hi

check: which device does nat for you. On that device configure portforwarding from external to internal, eg external ip:port to your internal host:port. test it from outside.

ip forwarding on your OpenBSD laptop isnt necessary here, your laptop doesnt act as a router in your homesetup.

-om


On 19 Jan 2018, at 15:55, Michel von Behr wrote:

Hi - rookie question: I have ADSL internet at home, distributed to local hosts via a cheap modem/router provided by the ISP. And connected as one of
the network nodes is an old laptop running OpenBSD. I want to use that
laptop as a webserver, ftp server, etc. I can connect to the laptop
internally, from within the local network (192.168.15.11) via http, ssh, ftp, etc, but I can't see it from external hosts. I already tried different configurations in the router/modem related to port forwarding, NAT, but without success, so I'm starting to think that it might be something I'm
missing on OpenBSD network config (PF maybe?).

I tried enabling ip forwarding in sysctl but I still can't see it from
outside hosts.

Specifically, my question would be this: if I can see my laptop from within the local network, would that be enough to guarantee that I should be able to detect it externally? If not, what configuration should I be looking to
adjust?

httpd.conf is accepting connections from any IP address, as far as I
understand this:

# $OpenBSD: httpd.conf,v 1.17 2017/04/16 08:50:49 ajacoutot Exp $

#
# Macros
#
ext_addr="*"

#
# Global Options
#
# prefork 3


#
# Servers
#

# A minimal default server
server "default" {
        listen on $ext_addr port 80
        listen on $ext_addr port 8080
        listen on $ext_addr port 50080
        root "/htdocs/"
                directory {
                        no index
                }

                location "*.php" {
                        fastcgi socket "/run/php-fpm.sock"
                }
}

As for ssh_config the only change I made to the default config file was to include port 50022 (trying to avoid any blocking to port 22 that my ISP
might be enforcing).

Any pointing to the right direction would be appreciated...

Kind regards,

Michel

Reply via email to