ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Certbot

    IT Discussion
    8
    138
    28.3k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • DashrenderD
      Dashrender
      last edited by

      OK @alex-olynyk did add roseradiology.com, but not in the correct place. As such, it never worked as desired.

      1 Reply Last reply Reply Quote 0
      • DashrenderD
        Dashrender
        last edited by

        @alex-olynyk
        now that you've removed that, what do you get when you ping owncloud.roseradiology.com?

        alex.olynykA 1 Reply Last reply Reply Quote 0
        • alex.olynykA
          alex.olynyk @Dashrender
          last edited by

          @Dashrender 0_1464208125101_Capture.PNG

          1 Reply Last reply Reply Quote 0
          • DashrenderD
            Dashrender
            last edited by

            is that IP address on your firewall?

            alex.olynykA 1 Reply Last reply Reply Quote 0
            • alex.olynykA
              alex.olynyk @Dashrender
              last edited by

              @Dashrender yes, it works from the outside. Our FW is managed by Windstream so unsure what you are asking

              DashrenderD 1 Reply Last reply Reply Quote 0
              • DashrenderD
                Dashrender @alex.olynyk
                last edited by

                @alex.olynyk said in Certbot:

                @Dashrender yes, it works from the outside. Our FW is managed by Windstream so unsure what you are asking

                You're firewall is manged by Windstream? huh - didn't know they did that.

                You need to call them and ask them to turn on hairpin routing in the firewall/router/cablemodem/router, whatever it is.

                If they tell you that they can't, then you will have to use Split Horizon DNS to solve this problem.

                alex.olynykA 1 Reply Last reply Reply Quote 0
                • alex.olynykA
                  alex.olynyk @Dashrender
                  last edited by

                  @Dashrender which means create a DNS zone called roseradiology.com and add records for my public servers?

                  DashrenderD 1 Reply Last reply Reply Quote 0
                  • DashrenderD
                    Dashrender @alex.olynyk
                    last edited by

                    @alex.olynyk said in Certbot:

                    @Dashrender which means create a DNS zone called roseradiology.com

                    yes

                    and add records for my public servers?

                    no

                    You'll add a brand new zone to your DNS servers (make it AD integrated) and then add in all the records that exist in the internet based one, but you'll change the IP from external live IPs to the IPs that are used by those services inside your network.

                    So for ownCloud you'll do:

                    A record Owncloud : 192.168.128.10

                    alex.olynykA 1 Reply Last reply Reply Quote 1
                    • alex.olynykA
                      alex.olynyk @Dashrender
                      last edited by

                      @Dashrender our mail server is hosted POP so that's accessed via mail.roseradiology.com
                      no internal IP address for that

                      JaredBuschJ 1 Reply Last reply Reply Quote 0
                      • JaredBuschJ
                        JaredBusch @alex.olynyk
                        last edited by

                        @alex.olynyk said in Certbot:

                        @Dashrender our mail server is hosted POP so that's accessed via mail.roseradiology.com
                        no internal IP address for that

                        Then for that one you will still use the external IP, but you WILL have to put in a record in your local DNS.

                        I have lost track of how many times you have been told this is the correct answer.

                        DashrenderD alex.olynykA 2 Replies Last reply Reply Quote 1
                        • JaredBuschJ
                          JaredBusch @Alex Sage
                          last edited by

                          @aaronstuder said in Certbot:

                          @StrongBad The only thing I can think of is speed? Maybe it's a bit faster? However many routers have loopback NAT, so no difference there.

                          The term you are looking for is HAIRPIN NAT.

                          Personal opinion incoming: You NEVER want to rely on HAIRPIN NAT, ever.

                          For most companies, DNS is not something that changes very often. It is much easier to handle entering DNS information both into both the internal and external DNS servers.

                          DashrenderD 1 Reply Last reply Reply Quote 0
                          • DashrenderD
                            Dashrender @JaredBusch
                            last edited by

                            @JaredBusch said in Certbot:

                            Personal opinion incoming: You NEVER want to rely on HAIRPIN NAT, ever.

                            For most companies, DNS is not something that changes very often. It is much easier to handle entering DNS information both into both the internal and external DNS servers.

                            I tend to agree with JB on this one.

                            1 Reply Last reply Reply Quote 0
                            • DashrenderD
                              Dashrender @JaredBusch
                              last edited by

                              @JaredBusch said in Certbot:

                              @alex.olynyk said in Certbot:

                              @Dashrender our mail server is hosted POP so that's accessed via mail.roseradiology.com
                              no internal IP address for that

                              Then for that one you will still use the external IP, but you WILL have to put in a record in your local DNS.

                              I have lost track of how many times you have been told this is the correct answer.

                              Hey, listen to JB on this one you should.

                              1 Reply Last reply Reply Quote 0
                              • alex.olynykA
                                alex.olynyk @JaredBusch
                                last edited by

                                @JaredBusch i just did this and it still wont work. when i ping www.rose and mail.rose it returns the same IP. Added both in local DNS. www works on the inside but not mail

                                owncloud and pacs work on the inside but no mail

                                DashrenderD 1 Reply Last reply Reply Quote 0
                                • alex.olynykA
                                  alex.olynyk
                                  last edited by

                                  0_1464215393881_Capture.PNG

                                  DashrenderD JaredBuschJ 2 Replies Last reply Reply Quote 0
                                  • alex.olynykA
                                    alex.olynyk
                                    last edited by

                                    now only owncloud and pacs are working on inside

                                    www and mail are not working

                                    cause they have the same IP when i ping? how do i fix?

                                    DashrenderD 1 Reply Last reply Reply Quote 0
                                    • DashrenderD
                                      Dashrender @alex.olynyk
                                      last edited by

                                      @alex.olynyk said in Certbot:

                                      @JaredBusch i just did this and it still wont work. when i ping www.rose and mail.rose it returns the same IP. Added both in local DNS. www works on the inside but not mail

                                      owncloud and pacs work on the inside but no mail

                                      I hate to ask, but please post a pic of the command prompt where you are pinging those addresses.

                                      alex.olynykA 1 Reply Last reply Reply Quote 0
                                      • DashrenderD
                                        Dashrender @alex.olynyk
                                        last edited by

                                        @alex.olynyk said in Certbot:

                                        now only owncloud and pacs are working on inside

                                        www and mail are not working

                                        cause they have the same IP when i ping? how do i fix?

                                        I'm not sure what you mean that they have the same IP? your picture of your DNS shows you set them up with the same IP, so that is to be expected.

                                        1 Reply Last reply Reply Quote 0
                                        • DashrenderD
                                          Dashrender @alex.olynyk
                                          last edited by

                                          @alex.olynyk said in Certbot:

                                          0_1464215393881_Capture.PNG

                                          WOW, assuming all the NS (DNS servers) are Active Directory Domain Services (ADDS), you have a lot of them, are you a huge company?

                                          alex.olynykA 1 Reply Last reply Reply Quote 0
                                          • alex.olynykA
                                            alex.olynyk @Dashrender
                                            last edited by

                                            @Dashrender 0_1464216989329_Capture.PNG

                                            1 Reply Last reply Reply Quote 0
                                            • 1
                                            • 2
                                            • 3
                                            • 4
                                            • 5
                                            • 6
                                            • 7
                                            • 4 / 7
                                            • First post
                                              Last post