Hi all, I''m running a firewall DomU with Endian Firewall in a XCP 1.0 box. I set enabled NAT on port 80 in the firewall to local web server, but I can''t get access from Internet to the web pages on web server. I looked at the firewall logs and it says "No data are provided for the day"... this means that any package passed by the firewall, then I fear it is becoming the XCP bridge. This happens often?
I would debug it first by putting a webserver on the firewall box and opening 80. On Nov 23, 2011 10:08 AM, "Diego Dave" <diego.dave.s@gmail.com> wrote:> Hi all, > > I''m running a firewall DomU with Endian Firewall in a XCP 1.0 box. > > I set enabled NAT on port 80 in the firewall to local web server, but > I can''t get access from Internet to the web pages on web server. > > I looked at the firewall logs and it says "No data are provided for > the day"... this means that any package passed by the firewall, then I > fear it is becoming the XCP bridge. > > This happens often? > > _______________________________________________ > Xen-users mailing list > Xen-users@lists.xensource.com > http://lists.xensource.com/xen-users >_______________________________________________ Xen-users mailing list Xen-users@lists.xensource.com http://lists.xensource.com/xen-users
The firewall have a web interface, I have enabled this, when I can access to port 80 firewall... but the NAT isn''t working. With Xen 4 Debian I have had the same issue with bridge, the NAT in firewalls only works when I make PCI passthrough. 2011/11/23 John Sherwood <jrs@vt.edu>:> I would debug it first by putting a webserver on the firewall box and > opening 80. > > On Nov 23, 2011 10:08 AM, "Diego Dave" <diego.dave.s@gmail.com> wrote: >> >> Hi all, >> >> I''m running a firewall DomU with Endian Firewall in a XCP 1.0 box. >> >> I set enabled NAT on port 80 in the firewall to local web server, but >> I can''t get access from Internet to the web pages on web server. >> >> I looked at the firewall logs and it says "No data are provided for >> the day"... this means that any package passed by the firewall, then I >> fear it is becoming the XCP bridge. >> >> This happens often? >> >> _______________________________________________ >> Xen-users mailing list >> Xen-users@lists.xensource.com >> http://lists.xensource.com/xen-users >
If you have the web interface for the firewall running on port 80, and you are doing one to many or PAT, you can''t run a web server on the same port. If you change the port back to the 10443 that it runs on out of the box and set your NAT to port 80 for the web server, it will work. Scott On Wed, Nov 23, 2011 at 9:21 AM, Diego Dave <diego.dave.s@gmail.com> wrote:> The firewall have a web interface, I have enabled this, when I can > access to port 80 firewall... but the NAT isn''t working. > > With Xen 4 Debian I have had the same issue with bridge, the NAT in > firewalls only works when I make PCI passthrough. > > 2011/11/23 John Sherwood <jrs@vt.edu>: >> I would debug it first by putting a webserver on the firewall box and >> opening 80. >> >> On Nov 23, 2011 10:08 AM, "Diego Dave" <diego.dave.s@gmail.com> wrote: >>> >>> Hi all, >>> >>> I''m running a firewall DomU with Endian Firewall in a XCP 1.0 box. >>> >>> I set enabled NAT on port 80 in the firewall to local web server, but >>> I can''t get access from Internet to the web pages on web server. >>> >>> I looked at the firewall logs and it says "No data are provided for >>> the day"... this means that any package passed by the firewall, then I >>> fear it is becoming the XCP bridge. >>> >>> This happens often? >>> >>> _______________________________________________ >>> Xen-users mailing list >>> Xen-users@lists.xensource.com >>> http://lists.xensource.com/xen-users >> > > _______________________________________________ > Xen-users mailing list > Xen-users@lists.xensource.com > http://lists.xensource.com/xen-users >