I have received no answer since now ..... but today i found a solution !!
The problem i described (if i use the proxy from GREEN client, i only can
reach the services on the ORANGE IP addresses, not in the RED) seem to be a
proxy problem.
Since proxy ask itself the URL required from its clients, i simply add a
destination NAT on the OUTPUT chain (packet created from the system) in
order to change RED destination IP addresses with ORANGE IP.
In /etc/rc.d/init.d/rc.local i add the command:
iptables -t nat -A OUTPUT -d RED_ip_address -j DNAT --to-dest
ORANGE_ip_address
On efw 2.1 the output chain of nat table is normally empty. You can fill-in
your rules and do your test. If you have to review the inserted rules use
the command:
iptables -t nat -L OUTPUT
If something is wrong, you can flush with the command
iptables -t nat -F OUTPUT
In the hope to be useful to someone .....
Bye.
Gianluca
2007/4/6, gianluca sabbatini <[EMAIL PROTECTED]>:
I have a problem in my RED/ORANGE/GREEN Efw 2.1.
If a configure a GREEN client to use the EFW proxy, when i ask for a
service on one of my RED public IP addresses i receive the following
message:
The requested URL could not be retrieved
While trying to retrieve the URL:
http://.....RED_ip_address<http://.....red_ip_address/>....
The following error was encountered:Connection Failed
The system returned:(111) Connection refused
From GREEN client and using the proxy i only can reach the services on the
ORANGE IP addresses. This is a problem if web pages have iperlink to some of
my other RED IP addresses, because the proxy will refuse these IP.
On the other hand, if i configure a GREEN client to access directly
Internet (without using proxy), when i ask for a service on a RED IP i can
establish the connection. And from GREEN i can use alll my web application,
as i can do from Internet.
It seem a proxy problem. On Feb 16, 2007 cryx post a very similar problem,
but no one answers since now.
Does someone know a workaround?
Does someone can access (from GREEN and using proxy) a service on RED
public IP addresses?
Thank you.
Gianluca
-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Efw-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/efw-user
