Server behind router

I want to set up my server to run a webserver with virtual hosting behind a router. I had set it up in the past with a static IP from AT&T to run my web services with an outside DNS sending all traffic to me and a local IP 192.168.1.26 to run my file services. I was told it is better to run everything behind a router but I don't know how to set it up.
Can someone help with my initial setup?
Thanks in advance.

192.168
You are probably already behind a router or switch at some point. No machine connected directly to the Internet should have an IP address starting with those numbers.
(32583)

Similar Messages

Problem with server behind router

Hey there,
I'm working on a small chatting application which performs pretty well when connecting to a server on the same local network, but not-so-well when it's connecting to a server behind a router that's not on the same network.
Is there any way to get past this problem without using port forwarding? I'd try using that, if it weren't for the fact that the router in question didn't come with any software for configuring it.
I've looked around for a fix to this problem for a while, but I still haven't managed to find anything. Any ideas?
The chat program uses ObjectInput/Output streams to send data between the client and server.

Without port forwarding on the router, your options are a bit limited. You'll probably need a central server to act as a go-between, or at least a rendez-vous point.
But doesn't your router have an HTML interface? What make and type is it? A manual should be easy to find online, if you don't have a printed version.

RMI Server behind Router: How to set the right IP?

Hi, I am having trouble with the Server of an RMI application, the set up is this:
1. The server is not always running on the same host: it may be a computer with a publicly visible and unique IP, or it may be under a computer behind a router.
2 . The user that runs the server may not know how to get his IP in the router environment.
3. The user that runs the server knows sh*t about rmiregistry or how to set a Property to the java interpreter (for example: -Djava.rmi.server.hostname=<host>).
4. The Server code is this:
* Represents the Server to the Domination app (including the chat plugin).
public class Server {
     private static final int PORT_NUM = 1099;
     private static final String CHAT = "chat";
     private static final String DOMINATION_FACTORY = "Domination";
      * Sets the Chat and Application Servers.
      * @param args
      *            Never used.
     public static void main(String[] args) {
          try {
               Registry registry = LocateRegistry.createRegistry(PORT_NUM);
               Chat chatObject = new ChatImpl();
               UnicastRemoteObject.unexportObject(chatObject, true);
               UnicastRemoteObject.exportObject(chatObject, PORT_NUM);
               registry.rebind(CHAT, chatObject);
               System.out.println("Chat ready...");
               Fabrica fabricaObject = new FabricaImpl();
               UnicastRemoteObject.unexportObject(fabricaObject, true);
               UnicastRemoteObject.exportObject(fabricaObject, PORT_NUM);
               registry.rebind(DOMINATION_FACTORY, fabricaObject);
                        System.out.println("Domination Factory ready...");
               System.out.println("All systems up and running");
          } catch (Exception e) {
               e.printStackTrace();
               System.exit(1);
}I wrote the code that way (and not using Naming.rebing("//" + host_name + "/Service", serviceObject)) so the server user won't need to run the rmiregistry (In fact, the Server is deployed via a jar file, so just a happy double-click to the jar will do the work)...
OK, then the problem is this: The client is always having "connection refused" Exceptions while the server is behind a router and not in the same network of the client.
The IP that is shown in the exception is always the inner IP of the host (or 10.x.x.x or 192.168.x.x or whatever it may be). So it seems that the registry is always choosing that IP and not the router's.
I need to know if there is a way to rewrite the Server code so the user just should do the same 'double-click' to run the server and not mess around "investigating" the outer IP. I read some of the RMI specs and it suggest to do IP Tunneling and some other techniques that I don't think may be appropiate to the nature of this "roaming server" application.

Thanks, but that still doesn't do the work. As I stated in the post, not every user will know how to set java.rmi.server.hostname or even look for an outer IP... I was asking for an "automagical" way to code my server class so it could do some job to do the guessing.
Even though... I tried both ways at home with the help of a friend as the client, and it seemed to work. The client connected to the server but it was kicked out in less than 30 seconds. Being specific, every client, the ones inside and the ones outside my network. As if the only right way was to let the JVM set the IP (but again, in that way the server is invisible to the clients outside the network).

Advice on Fixing/Setting Up Mac Server behind Router

I would like advice on how to setup/fix a Mac Snow Leopard (10.6.8) server running on an Xserve. The server is only used to to host network accounts / act as a remote drive for a Mac-based laboratory. It is not a mail server, web server, etc. The goal is to enable (i.e., force) students to keep all of their documents on the server while accessing them easily from any computer, ideally from any point in the world.
The current setup is:
Linksys router (192.168.1.1) connects WAN (address WWW.WW.WWW.WWW) to LAN with both DMZ and local DNS pointing to server address (192.168.1.55)
Snow leopard server at 192.168.1.55
Client macs and pcs with various local addresses 192.168.1.XXX
From the LAN side, this setup works well in that all of the client Macs (from PowerPCs running 10.5 to brand new machines running 10.8.4) have no problem accessing their network accounts. They can also access the outside world seamlessly. The server can be administered using Screen Sharing from client machines running recent versions of Mac OS (e.g., 10.8.4)
From WAN side, some things work but others don't:
          – Macs can access the server using AFP://WWW.WW.WWW.WWW, although VPN
                    needs to be running if we are off-campus
          – Macs CANNOT login to the Network Account Server when outside the LAN
                     If I go to "Users & Groups", "Login Options" and enter the server address
                    WWW.WW.WWW.WWW, I get unable to add server with a "Connection
                    failed to the directory server (2100) error message
          – I can no longer login to the server using Screen Sharing. (This worked a few months ago,
                    so I am not sure why this is failing.)
          – I worry that opening a DMZ to the server is unnecessary from a security standpoint, and
                    I would be better with port forwarding specific ports (but which ones?)
I am open to new configurations if necessary, but I suspect this is something straightforward. I am also happy to RTFM for either the server or the router, but I'd like some guidance as to what is feasible/preferred. Specifically, I would particularly like students to be able to login to the Network Account Server from outside the LAN.
The server does not do anything else (e.g., mail, web hosting).
Although we do have an IT support group in-house, their opinion seems to be that computers are security risks that should not fall into the hands of users. The mere mention of Apple products sets off a rant.
Thank you for your advice and suggestions.

I usually use either telnet (non-SSL/TLS ports) or openssl s_client (SSL/TLS ports) or maybe nc (for scanning ranges of TCP and UDP ports) to check access to specific ports from the command line, though it's very simple to run a port scan via Network Utility for this case. Launch that remotely, and see what your client can see.
Here is a list of the ports used by Apple (TS1629)   For Open Directory, you'll need at least TCP 389 or preferably 636 punched through your gateway and your local firewall, if you're not VPN'ing in.   If you're using your own DNS, you'll need TCP port 53 open (and this is mildly hazardous to your bandwidth, as more than a few folks are using DNS servers as part of DDoS attacks; they'll spoof queries and cause your DNS servers to send a reply at somebody else as part of the DDoS. The DNS servers really need to be locked down against this dreck.)
You may also need to aim your client's DNS explicitly at your own DNS server, if you're using a private domain and a private IP address space; if your servers don't have public IP addresses and public names.
Personally, I generally wouldn't expose the Open Directory ports to the 'net, or most anything else for that matter.   I'd usually VPN into the network, and "DMZ" the web-facing stuff where I can. Too much weird cruft is hitting the firewalls I'm monitoring, undoubtedly looking for weaknesses and vulnerabilities. Using the VPN services isn't a panacea, but does mean your traffic is hidden from most monitoring, your servers' ports and services are relatively protected, your DNS services are your own, and your exposure is largely limited to the VPN server access.
For the remote clients, I'd use Portable Home Directory for the wandering devices, or straight OD via VPN.

Email Server Behind WRV210

We just purchased and setup the WRV210 VPN router, but we are having a major issue with it. We are running a mail server behind the VPN router, but we can no longer connect to it through Outlook. We forwarded all of the appropriate ports but still can't connect. On our previous router we only had to forward the ports and everything worked. We can't telnet the SMTP port or anything. We have disabled the firewall and tried nearly every setting we could fine. We access the webmail service that runs on the website (Port 80) and all of the other websites. We can also VPN into the router and access all of the servers. We are also able to do outbound transactions from within the network (when using local IP's) hence why all features in webmail work. Our problem is when trying connect to POP and SMTP through outlook. This is a mjor issue as it is now interrupting our day-to-day operations.

Did you open the Ports 25 and 110 ? What Firmware are you running on the router ? Did you try to reset and re-configure all the setting ?

ServerSocket.. behind router...

I wrote a peer-to-peer application once with some gaming interfaces for roleplaying online... It was not a major technical feat...
Basically, it worked with a registry server that listened for connections, and helped facilitate connecting the clients to each other. This registry server published its current whereabouts on a static web server (cxtable.sourceforge.net, for the time being)... and then the rest happened without a relay.
At the time, I was a dialup user... so it never occurred to me to figure out how to handle "behind-a-router" situations. Now I have a cable modem, and it is behind a router so the other machines in my network (sometimes my laptop so I can work from home) can have access as well..
Naturally--this assigns a "192.168.1.x" type address....so now I am wondering.. is there a way to do this?
I searched the forums, and of the 20 hits for "behind router" I got, the following 4 looked most directly related to my issue:
http://forum.java.sun.com/thread.jsp?forum=11&thread=191572
http://forum.java.sun.com/thread.jsp?forum=11&thread=165384
http://forum.java.sun.com/thread.jsp?forum=11&thread=503235
http://forum.java.sun.com/thread.jsp?forum=11&thread=530336
Two of them look basically unanswered, and two of them answered with no resolution (and no Dukes even awarded for trying!)
Is there a dynamic way to bind a ServerSocket when behind a router such that it could accept connections?
Thanks,
Dave

And I imagine if I look hard enough, I'll find a way
to determine my router's IP programatically..That may be tougher. I don't know of anything in
java.net that will do that. (Doesn't mean it's not
there though.)
In Unix and DOS there are command line programs like
ifconfig, ipconfig, and route that wil give you
information that you might be able to parse. I think
you want to look for default gateway.
On the other hand, if your router is always connected,
its IP address probably changes very infrequently, if
at all, so finding that IP address programmatically
may be more trouble than it's worth.My code has to assume that the IP address can change (it is a p2p-ish application..I use the term lightly--it is more of an "intranet over the net" type of p2p rather than a scalable N-node p2p.) regularly...and that I won't specifically know it.
Ideally--the user wouldn't need to know his IP address to use the software... in the end.. it really is a nearing-on-orphan project... and I found someone who felt it mostly met his needs for something--a possible maintainer to hand it off to.
It is actually my first project that taught me Java (years ago)... my second was a children's programming language(http://dustyscript.sourceforge.net)...
I think the code for the p2p app((http://cxtable.sourceforge.net)) is terrible, and poorly documented, and probably the whole thing should be re-designed from the ground up... but it works for its purpose (Connecting multi-players to a chat-room with dice and other potential plugins so they can play an RPG {such as Dungeons and Dragons...etc}... but still do it as IF they were playing traditionally, sitting around a table)
The key is that now most people have a cable modem-- it will most likely still work for them -- but those more advanced people with routers/etc .. might have issues--but then, that again says that if they have routers/etc...they probably know what their IP address is and could type it in..

I have a 27" iMac connected to several others pc and to Server via router. Very frequently Lan or internet drops in my iMac

I have a 27" iMac connected to several others pc and to Server via router. Very frequently Lan or internet drops in my iMac. I Have OS 10.6.7 with all updates.

Issues like this are going to be related to the network. Intermittant problems are typically due to network interference, have you checked istumbler.net to get a report of your network?

Server 2003 routing and remote access not passing VPN traffic

I've inherited a network that has two IP scopes that are routed through a Windows 2003 server with Routing and Remote Access. I can ping both sides (we'll call them HQ and Plant) internally. My firewall has an IP from the HQ IP scope and when
I connect via VPN, I can see all the devices on the HQ network including the network card that is in the routing server for that "side". However, if I'm connected via VPN, I cannot get to any of the IPs on the Plant side, not even the card
in the routing server. The buck stops on the server.
I should mention, that the firewall assigns IP addresses that are on the HQ scope, so all VPN connections will have an address from that side.
I'm lost on how to get this set up so my VPN traffic coming in from the HQ side can be routed to the Plant devices.

Hi,
To be honest, your statement confused me a bit.
VPN is used for external client get access to internal resource. When we setup VPN server, we usually have two NICs. We need choose a NIC that will be used when client initiate
a connection request. I prefer to call it external NIC card. The internal one will work as DHCP relay agent. So this is a single way connection. You cannot dial from internal to external.
If I misunderstood you, please elaborate what you are trying to do.
Hope this helps.

Installing Iplanet web server and directory server behind a firewall

When installing iplanet web server and directory server behind a firewall - should the interal ip address be used or the external ip address?

Hello,
When you are installing iplanet web server behind a firewall,you should use the internal ip address in the firewall.
1. The external ip address connection to the Internet. The type of IP address used?dynamic (commonly used for standard
modems) or static (commonly used for cable modems) is dictated by the ISP to which you connect and the type of service it provides.
2. The internal ip adress connection. This connection must be a static IP assignment, and it must be assigned by you.
obviously it depends on the type of firewall setup you have.
Thanks
Selva

RMI server behind fire wall

hi there,
i have a running application using RMI but the problem is..
It only run when the server and the client are in the same LAN,But
when installing the server side on a machine behind a fire wall it gives me this exception
Connection refused: connect.
So is there a special technique when dealing with server behind firewalls?
if exis what should i use????
Thanks for your time
Regards
Soha

yes and some of the techniques are
HTTP tunnelling
Direct forwarding over http
Indirect forwarding over http
rmi-cgi scripts etc

DA server behind WAP

Im posting here because there is no forum for WAP feature, DA feature, or even the RAS role under Windows Server forum...
I know it is now supported to NAT traffic to the DA server in 2012 R2. I think ive figured out that collocating DA and WAP on the same server is also supported, unless the WAP is loadbalanced. I want to have my WAP-server not joined to the domain so my question
is; can I have the DA server behind my WAP reverse proxy and publish it like any web server??

Hi,
WAP is dedicated to publish HTTPS protocol. WAP won't understand IPHTTPS protocol. There is no GET/POST verb. For DirectAccess & WAP coexistence, have a look at
http://technet.microsoft.com/en-us/library/dn584113.aspx, on section "Interoperability with Other Remote Access server products.
BenoitS - Simple by Design http://danstoncloud.com/blogs/simplebydesign/default.aspx

Dynamic dns update client for archbox behind router?

I tried ez-ipupdate but i found out it cant work if youre behind router....anyone know any i can dload that do? :oops:

RahJiggah wrote:I tried ez-ipupdate but i found out it cant work if youre behind router....anyone know any i can dload that do? :oops:
Yeah, that one just don't cut the mustard. Try "ddclient". I started a thread a long time ago comparing different dyndns clients, and found "ddclient" had the richest feature set, including a lot of support for you router folk.
Try this thread.

SIP server behind PIX

Hello all,
I have a SIP server NATted behind a PIX 515e (IOS 6.3). The problem is that endpoints will register with the SIP server only if I remove username/password authentication. If I remove the natting (SIP server and endpoint can directly connect to each other), registration occurs with username/password authentication. What can be the problem?
Thanks
Marc

I have a SER SIP Server behind a PIX 515e with authentication, I have the same problem at the beggining, but then I use use names and not IPs in my configuration, and now I can authenticate users without problem. If your private IP is for example 192.168.1.100 and the public 80.50.0.88, the client will use 80.50.0.88 in the authentication field to calculate the nonce(I think it, not sure) and your server will use 192.168.1.100.
I hope this help you.

Putting Identity Server behind firewall

Hi All,
I have an application running on SunONE app server 7 with agent in order to control authentication and authorization. I would like to put the identity server behind firewall. However, everytime when the agent redirect to identity server to perform login, it redirects directly which user can't access the login page. May I know how can I put the Identity server behind firewall? Must I use web proxy server instead? Any other solution? Thx a lot.
\Tobey

Hi, this is Tobey again. I have installed Identity Server 6.1 and a web proxy server 3.6 in front of the Identity Server.
The web proxy server succeed in reverse proxying all usual applications. However, when I try accessing amconsole through proxy server, the console service always re-direct me to Identity Server host directly. And my client browser is not allow to resolve that hostname.
What I have configured is setting regular and reverse url mapping in Web proxy server. In Identity server, I have set the fqdn mapping, dns alias, adding one more in server list and cookies domain.
Any one had experience on putting Identity Server behind firewall? How to solve the hostname problem that redirected by Identity Server service? Thx a lot.
\Tobey

Client connection to a Server behind a router

Hello everyone,
I'm building a client / server application where the server will be my machine that is in residential gateway behind a router. the client will be out of the U.S. completely. On the client side the connection method (connectTo(InetAddress ip)) must know the server IP address in order to connect to it. I've tried configuring port-forwarding on my router to have it forward any connection under port 5555 to my local IP and passing my public IP on the client side to that connection method. Disappointingly, that didn't work. Here is my Code for the server:
import java.io.*;
import java.net.*;
* Server class, to accept concurrent client
* requests,through accepting socket connection
* and establishing a new thread to provide the
* desired service
* @author True
* @see source.ServiceProvider
public class Server {
     * Creates a new instance of source.Server
    public Server(){
        try{
            ServerSocket ss = new ServerSocket(5555);
            while(true){
                Socket sock = ss.accept();
                ServiceProvider sp = new ServiceProvider(sock);
                 sp.start();
        catch(IOException x ){
            // handles exception here
     * Main method creates a new instance of Server
     * @param args String [] of parameters at the excusion time
    public static void main(String args[]){
        new Server();
}And here is my code for the client:
// irrelevant code here...
private void connectTo(InetAddress ip){
         try{
             Socket sock = new Socket(ip, 5555 );
//           Building Streams
             OutputStream os = sock.getOutputStream();
             ObjectOutputStream oos = new ObjectOutputStream(os);
             InputStream is = sock.getInputStream();
             ObjectInputStream ois = new ObjectInputStream(is);
             // more irrelevant code here...
         catch(IOException x){
             // handle exception here
         catch(ClassNotFoundException x){
             // handle exception here
}Any ideas or comments are welcome and highly appreciated.

true_lover wrote:
All configuration seem fine. port forwarding is straight forward on the router page. I checked all numbers & values and all seemed fine.Well obviously it's not. Otherwise you wouldn't be getting a connection refused.
The only other item worth checking is if your ISP is blocking the port. Which may well be happening.
The other poster was correct, once you have the exception figured out (aka what it is) and it's connection refused this is not actually a Java related problem any more and you should take that question to a general networking forum.
Edited by: cotton.m on 27-Nov-2008 7:46 PM

Server behind router

Similar Messages

Maybe you are looking for