ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Certbot

    IT Discussion
    8
    138
    28.2k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • alex.olynykA
      alex.olynyk @Dashrender
      last edited by

      @Dashrender yes, it works from the outside. Our FW is managed by Windstream so unsure what you are asking

      DashrenderD 1 Reply Last reply Reply Quote 0
      • DashrenderD
        Dashrender @alex.olynyk
        last edited by

        @alex.olynyk said in Certbot:

        @Dashrender yes, it works from the outside. Our FW is managed by Windstream so unsure what you are asking

        You're firewall is manged by Windstream? huh - didn't know they did that.

        You need to call them and ask them to turn on hairpin routing in the firewall/router/cablemodem/router, whatever it is.

        If they tell you that they can't, then you will have to use Split Horizon DNS to solve this problem.

        alex.olynykA 1 Reply Last reply Reply Quote 0
        • alex.olynykA
          alex.olynyk @Dashrender
          last edited by

          @Dashrender which means create a DNS zone called roseradiology.com and add records for my public servers?

          DashrenderD 1 Reply Last reply Reply Quote 0
          • DashrenderD
            Dashrender @alex.olynyk
            last edited by

            @alex.olynyk said in Certbot:

            @Dashrender which means create a DNS zone called roseradiology.com

            yes

            and add records for my public servers?

            no

            You'll add a brand new zone to your DNS servers (make it AD integrated) and then add in all the records that exist in the internet based one, but you'll change the IP from external live IPs to the IPs that are used by those services inside your network.

            So for ownCloud you'll do:

            A record Owncloud : 192.168.128.10

            alex.olynykA 1 Reply Last reply Reply Quote 1
            • alex.olynykA
              alex.olynyk @Dashrender
              last edited by

              @Dashrender our mail server is hosted POP so that's accessed via mail.roseradiology.com
              no internal IP address for that

              JaredBuschJ 1 Reply Last reply Reply Quote 0
              • JaredBuschJ
                JaredBusch @alex.olynyk
                last edited by

                @alex.olynyk said in Certbot:

                @Dashrender our mail server is hosted POP so that's accessed via mail.roseradiology.com
                no internal IP address for that

                Then for that one you will still use the external IP, but you WILL have to put in a record in your local DNS.

                I have lost track of how many times you have been told this is the correct answer.

                DashrenderD alex.olynykA 2 Replies Last reply Reply Quote 1
                • JaredBuschJ
                  JaredBusch @Alex Sage
                  last edited by

                  @aaronstuder said in Certbot:

                  @StrongBad The only thing I can think of is speed? Maybe it's a bit faster? However many routers have loopback NAT, so no difference there.

                  The term you are looking for is HAIRPIN NAT.

                  Personal opinion incoming: You NEVER want to rely on HAIRPIN NAT, ever.

                  For most companies, DNS is not something that changes very often. It is much easier to handle entering DNS information both into both the internal and external DNS servers.

                  DashrenderD 1 Reply Last reply Reply Quote 0
                  • DashrenderD
                    Dashrender @JaredBusch
                    last edited by

                    @JaredBusch said in Certbot:

                    Personal opinion incoming: You NEVER want to rely on HAIRPIN NAT, ever.

                    For most companies, DNS is not something that changes very often. It is much easier to handle entering DNS information both into both the internal and external DNS servers.

                    I tend to agree with JB on this one.

                    1 Reply Last reply Reply Quote 0
                    • DashrenderD
                      Dashrender @JaredBusch
                      last edited by

                      @JaredBusch said in Certbot:

                      @alex.olynyk said in Certbot:

                      @Dashrender our mail server is hosted POP so that's accessed via mail.roseradiology.com
                      no internal IP address for that

                      Then for that one you will still use the external IP, but you WILL have to put in a record in your local DNS.

                      I have lost track of how many times you have been told this is the correct answer.

                      Hey, listen to JB on this one you should.

                      1 Reply Last reply Reply Quote 0
                      • alex.olynykA
                        alex.olynyk @JaredBusch
                        last edited by

                        @JaredBusch i just did this and it still wont work. when i ping www.rose and mail.rose it returns the same IP. Added both in local DNS. www works on the inside but not mail

                        owncloud and pacs work on the inside but no mail

                        DashrenderD 1 Reply Last reply Reply Quote 0
                        • alex.olynykA
                          alex.olynyk
                          last edited by

                          0_1464215393881_Capture.PNG

                          DashrenderD JaredBuschJ 2 Replies Last reply Reply Quote 0
                          • alex.olynykA
                            alex.olynyk
                            last edited by

                            now only owncloud and pacs are working on inside

                            www and mail are not working

                            cause they have the same IP when i ping? how do i fix?

                            DashrenderD 1 Reply Last reply Reply Quote 0
                            • DashrenderD
                              Dashrender @alex.olynyk
                              last edited by

                              @alex.olynyk said in Certbot:

                              @JaredBusch i just did this and it still wont work. when i ping www.rose and mail.rose it returns the same IP. Added both in local DNS. www works on the inside but not mail

                              owncloud and pacs work on the inside but no mail

                              I hate to ask, but please post a pic of the command prompt where you are pinging those addresses.

                              alex.olynykA 1 Reply Last reply Reply Quote 0
                              • DashrenderD
                                Dashrender @alex.olynyk
                                last edited by

                                @alex.olynyk said in Certbot:

                                now only owncloud and pacs are working on inside

                                www and mail are not working

                                cause they have the same IP when i ping? how do i fix?

                                I'm not sure what you mean that they have the same IP? your picture of your DNS shows you set them up with the same IP, so that is to be expected.

                                1 Reply Last reply Reply Quote 0
                                • DashrenderD
                                  Dashrender @alex.olynyk
                                  last edited by

                                  @alex.olynyk said in Certbot:

                                  0_1464215393881_Capture.PNG

                                  WOW, assuming all the NS (DNS servers) are Active Directory Domain Services (ADDS), you have a lot of them, are you a huge company?

                                  alex.olynykA 1 Reply Last reply Reply Quote 0
                                  • alex.olynykA
                                    alex.olynyk @Dashrender
                                    last edited by

                                    @Dashrender 0_1464216989329_Capture.PNG

                                    1 Reply Last reply Reply Quote 0
                                    • alex.olynykA
                                      alex.olynyk @Dashrender
                                      last edited by

                                      @Dashrender 11 centers

                                      1 Reply Last reply Reply Quote 0
                                      • DashrenderD
                                        Dashrender
                                        last edited by Dashrender

                                        OK that matches what you setup for DNS for WWW and mail.

                                        And it matches what I get when I ping those from outside.

                                        So what's the issue?

                                        alex.olynykA 1 Reply Last reply Reply Quote 0
                                        • alex.olynykA
                                          alex.olynyk
                                          last edited by

                                          true, but those are the only things not working on the inside
                                          pacs and oc work

                                          1 Reply Last reply Reply Quote 0
                                          • alex.olynykA
                                            alex.olynyk @Dashrender
                                            last edited by

                                            @Dashrender www and mail dont work on the inside

                                            DashrenderD 1 Reply Last reply Reply Quote 0
                                            • 1
                                            • 2
                                            • 3
                                            • 4
                                            • 5
                                            • 6
                                            • 7
                                            • 4 / 7
                                            • First post
                                              Last post