On 15.11.2022 22:11, Marc Chamberlin wrote:
SURPRISINGLY to me at least, this did not work. For example, if I bring up a web browser and connect directly to the internal IP address 192.168.10.51 I will get the appropriate web page displayed. But if I connect to the external public IP address 200.xxx.xxx.11 it's no joy!
From where do you try to connect? Do you try to connect from a system on the internal network (192.168.10.0/24)? Yes.
That won't work. It is impossible to access external address redirected into internal network from this internal network (OK, it is possible but it requires extra NAT rules for return packets).
To test your port forwarding you must use external system.
https://www.netfilter.org/documentation/HOWTO/NAT-HOWTO-10.html OK, I both had a friend try to reach my internal web server on the computer I call bigbang, and I tried to reach it via my smart phone with
On 11/15/22 11:22, Andrei Borzenkov wrote: the WiFi turned off. This forces the browser on my phone to try and reach my web server from an external location via the external IP address that I am trying to designate and route to the web server. No Joy!
I cannot tell whether IP aliases should work with firewalld right now.
Hmm I hope so! Thanks Andrie for your continued help... Marc... -- *"The Truth is out there" - Spooky* *_ _ . . . . . . _ _ . _ _ _ _ . . . . _ . . . . _ _ . _ _ _ . . . . _ _ . _ . . _ . _ _ _ _ . _ . _ . _ . _ . * Computers: the final frontier. These are the voyages of the user Marc. His mission: to explore strange new hardware. To seek out new software and new applications. To boldly go where no Marc has gone before! (/This email is digitally signed and the OpenPGP electronic signature is added as an attachment. If you know how, you can use my public key to prove this email indeed came from me and has not been modified in transit. My public key, which can be used for sending encrypted email to me also, can be found at - https://keys.openpgp.org/search?q=marc@marcchamberlin.com or just ask me for it and I will send it to you as an attachment. If you don't understand all this geek speak, no worries, just ignore this explanation and ignore the OpenPGP signature key attached to this email (it will look like gibberish if you open it) and/or ask me to explain it further if you like./)