RE: Webmin / Usermin and port blocking

[Aaron M. Hirsch]

Setup port forwarding via iptables, or you could utilize something like
dnydns's webhop service

-----Original Message-----
From: Bob Brennan [mailto:[e-mail]] 
Sent: Monday, February 28, 2005 4:31 PM
To: For users of Fedora Core releases
Subject: Webmin / Usermin and port blocking

Webmin and Usermin are accessed remotely through ports 10000 and 20000
respectively - as in http://www.myserver.net:20000

I work in a company that blocks port 20000 and all other non-essential
outgoing port requests. Are there any alternative ways of accessing a
port-bound service like this to get around secure large company sites
that block direct port connections?

I guess what I'm asking is about ways to access Usermin as a straight
HTTP:// connection (ie http://www.myserver.net/usermin) rather than port
20000 by making changes on my server.

Thanks in advance,
bob

--
fedora-list mailing list
[e-mail]
To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list

Webmin / Usermin and port blocking

[Bob Brennan]

On Mon, 28 Feb 2005 16:42:32 -0600, aaron hirsch  wrote:
> Setup port forwarding via iptables, or you could utilize something like
> dnydns's webhop service

Iptable forwarding (sorry, new at this) - I would need to set up a url
like http://myserver.net/usermin to forward to myserver.net:20000 ?
How would I do that?

Webmin / Usermin and port blocking

[Mike Burger]

On Mon, 28 Feb 2005, Bob Brennan wrote:
> On Mon, 28 Feb 2005 16:42:32 -0600, aaron hirsch  wrote:
> > Setup port forwarding via iptables, or you could utilize something like
> > dnydns's webhop service
>
> Iptable forwarding (sorry, new at this) - I would need to set up a url
> like http://myserver.net/usermin to forward to myserver.net:20000 ?
> How would I do that?

Nope...that's apache redirect.

Iptables port forwarding would look like this (apologies for the line 
breaks that ensue):

$IPTABLES -t nat -A PREROUTING -i eth0 -d xxx.xxx.xxx.xxx -p tcp --dport 80 -j DNAT --to xxx.xxx.xxx.xxx:20000
$IPTABLES -A FORWARD -p tcp --dport 20000 -m state --state NEW -d xxx.xxx.xxx.xxx -j ACCEPT