Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Control » Cant access Microsoft IIS behind Winroute Kerio Firewall
  •  
bickyz

Messages: 11
Karma: 0
Send a private message to this user
I have a win2000 peer2peer lan with 3pcs.
PC1 has 2 NIC one with external static ip-add(217.XX.XX.XX) connected to broadband and second one has internal ip-add(10.0.0.2) connected to lan(switch).

PC2 has internal ip-add (90.0.0.2) with IIS installed and one sample webpage hosted.

PC3 has internal ip-add (90.0.0.3).

Currently i can access the webpage from PC1 & PC2.

In PC1 ive installed Kerio Winroute Firewall 6. Now i want this site to be accessed from internet public, What do i need to do in Winroute Firewall?

Just to test i did created this rule, but it doesnt works i.e cant accessed frm internet.

Source: WAN
Destination: Firewall
Service: HTTP
Acton: Permit
Translation: 10.0.0.2 port:80

Anyone there will u plese help me, so that my site can be accessed frm internet.

  •  
feite

Messages: 523
Karma: 0
Send a private message to this user
Make sure the ip address in the lan belong to the same subnet:
pc1 10.0.0.1
pc2 10.0.0.2
pc3 10.0.0.3
  •  
lqy1

Messages: 5
Karma: 0
Send a private message to this user
My situation something like this, i have http smtp pop3 ftp services behind KWF in one client PC, this 4 services work fine and can be accessed by other client pc. smtp pop3 ftp can be access by internet, but http not. this happen after i upgrade KWF from 6.0.2 to 6.0.8 . I list ports listened on KWF pc, and i find 80 21 25 110 all no listening.

[Updated on: Thu, 31 March 2005 04:12]

  •  
feite

Messages: 523
Karma: 0
Send a private message to this user
What traffic rule do you have?
  •  
lqy1

Messages: 5
Karma: 0
Send a private message to this user
Source: Dialup
Destination: Firewall
Service: HTTP FTP SMTP POP3
Acton: Permit
Translation: MAP to a client pc'ip, no port translate.
  •  
feite

Messages: 523
Karma: 0
Send a private message to this user
Create a traffic rule for each service and specify the corresponding port (map with port):

name: HTTP service
source: dailup
dest: firewall
service: http
action: allow
translation: map <ip> port 80

name: HTTPS service
source: dailup
dest: firewall
service: https
action: allow
translation: map <ip> port 443

name: FTP service
source: dailup
dest: firewall
service: ftp
action: allow
translation: map <ip> port 21

and so on. For FTP make sure the protocol inspector is set to 'default' to allow traffic over port 20.
Previous Topic: please help or i may explode!
Next Topic: Loosing internet connection
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Sat Nov 18 01:49:43 CET 2017

Total time taken to generate the page: 0.00466 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.