Port forwarding / Mapping

From what I see, in the configuration standard of DBaaS Glassfish is listening on HTTP on port 8080 and HTTPS on port 8181.

I don't see any possibility of mapping in network security rules, so I guess <>as mapping network external port 80 <>- 8080 and 443 - 8181 goes transparent somewhere that I do not have access to (unless I'm missing).

Long story short, I want to put NGINX infront of Glassfish, and I wonder how I can point port 80 and 443 to NGINX instead of Glassfish.

(I could change the ports that GlassFish is listening on - but I wonder if there is a better way).

Thank you

John

OK, should have dug a little deeper before posting. This is done through the PREROUTING nat.

# iptables -t nat -vnL
Chain PREROUTING (policy ACCEPT 205 packets, 11760 bytes)
pkts bytes target    prot opt in    out    source              destination
  74  4444 REDIRECT  tcp  --  *      *      0.0.0.0/0            0.0.0.0/0          tcp dpt:80 redir ports 8080
    0    0 REDIRECT  udp  --  *      *      0.0.0.0/0            0.0.0.0/0          udp dpt:80 redir ports 8080
  59  3612 REDIRECT  tcp  --  *      *      0.0.0.0/0            0.0.0.0/0          tcp dpt:443 redir ports 8181
    0    0 REDIRECT  udp  --  *      *      0.0.0.0/0            0.0.0.0/0          udp dpt:443 redir ports 8181

Tags: Database

Similar Questions

  • How can I enable port forwarding in the router of the time capsule

    Does anyone know how to enable port forwarding in router Time Capsule Airport please?

    Port Mapping on the time Capsule airport cannot be enabled unless you have the right type of modem on your network.

    Thus, we need the number of brand and model of the device you're calling your "modem" before we can move forward. Please post back this information.  We do not need a series number... only the name of the manufacturer and model number of the modem.

  • Airport of Port Forwarding is more?

    So I'm pretty new to this network thing. I don't know the technical network terms then please do not use (or at least their simplification). So I managed to set up my ASUS RT - something something router. I also put in some rules to sink my Xbox One anywhere port forwarding. However, I had problems with port forwarding, so I just used the dmz for her service. However, given that I had to move my Xbox to another part of my house with worst network connection, set up a time capsule for the network. After a long time, I managed to do the work, but now I can listen to is no longer my Xbox. My guess is that the port forwarding rules are not carriers, as it connected via ethernet time capsule and the capsule is connected to another time capsule via radio and this time capsule is connected to my ASUS router via ethernet. So my question is: how to transfer the required ports to my Xbox?

    If both of your time Capsules are configured as bridges, the Asus router is the one that needs to be set up on port mapping. The port mapping is used only when a router is configured for routing. In other words, the NAT and DHCP services are enabled. This is the default value for any router.

    Just to make sure that I understand your current network configuration, the following is correct?

    • ASUS > Time Capsule > > > Time Capsule > Xbox, where ' > ' represents a wired connection, and ' > > > ' represents a wireless.
  • Port forwarding on Time Capsule for Geniego

    Anyone know how to configure the port forwarding on time capsule?

    I need to set a port 8082 & 8083 for my Directv Geniego.

    Press the bar area and order at the same time.

    Airport utility type, press ENTER.

    Select time capsule, and then select edit (enter the code for the device).

    Select network, select "+" sign

    Firewall entry type: IPv4 Port Mapping

    Description: GenieGO

    Public UDP: If manual of the Consult of UDP user, enter the numbers of the port here (use commas to separate).

    Public TCP: If manual of the Consult of user TCP, enter the number in port here (use commas to separate).

    Private IP address: IP address of your GenieGO

    UDP private: same as the public

    Private TCP: Same as the public

    Select Save

    Update of TimeCapsule.

    Test.

  • VPN site to Site with NAT and Port forwarding on a 871

    Hello

    Could someone please look at the config 871 router attached and tell me where I'm wrong!

    VPNs all work, work, BUT anyone trying to connect to a port that is sent through the VPN port forwarding fails.

    In the config attached Port 3389 (RDP) is sent to an internal server, if you connect to the external interface Internet connection is made and it works well, but if someone tries to connect to the IP address internal to that same server through VPN, it does not.

    We've added commands to stop working on the lines VPN NAT, but these do not seem to work.

    What Miss me?

    Thank you in advance and I will adjudicate all useful responses.

    It is a common problem. Yes you added controls to prevent NAT to work above the tunnel, but your static nat port to port 3389 takes precedence over the generic nat command, and there not all orders top to prevent it is nat would be above the tunnel.

    I wrote an example configuration for this some time, see here for more details:

    http://www.Cisco.com/en/us/Tech/tk583/TK372/technologies_configuration_example09186a0080094634.shtml

    If all goes well, he explains everything. Note that it is for a general order static host, not a static port that you have, but the concept is exactly the same. Just add a statement roadmap on the end of your static command of the port, and this route map - will reference an ACL that denies are used when going up above the tunnel.

  • Static translation with Port forwarding

    Hello

    I have a scenario in which two public ip address (the one with HTTP requests & other with query SMTP/SSL for OWA) must be translated on a single inside the ip of the ISA Server in the DMZ. Please suggest which is the best practice. I know that we cannot do a NAT because the two addresses ip cannot translate into one. Use the static translation with forwarding Port of best practice to access the ISA server for OWA? What is the best security that can be applied at the moment? I'm going to redirect only requests to port 80,8080,25,443,110. I'll also create access list to only allow as these ports.

    I need to recommend this to a client. Please advice.

    Thank you

    Kevin

    Port forwarding is the best way to go here. As you already know, you can enter a static for two outside IP pointing to an inside (or vice versa), but statically mapping ports just will be fine. Similarly, simply allow these ports in your incoming ACL and you'll be good to go.

    You want something like the following:

    static (inside, outside) tcp XXX1 80 a.a.a.1 80

    static (inside, outside) XXX1 8080 a.a.a.1 8080 tcp

    static (inside, outside) tcp x.x.x.2 25 a.a.a.1 25

    static (inside, outside) tcp x.x.x.2 110 a.a.a.1 110

    public static x.x.x.2 a.a.a.1 443 tcp (indoor, outdoor) 443

    list of allowed inbound tcp access any host XXX1 eq 80

    list of allowed inbound tcp access any host XXX1 eq 8080

    list of allowed inbound tcp access any eq 25 x.x.x.2 host

    list of allowed inbound tcp access any host x.x.x.2 eq 110

    list of allowed inbound tcp access any host x.x.x.2 eq 443

    Access-group interface incoming outside

    where x.x.x. [1 | 2] is your public IP address and a.a.a.1 your home server.

  • VPN and port forwarding problem

    Hello

    I configured a VPN (IPSec) between 2 sites on Cisco 881 - K9.

    The server 'A', which the 192.168.0.X address must be accessible on port 80, 8080 and 90 of the public network.

    I have configured the ports of shipment with the command:

    IP nat inside source static TCP 192.168.0.X 90 interface fastethernet 4 90

    IP nat inside source static TCP 192.168.0.X 80 4 80 fastethernet interface

    IP nat inside source static TCP 8080 interface fastethernet 4 8080 192.168.0.X

    The server is accessible from the outside, the site in which it is located.

    But there is a problem with the second site:

    • I ping the server with its local address 192.168.0.X
    • But when I try to open a Web page that is using port 80 or 8080 or 90, the server appears inaccessible

    It seems that the problem is due to the translation of port because when I delete the configuration of port forwarding is no problem over on the second site.

    Thanks for your help

    Hello

    You need conditional NAT.
    When you want to Port Forwarding to work just for a part of traffic, e.g. when access to the server from the Internet
    but not for traffic entering via VPN, you can add a roadmap to the end.

    Thus,.
    IP nat inside source static TCP 192.168.0.X PUBLIC_IP 4 xx xx map route VPN

    The road map tells when it is NAT that will to spend.
    It will always happen, but when traffic is coming from the VPN.

    Now... the problem is that you can add a roadmap, when you have a rule of Port forwarding to an IP address (and not an interface).

    Anyway, give it a try and let us know.

    Federico.

  • Unable to connect with RDP after you have configured the port forward

    I have configured my router with port pushing forcefully with port 3389. Now when I try to rdp to the pc from outside I get the following error:

    Remote Desktop cannot connect to the remote computer to one of the following reasons:

    1. remote access to the server is not enabled

    2. the remote computer is disabled

    3. the remote computer is not available on the network

    I checked that all these 3 does not apply to me. I was able to RDP pc (with the local ip address) from another pc in my network home but not from outside. Could someone help me please?

    Is the computer on which you want to connect with Remote Desktop [DRC], IE. the DRC, by using a host address static IP on your LAN? In the contrary case and the computer is restarted its possible its LAN IP address changed by denying any plan of port forwarding you set up in your router. Go to the site CanYouSeeMe and host DRC computer test.

    http://www.canyouseeme.org

    Also, when the connection to make sure that you really test from a client outside the DRC and does not use the public IP address of the router from a local computer on your local network.

    http://theillustratednetwork.MVPs.org/RemoteDesktop/TroubleshootingDiagrams/Basic.html

    Finally you are sure that the public IP address of the router has not changed? If you have a dynamic IP from your ISP, you can use a free as no - IP.com that maps a name to your public IP address. Call using the fully qualified domain name. Many routers support which is a free service like DynDNS for example. You can also download and install a small program on the host of the DRC. The program communicates with the No - IP or DynDNS servers on a regular basis. The server so you know what your current IP address and that map to your fully qualified domain name.

    http://www.no-IP.com/?utm_source=MSN&utm_medium=CPC&utm_term=no%20IP%20.com&utm_campaign=brand+MSN

    http://dyn.com/DNS/

  • Why isn't my port forwarding of the opening port

    I have the latest version of the 3 terabyte time capsule. I'm trying to forward a port so I can access my security cameras and it does not open.  My camera 100 port needs to be open and it will report as not open on any port test sites. Any ideas as to why, I use a static ip address of the server for the security system.

    Testing websites are useless... test by plugging actually to the camera from a device attached to a captive phone or a friend...

    Port forwarding works only if you have the public IP address on the Wan of the TC... and it's the only router in the network... is this the case?

  • your external IP address for port forwarding

    OK, so I want to do a game server, but... There need Port Forwarding, so I called my InternetServiceProvider "Clear."

    Claire told me that "WE DO NOT support the external Ip addresses: then I was then told that I have to call HP because that's what my PC is under.

    I decided to go to the site and ask because they want a $ 60 million tax which is good, but... I don't have the money! This is why I need a server. In any case if you can please give me a video or tell me how do it in the response that would be LARGELY APPRECIATED!

    -Sincerely

    VladmirTodd

    Go to portforward.com and use their tutorials.

  • How do I port forward on apple airport? (READ ALL)

    I have an airport express from apple connected to an asus router via wifi and I need to know how I can portforward by airport to the router because my pc is connected by ethernet to the airport. Help, please.

    The express should be none not routing at all and therefore no port forwarding.

    The only way this can work is the express installation to the wireless bridge... Apple called client mode... There is no routing.

    BUT it can also have port problems... It is really unsuitable if you operate in questions.

    In any case all the transfer is possible on the Asus.

  • Port forwarding rules missing WNR1000V3

    I read a few posts here that may be similar, but they are so old, that threads are blocked. I'm trying to help out a local company add some rules to redirect to their server port WNR1000V3 more.

    They must have some configuration of port forwarding already because they are able to access an existing via RDP server so there is a rule somewhere for port 3389. However, it is has nothing listed in respect of port forwarding.

    My view on it after scratching my head for several hours, it's that there is either a port forwarding rules defined and running, but they are not displayed in the user interface, OR there is some screen that I have not found (was all!) where port forwarding is also configured.

    I think it's the first because there is no rule for the listed FTP, but if I try to add a new FTP rule, it displays a "conflict of Port with other services".

    Firmware is V1.0.2.62_60.0.87 although the router points out that there is an update.

    There is a known issue like this with this model? It seems a few years old.

    Thank you, Rob.

    Sorry, I would have given an update on that. I am aware of what means the error and it was probably that a rule on this port unless it was not displayed. I hoped that export Netgear configuration could be a human readable script (found on the Cisco routers), but it's not.

    After discussion about ServerFault and checking some of the suggestions there, it became clear that something was broken enough with the router. An update does not solve so I have taken note of all the settings and did a reset.

    That solved the problem. My theory is that some bugs in an earlier version of the firmware caused a bad record in order to be there for port forwarding. One that actually worked, but could not be displayed.

    Cheers, Rob.

  • NETGEAR ProSafe VPN Firewall SRXN3205 and port forwarding?

    Hi, this is a long shot, but I'm pulling my hair out at this point and can be a bit over my head, as I am new on network

    Small short story, I have two servers, one is the NAS box (IE if I connect via the internet to the site via public IP network from home, I get it that site says 'my actions' I insert login and pass and get access to them.)
    That is, everything is peachy.
    The problem is when I try to connect to my FileMaker Server I'm not and instead, he takes me to the login NAS box. So I think ok, I need to port forward (5003 for filemaker) to go to different PC local LAN(192. etc)

    Security > firewall > Add Service entering:
    Service: fmserver
    Action: Always leave
    Send to LAN Server: unique address 192. etc is filemaker installed on (and different on a NAS)
    Definition of Port number: 5003<-- is="" this="" right?="" how="" else="" would="" you="" indicate="" you="" want="" all="" connections="" on="" this="" port="" to="" go="" to="" this="" specific="" lan="" machine="" from="" internet="" instead="" of="" default="" which="" seems="" to="" be="">
    rest is default, I click on apply.

    Here's what I don't understand. In the table of incoming Services, (security > firewall) I have two local IP in the list, a SIN, the other for Filemaker. But only the top works and can be connected to. I can move every top position and it will work, but they will not work at the same time, just the one that sits on the top of the sad Smiley page

    and yes I read the manual again and again and don't know how I'm screwing up the port forwarding on this point, even if I am brand new to probably something stupid Smiley Happy (our work IT guy is gone so tried to get involved through this somehow)

    Any help would be appreciated.

    Hello sinieq,

    There is a hierarchy on incoming service table, which is normal. I see 4 services added using "ANY" (ALL use any port number) you will need to remove/disable these because of the rule of the hierarchy on the table, all other services will be ignored when EVERYTHING is used. What is the port number used by the NAS Server? I don't see a port defined to access NAS. Try disabling services by using "ANY" and try again by adding the translation to the port number of the NAS.

    Let us know what happens.

    Thank you

  • Need help with the port forwarding for a XBox remote Streaming

    I have a router R6200v2 and need help with port forwarding.

    I came across this set of instructions for setting up stream port forwarding XBox remotely from anywhere

    http://kinkeadtech.com/2015/07/how-to-stream-Xbox-one-to-Windows-10-from-anywhere-with-Internet/

    I have no idea when it comes to such things and I want to make sure I do it correctly without messing up my existing home network.

    Port Forwarding and triggering Port pages setup look very different from what the guy uses. Can someone walk me through what I do to set up please?

    Hi @varxtis,

    You must enter them in the field for a start external Port and external completion Port. You will need to send individually except for the range of 49000-65000. The steps are as follows.

    1. create a Service name (it could be something else that you cannot use the same service name twice. Ex. XBOX1, XBOX2 and so forth.)

    2. Select the type of service (TCP, UDP or both)

    3 entry 5050 times a start external Port and external endpoints.

    4. Select the IP address of your XBOX.

    5. Select apply.

    6 do the same for other port numbers. To the beach, use 49000 for the external departure Port and for the external completion Port 65000.

    Kind regards

    Dexter

    The community team

  • UDP Port forwarding

    I opened the ports on my Airport for HTTP, TCP, and UDP.

    By using the website canyouseeme, I confirmed that the TCP and HTTP ports are open.

    However, the UDP port is indicating 'connection refused '.

    Port forwarding is configured to be the same for each.

    Any thoughts would be appreciated...

    I opened the ports on my Airport for HTTP, TCP, and UDP

    FWIW, only the HTTP protocol is a 'standard' port already assigned. It is port 80. This port can be a type TCP or UDP port. On the other hand, generally TCP or UDP ports vary from 0 to 65535... so your statement «I open ports on my Airport...» TCP and UDP"does not tell us what are the ports really tried to open and for what reason.

    Some ports are blocked by ISPS, so this may be a reason that the method used, canyouseeme, can not 'see' she also open.

    Is your 802.11ac AirPort Extreme router "main"? In other words, it is directly connected to a simple Internet modem via an Ethernet connection between them?

Maybe you are looking for