ownCloud Routing

alex.olynyk

alex.olynyk

So first issue is... Windstream. The absolute worst ISP ever. So bad. They actually changed their name to hide their shame. They were Paetec in Rochester and were famous for being unable to get their own lines working. Drop them the moment you can. Hopefully you didn't get into any contracts with them.

Were in a contract. The boss is trying to move to Bright House

scottalanmiller

@alex.olynyk said:

@scottalanmiller adtran netvanta 4430

AdTran is good, we should be able to figure this out.

alex.olynyk

@scottalanmiller said:

@alex.olynyk said:

@scottalanmiller My boss wants one address for both internal and external

Why would he inject a technical opinion in that way? What if the solution is to have different addresses? What he "wants" is not a business goal, why would he "want" something like that?

He doesnt want to be bothered teaching anyone how to use it

scottalanmiller

@alex.olynyk said:

@scottalanmiller said:

@alex.olynyk said:

@scottalanmiller My boss wants one address for both internal and external

Why would he inject a technical opinion in that way? What if the solution is to have different addresses? What he "wants" is not a business goal, why would he "want" something like that?

He doesnt want to be bothered teaching anyone how to use it

That's not related. What he stated as a "want" isn't the goal. The goal might be "easy to use", having one IP address may or may not solve that problem. That's the problem - it's a proximate goal, not the real goal. Getting focused on a proximate goal is a good way to get derailed and create things that don't really work for the given need.

scottalanmiller

I'm assuming that you do not have a DMZ?

coliver

We mentioned previously that you need to configure ownCloud to use the hostname in those shared links. That won't help for external communication but as long as you have the DNS A record pointing to the ownCloud server you won't have an issue internally. You probably have to configure this in the apache file. What you want to do can't be done externally to the ownCloud server. Until you configure this any link you attempt to send out will always have the IP address instead of the hostname.

alex.olynyk

@scottalanmiller said:

I'm assuming that you do not have a DMZ?

All internet goes through Windstream so I dont think so

scottalanmiller

@alex.olynyk said:

@scottalanmiller said:

I'm assuming that you do not have a DMZ?

All internet goes through Windstream so I dont think so

That's not relevant, a DMZ is on your side of the Internet.

alex.olynyk

@coliver said:

We mentioned previously that you need to configure ownCloud to use the hostname in those shared links. That won't help for external communication but as long as you have the DNS A record pointing to the ownCloud server you won't have an issue internally. You probably have to configure this in the apache file. What you want to do can't be done externally to the ownCloud server. Until you configure this any link you attempt to send out will always have the IP address instead of the hostname.

We dont have a unified domain yet. Its all broken up

alex.olynyk

@scottalanmiller said:

@alex.olynyk said:

@scottalanmiller said:

I'm assuming that you do not have a DMZ?

All internet goes through Windstream so I dont think so

That's not relevant, a DMZ is on your side of the Internet.

I have a DMZ port on the SonicWALL

coliver

@alex.olynyk said:

@coliver said:

We mentioned previously that you need to configure ownCloud to use the hostname in those shared links. That won't help for external communication but as long as you have the DNS A record pointing to the ownCloud server you won't have an issue internally. You probably have to configure this in the apache file. What you want to do can't be done externally to the ownCloud server. Until you configure this any link you attempt to send out will always have the IP address instead of the hostname.

We dont have a unified domain yet. Its all broken up

That really doesn't matter. You can always go back and change the hostname again to whatever you end up with. From what you've written here you want a hostname in place of the IP address. Is that correct?

scottalanmiller

@alex.olynyk said:

@scottalanmiller said:

@alex.olynyk said:

@scottalanmiller said:

I'm assuming that you do not have a DMZ?

All internet goes through Windstream so I dont think so

That's not relevant, a DMZ is on your side of the Internet.

I have a DMZ port on the SonicWALL

There is a SonicWall? Where did this come into the conversation?

alex.olynyk

@scottalanmiller said:

@alex.olynyk said:

@scottalanmiller said:

@alex.olynyk said:

@scottalanmiller said:

I'm assuming that you do not have a DMZ?

All internet goes through Windstream so I dont think so

That's not relevant, a DMZ is on your side of the Internet.

I have a DMZ port on the SonicWALL

There is a SonicWall? Where did this come into the conversation?

We have a SonicWALL but it only does VPNs

scottalanmiller

Are you trying to reference the ownCloud by IP or by hostname?

alex.olynyk

@scottalanmiller said:

Are you trying to reference the ownCloud by IP or by hostname?

IP

scottalanmiller

@alex.olynyk said:

@scottalanmiller said:

Are you trying to reference the ownCloud by IP or by hostname?

IP

Well that's your problem. You can't do that. Fix that first THEN let's work on getting things working as needed. You don't give users IP addresses, that's nuts. Your BOSS thinks this is okay? And he's so dedicated to it that he is using it as an excuse to bypass the FIREWALL?

alex.olynyk

@scottalanmiller said:

@alex.olynyk said:

@scottalanmiller said:

Are you trying to reference the ownCloud by IP or by hostname?

IP

Well that's your problem. You can't do that. Fix that first THEN let's work on getting things working as needed. You don't give users IP addresses, that's nuts. Your BOSS thinks this is okay? And he's so dedicated to it that he is using it as an excuse to bypass the FIREWALL?

Yes

alex.olynyk

What steps do i need to take to access it by hostname?

scottalanmiller

@alex.olynyk said:

@scottalanmiller said:

@alex.olynyk said:

@scottalanmiller said:

Are you trying to reference the ownCloud by IP or by hostname?

IP

Well that's your problem. You can't do that. Fix that first THEN let's work on getting things working as needed. You don't give users IP addresses, that's nuts. Your BOSS thinks this is okay? And he's so dedicated to it that he is using it as an excuse to bypass the FIREWALL?

Yes

If you were to be audited for this, a good auditor would use the term "professional negligence." That means an error so large that puts the business at risk and so inappropriate that a judge would consider lifting employee protections so that the company can prosecute criminal action against the person who did it. This is a level of security blunder so great that your boss has the responsibility to go to management and tell them that he's not qualified to be doing what he is doing and is in over his head to a point where he is a danger to the business. Not doing so puts him in deep legal hot water.