• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Access internal Owncloud Server from LAN and WAN with the same address

NAT
4
12
5.7k
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • H
    hackel
    last edited by Feb 12, 2015, 6:42 PM

    Dear all,

    I installed an Owncloud-Server (192.168.255.101) in my DMZ.

    I created an no-ip.org-Account an got an dynDNS name for my IT - it's working.

    The Owncloud Port should be NATed from 44443 to 443 to I want to reach my Owncloud  via this address https://xxx-no-ip.org:44443/owncloud from the LAN and from the Internet.

    What have I got to do, that this is working?

    I tried some things, but they are not working. :-( –> have a look on the screen shots.

    Many many thanks for you help!!!

    Regards
    hackel

    Firewall.png
    NAT.png
    Firewall.png_thumb
    NAT.png_thumb

    1 Reply Last reply Reply Quote 0
    • J
      johnpoz LAYER 8 Global Moderator
      last edited by Feb 12, 2015, 6:57 PM

      "The Owncloud Port should be NATed from 44443 to 443 to"

      Well that is not what you have setup at all..  And why did you not just let your port forward do your firewall rule for you which is the default?  This is really click click.  What do you have in that owncloud alias?  For an IP?

      Why are you changing the port on the nat?  Why not just forward 443 or have owncloud listen on 44443?  This way its simple to have the same link both on the outside or inside with simple host over ride where you set xxx-no-ip.org on the inside to resolve to 192.168.255.101 and if your elsewhere on the internet it would resolve to what your public is and get forwarded in.

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.7.2, 24.11

      1 Reply Last reply Reply Quote 0
      • H
        hackel
        last edited by Feb 13, 2015, 8:57 PM

        Many thanks for your answer.
        I had and zyxel firewall before and I can access the ownlcoud via this URL from the internet and from the LAN.

        https://xxxxxx.no-ip.org:44443/owncloud

        Is this also possible with pfsense?

        If you, can you please tell me how (step-by-step)

        many many thanks for you answer.

        Regards
        hackel.

        1 Reply Last reply Reply Quote 0
        • H
          hackel
          last edited by Feb 14, 2015, 2:39 PM

          Hello all,

          NAT is working.
          I can reach the owncloud over port 44443 from internal network and the name (https://xxxxxx.no-ip.org:44443/owncloud/).

          I added my local server IP in the DNS Resolver.

          The only problem is, to reach the owncloud from the internet.
          If have no idea, why it is not working.

          I added the new screenshots from the NAT rule and firewall rule.
          Hope someone find the mistake.

          Thank you very much for your support!

          Regards
          hackel

          NAT.png
          firewall_rule.png
          NAT.png_thumb
          firewall_rule.png_thumb

          1 Reply Last reply Reply Quote 0
          • J
            johnpoz LAYER 8 Global Moderator
            last edited by Feb 14, 2015, 2:52 PM

            And again your forwarding 44443 to 443??  Why are you doing this  That just makes your url difficult..  Why do you have a port forward on your lan interface?  To change the port from 44443 to 443??

            Does your pfsense actually have a public IP on its wan, or is it behind nat?  Do a simple sniff on pfsense wan - and check with something like canyouseeme.org if the traffic to this 44443 port is getting there from the internet.

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.7.2, 24.11

            1 Reply Last reply Reply Quote 0
            • H
              hackel
              last edited by Feb 14, 2015, 4:56 PM

              Hello Johnpoz,

              thank you for your answer.
              And again your forwarding 44443 to 443??  Why are you doing this  That just makes your url difficult.
              I don't whats us ownlcoud on the standard port because of attacks.

              That just makes your url difficult..
              Thats not a problem for me.

              Why do you have a port forward on your lan interface?  To change the port from 44443 to 443??
              Correct, I will reach the Server internal as external with the same URL.

              Does your pfsense actually have a public IP on its wan, or is it behind nat?
              If you mean, If I use an dyndns service, YES.

              Do a simple sniff on pfsense wan - and check with something like canyouseeme.org if the traffic to this 44443 port is getting there from the internet.
              I tried the check for 44443 and it failed.
              Something is still not working :-(

              Thanks you for trying to help me!!!!!

              Regards.
              hackel

              1 Reply Last reply Reply Quote 0
              • J
                johnpoz LAYER 8 Global Moderator
                last edited by Feb 15, 2015, 1:25 PM

                What IP does pfsense have on wan 10.x.x.x, 192.168.x.x, 172.16-31.x.x ?  Or something else - ie a real public IP?  If you have a private address on your wan then your behind a nat, and you have to foward that port on the device in front of pfsense to pfsense wan IP or pfsense can not forward what it doesn't get.

                You need to SNIFF on you wan, and see if the packets get there – not just check to see if they show open..

                So under diag, do a packet capture for that port..  Do you see it hit pfsense..  Clearly its not going to be open for me I have not listening on it or forwarding it, pfsense just drops it.. But you can see that the traffic got there and pfsense if setup to do something would.  If it never gets there - nothing pfsense can do.

                checktraffic.png
                checktraffic.png_thumb

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                1 Reply Last reply Reply Quote 0
                • H
                  hackel
                  last edited by Feb 16, 2015, 8:20 PM Feb 15, 2015, 4:35 PM

                  I got an official IP on the WAN interface (62.157.140.xxx).

                  This is the result from the packet capture.

                  19:34:27.773089 IP 107.20.89.142.42710 > 91.58.xxx.xxx.44443: tcp 0
                  19:34:28.771618 IP 107.20.89.142.42710 > 91.58.xxx.xxx.44443: tcp 0
                  19:34:30.782082 IP 107.20.89.142.42710 > 91.58.xxx.xxx.44443: tcp 0
                  19:34:34.792186 IP 107.20.89.142.42710 > 91.58.xxx.xxx.44443: tcp 0

                  Any idea?

                  Thanks for you answer.

                  1 Reply Last reply Reply Quote 0
                  • H
                    hackel
                    last edited by Feb 17, 2015, 5:56 PM

                    Can anyone help me?  :-[

                    It would be very very nice.

                    1 Reply Last reply Reply Quote 0
                    • jahonixJ
                      jahonix
                      last edited by Feb 17, 2015, 9:41 PM

                      Make your owncloud instance listen on port 44443 directly to save on NAT translation. Way easier.

                      1 Reply Last reply Reply Quote 0
                      • B
                        biggsy
                        last edited by Feb 18, 2015, 7:01 AM

                        Your WAN Port Forward shows destination "DMZ net".  It should be "WAN net" or, better still, "WAN address" - i.e., your public IP.

                        1 Reply Last reply Reply Quote 0
                        • J
                          johnpoz LAYER 8 Global Moderator
                          last edited by Feb 18, 2015, 1:39 PM

                          True your forward needs to be to your actual server running owncloud not a network.

                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                          If you get confused: Listen to the Music Play
                          Please don't Chat/PM me for help, unless mod related
                          SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                          1 Reply Last reply Reply Quote 0
                          1 out of 12
                          • First post
                            1/12
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.