 120
Thanks: 5
Thanked 1 Time in 1 Post
Default

Quote:
Originally Posted by tahunasky View Post
Unless you are going to use your server with ISPConfig on it to serve dns requests for your domain/s, there is not need to use the external/WAN ip address in ispconfig. Even SSL wont have problems as long as you forward the port/s (443 / 993 etc) to the server.
I do use the DNS wizard to set up DNS for each domain I host. So do I need not not use 10.0.0.60 and add in the actual external IP that is also used in the Firewall?


thanks
Reply With Quote
  #4  
Old 5th February 2013, 13:24
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 36,034
Thanks: 826
Thanked 5,383 Times in 4,230 Posts
Default

You use the internal IP address for all services except of DNS records. In dns records, the external IP is used.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #5  
Old 5th February 2013, 13:33
rlischer rlischer is offline
Senior Member
 
Join Date: Jul 2009
Posts: 120
Thanks: 5
Thanked 1 Time in 1 Post
Default

Quote:
Originally Posted by till View Post
You use the internal IP address for all services except of DNS records. In dns records, the external IP is used.
So all sites I will pick the 10.0.0.60 ip. When I picked the 10.0.0.60 ip for just one site, when I went to other sites it was pulling up that one site at 10.0.0.60.

I'll give it a try on all sites.

Thank you
Reply With Quote
  #6  
Old 5th February 2013, 13:49
rlischer rlischer is offline
Senior Member
 
Join Date: Jul 2009
Posts: 120
Thanks: 5
Thanked 1 Time in 1 Post
Default

So I switched all my sites to 10.0.0.60 from * and restarted nginx and some of the sites disappear and you just get the standard ISPConfig 3 welcome page. This only happened on 2 sites, and 3 others were still pulling up the correct index.html. I have no idea what this means, so I switch them all back to * and everything is fine.
Reply With Quote
  #7  
Old 5th February 2013, 14:05
rlischer rlischer is offline
Senior Member
 
Join Date: Jul 2009
Posts: 120
Thanks: 5
Thanked 1 Time in 1 Post
Default

One thing I just noticed, the two sites that reverted back to the default ISPConfig welcome page after switching them to 10.0.0.60 both had SSL/SSI turned on with certificates. The others did not.
Reply With Quote
  #8  
Old 5th February 2013, 18:53
rlischer rlischer is offline
Senior Member
 
Join Date: Jul 2009
Posts: 120
Thanks: 5
Thanked 1 Time in 1 Post
 
Default

I went back in a deleted and recreated all my sites and picked 10.0.0.60 from the start and all is well now. Also SSL/SSI seems to be working on multiple domains using just 1 ip.
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
ISPConfig 3 - MultiServer Setup - With Dedicated Control Panel - How? SuperJC Installation/Configuration 4 16th October 2012 20:03
External IP and internal IP qb7 Installation/Configuration 3 21st May 2012 11:34
ISPConfig no longer runs: 500 Internal Server error & mod_fcgid: error reading data DiscipleGeek Installation/Configuration 8 1st December 2011 23:27
Setting up internal and external network using ISPConfig Showa General 4 1st November 2010 18:11
Can't receive external mail anymore - Ubuntu 8.10, ISPconfig, postfix, etc... malou Server Operation 3 15th April 2009 17:13


All times are GMT +2. The time now is 06:38.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.