Re: Web server behind NAT?

From: Duane Arnold (notme_at_notme.com)
Date: 06/27/03 

Date: Fri, 27 Jun 2003 05:23:11 GMT

> I can go to 192.168.0.1 to get to my modem/router
> config and set up things like port forwarding, but I'm not sure what I
> need to do.

That is the LAN IP for the router, which allows you to use to the router's
admin screens.

> What IP should I type in? If I go to www.whatismyip.com,
> it gives me 204.116.115.115, but that changes when I reset the modem.

I don't know about an ADSL ISP, if the IP they assign to your modem changes
on a routine basis. On a ISP cable connection, the IP is kind of static as
long as the modem has power and is connected to the cable.

If the IP assigned to your modem by the ISP does change on a routine basis,
the you will need to keep track of the IP being assigned at that time. Most
routers have a Admin Status screen which should tell you the LAN IP being
used by the router. The screen should also indicate the WAN IP being used by
the router (the IP that has been assigned to the modem. That WAN IP is the
IP that you must use, if one is to connect to your WEB site over the
Internet.

The http://localhost allows you to get to the WEB site running locally on
that machine. If you wanted to get to the WEB site on that machine from
another machine on your LAN, you will need to give the IP of that machine
that is running the WEB service. So, if that WEB machine's IP assigned by
the router was 192.168.0.2, then that would be http://192.168.0.2 that you
would be entering from another machine. Use IPCONG /all at the command line
on the WEB machine to get the IP for that machine.

Actually, the WEB machine should be using one of the router's static IP(s)
and not a DHCP IP, because the DHCP IP can change for the machine and the
port forwarded ports would not be mapped to the correct IP.

ISP(s) that don't allow a machine running WEB services on their network do
like this, and they do look for it and will send an email telling you to
close the ports or service will be dropped. So, it's best to only open those
ports when needed and close them when done.

So to make contact over the Internet from another machine, that would be
http://204.116.115.115, if that is the public IP assigned to the modem by
the ISP at that time.

www.britsys.com here in the US does allow a WEB server to be running on
their network, but it cost.

http://www.uksecurityonline.com/husdg/windowsxp.php

The link shows how to lock the WEB machine down and you may need to do that.

If it's not a sever machine like Win 2K server or Win 2K3 server, then only
one user can be connected to the WEB machine using the WEB services on the
machine.

HTH

Duane :) 

-- 
The protection of the machine is a process and not a given!

Relevant Pages

  • Re: cannot access modems config interface from LAN
    ... The router machine has three interfaces: ... 192.168.1.2, connected to the modem ... the wired LAN using a switch ...
    (comp.os.linux.networking)
  • Re: Help! 1 to 1 NAT on Linksys RV082 opens up firewall!
    ... > need to access a few computers over the internet using specific ports. ... Access to machines on the LAN from the Internet will ... the router to the public Internet. ... It's the same thing with me doing Port Forwadring of ports to a LAN IP on ...
    (comp.security.firewalls)
  • Re: Feasible to implement a router on a system on a chip?
    ... Or between a LAN and WAN? ... A "bridge" is a device that has two or more network ports, and which passes traffic between the ports (which may be of different types - ... no filtering or interpretation of the packets is done. ... A "router" has two or more network ports and passes packets between them based on their IP addresses, ...
    (comp.arch.embedded)
  • Re: cannot access modems config interface from LAN
    ... The router machine has three interfaces: ... 192.168.1.2, connected to the modem ... the wired LAN using a switch ...
    (comp.os.linux.networking)
  • Re: REMOTE DESKTOP FRUSTRATIONS
    ... I've personally never had to open ports ... on the modem - just the router. ... so you fake a fixed address with DDNS. ... > router, the opening of the ports through the modem gets blocked. ...
    (microsoft.public.windowsxp.work_remotely)