Tuesday, January 17, 2017

web server - Port forwarding

I run a school network, and it has one ILS (library management system) server, and about 10 computer lab computers. The lab comps all run XP pro, and connect through a series of hubs -> a home-style router (dhcp server, dns server, pppoe client)(yes, its a rather small school) -> a modem -> the phone line. The complab comps need to get online, and the ILS server has an OPAC (online public access catalog), which I need to be able to access remotely. It is accessed from a computer on the local network by simply typing the server's hostname or IP into the address bar of a browser, so I think its safe to assume that it runs on port 80, the default port for all web trafic. I also need remote access to samba shares on the server, and remote ssh access via PuTTY. The way I plan to implement this is by forwarding ports 80, 22, and whatever port it is that samba runs on (need to look that up later). My question is two parted, and assumes that the external (global) IP is static:





  • Will it work?

  • Is it safe? By this I mean will hijacking port 80 sabotage web access for the other computers? To give an example, lets say lab comp. A requests / from http://google.com. Google receives this request, and sends back an HTML document on port 80. Instead of going to lab computer A, it goes to the server as that's where port 80 was forwarded to. This is obviously a problem, as lab computer A didn't receive google's home page so that he could search for stuff.

No comments:

Post a Comment

linux - How to SSH to ec2 instance in VPC private subnet via NAT server

I have created a VPC in aws with a public subnet and a private subnet. The private subnet does not have direct access to external network. S...