[JDEV] firewall config for ssl
Bruce Duncan
brucedduncan at yahoo.com
Fri Oct 12 13:08:23 CDT 2001
yup..that was the issue....i did a cname
in my external dns that made the firewall
machine look ilke the same name as used internally..
worked right away with only the ssl port open.
thanks..
bruce
--- John Draughn <jdraughn at kiorisoft.com> wrote:
> Do you have the <name/> field in the jabber.xml
> (jabberd config file) to
> the name of the nat box? If I remember correctly,
> server will reject
> logon attempts due to "invalid server specified" or
> similar if the name
> isn't listed.
>
> Might want to check up on that.
>
> -John 'zariok' Draughn
>
> On Fri, 2001-10-12 at 00:33, Bruce Duncan wrote:
> > here's part of my iptables script. i can telnet
> to
> > the firewall machine from outside on port 5223 and
> get
> > connected. This looks just like the bits i have
> for
> > forwarding sendmail and pop3 requests in thru the
> > firewall to an internal machine...don't know why
> this
> > doesn't seem to work right.
> >
> >
> >
> > #
> > # IM forwarding
> > #
> > #
> > iptables -t nat -A PREROUTING -i
> $EXTERNAL_INTERFACE
> > -j DNAT -p tcp -d $FIREWALL
> > _MACHINE --dport 5223 --to $IM_MACHINE:5223
> > #
> > # IM allowances
> > #
> > # Allow SSL'd IM traffic to come in throught the
> > external interface and get
> > # forwarded to the internal interface if its bound
> for
> > the im machine
> > #
> > iptables -N IM
> > iptables -A IM -j ACCEPT
> >
> > iptables -A FORWARD -p tcp -m state --state NEW
> -s
> > 0/0 -d $IM_MACHINE --d
> > estination-port 5223 -j IM
> >
> >
> >
> >
> > __________________________________________________
> > Do You Yahoo!?
> > Make a great connection at Yahoo! Personals.
> > http://personals.yahoo.com
> > _______________________________________________
> > jdev mailing list
> > jdev at jabber.org
> > http://mailman.jabber.org/listinfo/jdev
>
>
> _______________________________________________
> jdev mailing list
> jdev at jabber.org
> http://mailman.jabber.org/listinfo/jdev
__________________________________________________
Do You Yahoo!?
Make a great connection at Yahoo! Personals.
http://personals.yahoo.com
More information about the JDev
mailing list