WAN-facing web server inaccessible from LAN - Teh Forum

<body> <div id="header"> <span class="left"> <span class="back"><a href="lthread_list.php?webtag=DEFAULT"><span class="image mobile_back" title="Back"></span></a></span> <span class="image mobile_logo" title="Beehive Forum Logo"></span> </span> <ul> <li> <a class="reply_all" href="lpost.php?webtag=DEFAULT&reply_to=42846.0&return_msg=42846.21"> <span class="image mobile_reply_all"></span><span class="text">Reply to All</span> </a> </li> <li> <a class="navigation" href="#"> <span class="image mobile_navigation"></span><span class="text">Show messages</span> </a> </li> <li> <a class="main" href="#"><span class="image mobile_menu" title="Menu"></span> </a> </li> </ul> </div> <div class="menu main"> <ul> <li><a href="lthread_list.php?webtag=DEFAULT">Messages</a></li> <li><a href="lpm.php?webtag=DEFAULT">Inbox</a></li> <li><a href="lsearch.php?webtag=DEFAULT">Search</a></li> <li><a href="llogon.php?webtag=DEFAULT">Login</a></li> </ul> </div> <div class="menu navigation"><a href="lmessages.php?webtag=DEFAULT&msg=42846.1">1–10</a><a href="lmessages.php?webtag=DEFAULT&msg=42846.11">11–20</a><a href="lmessages.php?webtag=DEFAULT&msg=42846.21">21–24</a></div> <div id="page_content"> <h3 class="thread_title"><a href="index.php?webtag=DEFAULT&amp;msg=42846.21">WAN-facing web server inaccessible from LAN</a> </h3> <div id="messages" data-navigation="42846_21_24_10"> <a name="a42846_21"></a><div class="message" id="message_42846_21"> <div class="message_header"> <div class="message_from"> From: patch<span class="message_time"> 3 Feb 2022 17:04</span> <div class="clearer"></div> </div><div class="message_to">To: CHYRON (DSMITHHFX) <span><span class="image post_read" title="Read: 3 Feb 2022 19:42"></span></span> <span class="message_count">21 of 24</span><div class="clearer"></div> </div> </div> <div class="message_links"> <a href="lmessages.php?webtag=DEFAULT&msg=42846.21">42846.21</a> In reply to <a href="lmessages.php?webtag=DEFAULT&msg=42846.20">42846.20</a></div> <div class="message_body"> What DNS servers does your DHCP scope give out? That should give you some clues as to where to look. If your PC is given an external DNS address, then you're out of luck, but if it's an internal address then whatever has that address may have the capability to hold custom records.<br /> <br /> And if it doesn't, maybe it's time to set up your own DNS server so that you can do stuff like this. It's a fairly simple process (says the network engineer who's never done it before). If you're running an Active Directory domain then you should be able to add the DNS Server role to your domain controller, <a href="https://www.redhat.com/sysadmin/dns-configuration-introduction">or look at BIND if</a> <a href="https://www.digitalocean.com/community/tutorials/how-to-configure-bind-as-a-private-network-dns-server-on-ubuntu-14-04">you're a Linuxy person</a>. And if you've got a domain controller, you could also add the DHCP server role to it, and control things yourself that way, without having to fight with a shit router.<br /> <br /> I would say leave the managed switch to do switchy things, though. Let it worry about moving packets around and very little else. It's not a normal place for a DNS server or a DHCP server.<br /> <br /> Configuring a router for ADSL shouldn't really be that much of a big thing (the ISP should be able to help, especially if you're paying business rates), but I'd also say that you should maybe have a look at the local IT firms and ask them how much it would cost. They do that kind of thing all the time and chances are it'll come in cheaper than paying you to spend much longer working it out, and if not cheaper then at least you'll come out of it with a simpler setup. If you find the right firm, they should be able to set it up for you and provide proper instructions on how to make the simpler changes without having to go back to them.</div> <div class="message_footer"> <div class="message_footer_links"><a href="lpost.php?webtag=DEFAULT&reply_to=42846.21&return_msg=42846.21" class="reply"><span class="image post"></span>Reply</a></div> <div class="message_vote_form" data-msg="42846.21"> <span class="rating">0/0</span> <span class="image vote vote_down vote_down_off" title="Vote Down"></span> <span class="image vote vote_up vote_up_off" title="Vote Up"></span> </div> </div> </div><a name="a42846_22"></a><div class="message" id="message_42846_22"> <div class="message_header"> <div class="message_from"> From: CHYRON (DSMITHHFX)<span class="message_time"> 3 Feb 2022 19:52</span> <div class="clearer"></div> </div><div class="message_to">To: patch <span><span class="image post_read" title="Read: 4 Feb 2022 06:52"></span></span> <span class="message_count">22 of 24</span><div class="clearer"></div> </div> </div> <div class="message_links"> <a href="lmessages.php?webtag=DEFAULT&msg=42846.22">42846.22</a> In reply to <a href="lmessages.php?webtag=DEFAULT&msg=42846.21#a42846_21" target="_self">42846.21</a></div> <div class="message_body"> I've got a few things to try without messing around with DHCP or DNS. The server has to stay up and WAN-accessible 24/7. I've added a virtualhost on a port not open to the WAN, and doesn't have the redirect (which fortunately isn't in htaccess). Not able to really test any LAN stuff until I'm back in the office tomorrow. I have until the 'old' network cuts out (in a coupla weeks iirc) to sort this out as best I can. We'll see how it goes ...</div> <div class="message_footer"> <div class="message_footer_links"><a href="lpost.php?webtag=DEFAULT&reply_to=42846.22&return_msg=42846.21" class="reply"><span class="image post"></span>Reply</a></div> <div class="message_vote_form" data-msg="42846.22"> <span class="rating">0/0</span> <span class="image vote vote_down vote_down_off" title="Vote Down"></span> <span class="image vote vote_up vote_up_off" title="Vote Up"></span> </div> </div> </div><a name="a42846_23"></a><div class="message" id="message_42846_23"> <div class="message_header"> <div class="message_from"> From: patch<span class="message_time"> 4 Feb 2022 09:32</span> <div class="clearer"></div> </div><div class="message_to">To: CHYRON (DSMITHHFX) <span><span class="image post_read" title="Read: 4 Feb 2022 12:38"></span></span> <span class="message_count">23 of 24</span><div class="clearer"></div> </div> </div> <div class="message_links"> <a href="lmessages.php?webtag=DEFAULT&msg=42846.23">42846.23</a> In reply to <a href="lmessages.php?webtag=DEFAULT&msg=42846.21#a42846_22" target="_self">42846.22</a></div> <div class="message_body"> The thing is, though, that you talk about "messing around with DHCP or DNS" when DNS is the exact tool you need to do what you need to do: have an external URL resolve to an internal IP address for devices on the LAN.<br /> <br /> Talking about doing stuff with htaccess, redirects and virtualhosts sounds like the kind of fix that gets put in because it seemed sensible at the time, but ends up being a millstone round your or somebody elses neck for the next few years. It'll just be that thing that somebody put in in the past, but nobody ever has the time or inclination to take it apart and redo it properly.<br /> <br /> Setting up an internal DNS server wouldn't have any effect on the accessibility of the web server from the internet (because your port-forwarding is already being done by IP address), but it would give you the simplest, most understandable way of accessing the server inside the LAN.<br /> <br /> Basically, and I'm not trying to be nasty, because I know the kind of pressure that gets put on technical people in small companies, but you're bodging a fix rather than spending a little more time on it and getting a much better and more capable solution.</div> <div class="message_footer"> <div class="message_footer_links"><a href="lpost.php?webtag=DEFAULT&reply_to=42846.23&return_msg=42846.21" class="reply"><span class="image post"></span>Reply</a></div> <div class="message_vote_form" data-msg="42846.23"> <span class="rating">0/0</span> <span class="image vote vote_down vote_down_off" title="Vote Down"></span> <span class="image vote vote_up vote_up_off" title="Vote Up"></span> </div> </div> </div><a name="a42846_24"></a><div class="message" id="message_42846_24"> <div class="message_header"> <div class="message_from"> From: CHYRON (DSMITHHFX)<span class="message_time"> 4 Feb 2022 15:02</span> <div class="clearer"></div> </div><div class="message_to">To: patch <span><span class="image post_read" title="Read: 4 Feb 2022 16:52"></span></span> <span class="message_count">24 of 24</span><div class="clearer"></div> </div> </div> <div class="message_links"> <a href="lmessages.php?webtag=DEFAULT&msg=42846.24">42846.24</a> In reply to <a href="lmessages.php?webtag=DEFAULT&msg=42846.21#a42846_23" target="_self">42846.23</a></div> <div class="message_body"> The 8081 patch (no relation) worked outta the box [*by LAN IP, not domain] <span class="emoticon e_fail" title="(fail)"><span class="e__">(fail)</span></span> <br /> <br /> I will revisit your sage advice in future!</div> <div class="message_footer"> <div class="message_footer_links"><a href="lpost.php?webtag=DEFAULT&reply_to=42846.24&return_msg=42846.21" class="reply"><span class="image post"></span>Reply</a></div> <div class="message_vote_form" data-msg="42846.24"> <span class="rating">0/0</span> <span class="image vote vote_down vote_down_off" title="Vote Down"></span> <span class="image vote vote_up vote_up_off" title="Vote Up"></span> </div> </div> </div></div> </div> </body>