6.2 Port Forwarding stopped after cold restart

[geegeemoe]

Hello,

We have been running Untangle 6.x at the office for 3-ish months. The system did the automatic updates with no issues untill...

We have a static IP setup with 4 outside IP addresses. I had mapped 2 additional addresses to port forward HTTPS to internal servers. All was working well.

I turned down our network so we could run some new wiring and clean up the physical network. We moved the internet connections and the server rack to the other end of the room. Reconnected it all and then fired it all back up.

After that cold start everything worked as before EXCEPT port forwarding. I had even done a backup of the config before shutting the server down. I reloaded the config, and still no outside access to our 2 web servers.

I had previously changed the outside management access to another port (2443) so that it would not conflict with these forwards. I also checked to make sure it had not reverted back to the default.

I tried many of the suggestions in the forum, including deleting all port forwarding rules and starting from scratch. Nothing has worked so far to restore the forwarding. Everything else still works great and all users have internet access, and my OpenVPN connections still work. I can access the sites from the internal network, so I know the web servers are running.

I have attached a screen shot of the port forwarding rule that was working before.

I am hoping not to have to do a full re-install (and reload the config). All I did was shut it down, walk it to the other side of the room and turn it back on.

Any suggestions are greatly suggested.

Thanks,
G

[dmorris]

I can't even reach that IP - are you sure thats the right IP? Is it one of untangle's IPs?
Have you tried using "Destined Local?"

[geegeemoe]

Originally Posted by dmorris

I can't even reach that IP - are you sure thats the right IP? Is it one of untangle's IPs?
Have you tried using "Destined Local?"

The actual IP address was not used. It is a private Wiki for a startup company. Sorry you wouldn't be able to access it.

-G

[geegeemoe]

Originally Posted by geegeemoe

The actual IP address was not used. It is a private Wiki for a startup company. Sorry you wouldn't be able to access it.

-G

Specifically the IP address was edited from the screen capture in image software. The real address IS in the rule on UT. Just to clarify :-)

I tried "Destined local" in addition to the destination address. I can't just use "destination local" by itself because there are 2 external addresses being mapped to 2 different internal web servers.

-G

[dmorris]

ah, i see

are you testing from the outside?

other things to try here: http://wiki.untangle.com/index.php/P...shooting_Guide

[geegeemoe]

Originally Posted by dmorris

ah, i see

are you testing from the outside?

other things to try here:

Yep. We have 2 ISP's. I am using the 2nd one (optimum business) to test the inbound on the 1st (speakeasy DSL).

Okay. I am sitting here with 3 terminal windows open running tcpdump on UT eth0 (external) UT eth1 (internal) and one of the web servers eth0 (CentOS - Apache).

I see the packets come in from eth0, get translated by port forwarding and go out eth1. I then see the request come into the web server on its eth0.

If I do the request from the internal network the web server shows the responces back to my internal address. When I try from outside the return connections are not being made.

Is UT somehow blocking the reply's back to the outside request??

-George

[dmorris]

great info.

is the default gateway of the web server the untangle server?

(check #2 on the list)

[geegeemoe]

Ok.

Forget I ever posted. I set up another temporary web server on my laptop and did the port forwarding to it, and it worked.

Somehow even though the web servers are serving to the internal network they are not serving to addresses outside the internal ip range.

Another mystery to locate!

Thanks for the suggestions.

-G

[dknyinva]

Hi,

I know you mapped 2 ext addr. to int. servers. Have you tried just port forward without mapping. I've attached my port forward to my int. server via port 443 as an example.

Good Luck