• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Ubuntu Server behind NAT (Help)

T

Tarrant64

Diamond Member
Trying to get an Ubuntu server to work behind a NAT setup. (Please move to Network Forum if necessary - I figured more Linux gurus would in this forum would be helpful).

Ubuntu 11.04 (wordpress) -> Cisco ASA 5510 (NAT to internal server) -> Internet

Firewall rules are already in place as well to allow HTTP/HTTPS and ICMP (for now just for verification it's up). I have several other NATs setup the same way to Windows web servers and have never had this problem. So I'm inclined to think it's something with the Ubuntu server.

When I set this up, I can no longer ping the outside world. Web pages do not work either. All traffic outside of the LAN ceases to work.

The second I drop the NAT from the configuration though, ping works fine and web pages come up just fine. I'm wondering what I'm missing on the Ubuntu server (assuming that's where the problem is) configuration.

eth0 on this server is a static IP and nameservers setup. DNS resolution works just fine. Ping to local domain workstations/servers works just fine.

Wondering if anyone can shed some light on this setup. Typically when I NAT a windows server it just works. Is there something different I need to do on the firewall end or am I missing something with Ubuntu. Please note, UFW (firewall) has been disabled.
 
Nevermind. Pretty damn sure I have what the problem is. I was given a public IP already in use by another device. Waiting for a new one and I think it all should just work now.
 
There's nothing special about Linux in this case, if you can get to ports 80/443 internally then that's all you need to PAT on the ASA and that would have no affect on the ASA's ability to route other traffic unless you misconfigured the static or ACL statements.
 
You must log in or register to reply here.

TRENDING THREADS

Back
Top