[Xitami] xitami and domain name
Tom Baker
xitami@lists.xitami.org
Tue, 24 Feb 2004 01:53:27 -0500
This is a multi-part message in MIME format.
------=_NextPart_000_008E_01C3FA78.FEDB4BB0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
From: jglong3@att.net=20
To: xitami@lists.xitami.org=20
Sent: Monday, February 23, 2004 7:36 PM
Subject: Re: [Xitami] xitami and domain name
Hello Tom,,,, :)
OK,,,I have read the Router documetation again and I think I see the =
light!!!
As you said:
"You have to configure the router to pass all traffic for port =
80 to the PC running=20
Xitami."
Once I tell the Router to pass all traffic to port 80 plus the current =
IP of the Xitami PC then two things look promising:
1. All the unsolicited messages being recorded to the Lynksys =
LogViewer=20
Incoming log file will now go to port 80 for the Xitami PC =
IP(???).
2. This means I probably do not need a static IP for that PC as it =
already=20
has a staic IP as it exists behind the Router(???)
Also, the Xitami PC will not have to be exposed via the Routers =
DMZ to=20
the Internet (????)
That's excatly right!
Please keep in mind that the Xitami machine IS exposed to the internet, =
but only Port 80. So if a hacker managed to hijack Xitami, he would have =
control over the machine via the Port 80 hole in the firewall.
But this is unlikely with Xitami, so I wouldn't lose to much sleep over =
it. :-)
If this is the case what does Xitami do with a record that is not =
meant for Xitami (i.e.) not set up in the Xitami Virtual Hosts cfg =
files?=20
o Does it simply throw it on the "FLOOR" so to speak????=20
o Can these be recorded to a Xitami log file???
It will reject the request, and record it in a logfile if you so desire. =
I get several hundred requests a day which are trying to exploit various =
unpatched security holes in Microsoft IIS, and lesser amounts trying to =
exploit other webservers. Xitami refuses them and logs and error.
Then the IP to use to register the Domain Name will probably be the IP =
of the Router. And, if this is the case then it appears I must work with =
my ISP to provide a static IP for the Router which as I understand is =
not a static IP.
Yes, that is correct.
But you can use a dynamic IP if you use a Dynamic DNS service. I don't =
know much about this myself, but I'm sure a search on Google for Dynamic =
DNS will turn up a bunch of info.
THANKS for your time, help, and advise!!!! :)
Jerry =20
I'm glad to help. Good luck!
Tom
-------------------------------------------------------------------------=
-----
From: jglong3@att.net=20
To: xitami@lists.xitami.org=20
Sent: Monday, February 23, 2004 11:41 AM
Subject: Re: [Xitami] xitami and domain name
Hello Tom, :)
Thanks for your time, help, and advise!!!!
In your Reply for "xitami and domain name" you mentioned the =
following:
"Depending on your network topology, have you=20
checked that Xitami is bound to all IP's?"
I have tried to find out how to "BIND Xitami to all IPs" using =
Searches on the Internet and the Xitami Document, but am not having any =
success.
You correctly set it in your previous message. I just used general =
terms.
Could you please give an example or point me to a link/document that =
describes binding Xitami?
FYI,,,,I am a novice user of Xitami. Just loaded it last week and =
all seems to be working as expected on a LAN using 8 PCs (W95 and =
W98SE). Xitami is on a W98SE and I am learning and testing using the =
HOSTS file at each PC to force Domain Names to the I
P address of the PC where Xitami is installed.=20
Hosts file example:
xx.yy.zz.1 www.abc.com
xx.yy.zz.1 www.def.com
etc.
These are not registered Domain Names and are used for testing. =
However, when Xitami is configured to depend on registerd names via =
Virtual Hosting, I suspect that I will have the same problem as =
described by shing@walla.co.il.=20
I thought that using a registered Domain Name should have worked =
within shing's LAN. If the Domain Name is not in the HOSTS file I =
thought it would be routed to the www database (HOSTS file) at the DNS =
Server which would then route it to shing's IP wher
e Xitami is installed. That is what I thought(????). I have been =
away from the net a long time (circa 1975) and there is a lot I have to =
learn.
It should and does work as you described.=20
BTW,,,,, all my PCs are behind a router with the NAT firewall, so I =
may also have to expose the Xitami PC to the Internet when Xitami is =
configured to start using registerd Domain Names(???).
Thanks again for your time, help and advise!!!
Jerry :)
You can have Xitami behind the firewall. You have to configure the =
router to pass all traffic for port 80 to the PC running Xitami.
Here's how the request process should work:
Someone far away requests www.yourdomain.com. The appropriate DNS =
servers hand back www.yourdomain.com =3D 192.168.0.1 (These addresses =
are made up for this discussion). A request to port 80 of 192.168.0.1 =
for www.yourdomain.com is made, and Xitami returns the webpage.
If you are running more than one domain name on Xitami, Xitami Virtual =
hosts will recognise which domain is being asked for, and supplies it.
So now let's say you want to access the website from inside your =
network. You type is www.yourdomain.com. an appropriate outside DNS =
server hands back www.yourdomain.com =3D 192.168.0.1. Your PC says "Hey! =
That's only one PC away from me!" And connect directly to it.
As you can see, it's exactly the same mechanism for being inside the =
network or outside the network.
So what we are dealing with here is some other problem. If all the =
above works from the outside, but not the inside, it is almost certainly =
a firewall problem.
If you are having problems with both the outside and the inside, it =
could be either DNS not configured properly, firewall not configured =
properly, or Xitami not configured properly.
Hope this helps,
Tom
------=_NextPart_000_008E_01C3FA78.FEDB4BB0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2800.1400" name=3DGENERATOR></HEAD>
<BODY bgColor=3D#ffffff>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV=20
style=3D"BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: =
black"><B>From:</B>=20
<A title=3Djglong3@att.net =
href=3D"mailto:jglong3@att.net">jglong3@att.net</A>=20
</DIV>
<DIV style=3D"FONT: 10pt arial"><B>To:</B> <A =
title=3Dxitami@lists.xitami.org=20
href=3D"mailto:xitami@lists.xitami.org">xitami@lists.xitami.org</A> =
</DIV>
<DIV style=3D"FONT: 10pt arial"><B>Sent:</B> Monday, February 23, 2004 =
7:36=20
PM</DIV>
<DIV style=3D"FONT: 10pt arial"><B>Subject:</B> Re: [Xitami] xitami =
and domain=20
name</DIV>
<DIV><BR></DIV>
<DIV>Hello Tom,,,, :)<BR><BR><BR>OK,,,I have read the Router =
documetation=20
again and I think I see the light!!!<BR>As you=20
said:<BR><BR> "You have to configure the =
router=20
to pass all traffic for port 80 to the PC running=20
<BR> Xitami."<BR><BR><BR>Once I =
tell the=20
Router to pass all traffic to port 80 plus the current IP of the =
Xitami PC=20
then two things look promising:<BR><BR> 1. All the=20
unsolicited messages being recorded to the Lynksys LogViewer=20
<BR> Incoming log file will now go =
to port=20
80 for the Xitami PC IP(???).<BR><BR> 2. This means =
I=20
probably do not need a static IP for that PC as it already=20
<BR> has a staic IP as it exists =
behind=20
the Router(???)<BR><BR> Also, the =
Xitami=20
PC will not have to be exposed via the Routers DMZ to=20
<BR> the Internet (????)</DIV>
<DIV> </DIV></BLOCKQUOTE>
<DIV dir=3Dltr>That's excatly right!</DIV>
<DIV dir=3Dltr>Please keep in mind that the Xitami machine IS exposed to =
the=20
internet, but only Port 80. So if a hacker managed to hijack Xitami, he =
would=20
have control over the machine via the Port 80 hole in the =
firewall.</DIV>
<DIV dir=3Dltr>But this is unlikely with Xitami, so I wouldn't lose to =
much sleep=20
over it. :-)</DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV><BR><BR><BR>If this is the case what does Xitami do with a record =
that is=20
not meant for Xitami (i.e.) not set up in the Xitami Virtual Hosts cfg =
files?=20
<BR><BR> o Does it simply throw it on =
the=20
"FLOOR" so to speak???? <BR> o Can these =
be=20
recorded to a Xitami log file???</DIV>
<DIV> </DIV></BLOCKQUOTE>
<DIV dir=3Dltr>It will reject the request, and record it in a logfile if =
you so=20
desire. I get several hundred requests a day which are trying to exploit =
various=20
unpatched security holes in Microsoft IIS, and lesser amounts trying to =
exploit=20
other webservers. Xitami refuses them and logs and error.</DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV><BR><BR>Then the IP to use to register the Domain Name will =
probably be=20
the IP of the Router. And, if this is the case then it appears I must =
work=20
with my ISP to provide a static IP for the Router which as I =
understand is not=20
a static IP.<BR></DIV>
<DIV> </DIV></BLOCKQUOTE>
<DIV dir=3Dltr>Yes, that is correct.</DIV>
<DIV dir=3Dltr>But you can use a dynamic IP if you use a Dynamic DNS =
service. I=20
don't know much about this myself, but I'm sure a search on Google for =
Dynamic=20
DNS will turn up a bunch of info.</DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV><BR><BR>THANKS for your time, help, and advise!!!!=20
:)<BR><BR>Jerry =20
<BR><BR></DIV>
<DIV> </DIV></BLOCKQUOTE>
<DIV dir=3Dltr>I'm glad to help. Good luck!</DIV>
<DIV dir=3Dltr>Tom<BR></DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<P>
<HR>
<P></P>
<META content=3D"MSHTML 6.00.2800.1400" name=3DGENERATOR>
<STYLE></STYLE>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV=20
style=3D"BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: =
black"><B>From:</B>=20
<A title=3Djglong3@att.net =
href=3D"mailto:jglong3@att.net">jglong3@att.net</A>=20
</DIV>
<DIV style=3D"FONT: 10pt arial"><B>To:</B> <A =
title=3Dxitami@lists.xitami.org=20
href=3D"mailto:xitami@lists.xitami.org">xitami@lists.xitami.org</A> =
</DIV>
<DIV style=3D"FONT: 10pt arial"><B>Sent:</B> Monday, February 23, =
2004 11:41=20
AM</DIV>
<DIV style=3D"FONT: 10pt arial"><B>Subject:</B> Re: [Xitami] xitami =
and domain=20
name</DIV>
<DIV><BR></DIV>
<DIV>Hello Tom, :)<BR><BR>Thanks for your time, help, and=20
advise!!!!<BR><BR>In your Reply for "xitami and domain name" you =
mentioned=20
the following:<BR><BR> "Depending on your network =
topology, have=20
you <BR> checked that Xitami is bound to all=20
IP's?"<BR><BR>I have tried to find out how to "BIND Xitami to all =
IPs" using=20
Searches on the Internet and the Xitami Document, but am not having =
any=20
success.<BR></DIV></BLOCKQUOTE>
<DIV dir=3Dltr>You correctly set it in your previous message. I just =
used=20
general terms.</DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV><BR>Could you please give an example or point me to a =
link/document=20
that describes binding Xitami?<BR><BR><BR>FYI,,,,I am a novice user =
of=20
Xitami. Just loaded it last week and all seems to be working as =
expected on=20
a LAN using 8 PCs (W95 and W98SE). Xitami is on a W98SE and I am =
learning=20
and testing using the HOSTS file at each PC to force Domain Names to =
the=20
I<BR>P address of the PC where Xitami is installed. <BR><BR>Hosts =
file=20
=
example:<BR><BR><BR>  =
; =20
xx.yy.zz.1 =20
=
www.abc.com<BR> &nbs=
p; =20
xx.yy.zz.1 =20
=
www.def.com<BR> &nbs=
p; =20
etc.<BR><BR>These are not registered Domain Names and are used for =
testing.=20
However, when Xitami is configured to depend on registerd names via =
Virtual=20
Hosting, I suspect that I will have the same problem as described by =
shing@walla.co.il. <BR><BR>I thought that using a registered Domain =
Name=20
should have worked within shing's LAN. If the Domain Name is not in =
the=20
HOSTS file I thought it would be routed to the www database (HOSTS =
file) at=20
the DNS Server which would then route it to shing's IP wher<BR>e =
Xitami is=20
installed. That is what I thought(????). I have been away from the =
net a=20
long time (circa 1975) and there is a lot I have to =
learn.</DIV></BLOCKQUOTE>
<DIV dir=3Dltr>It should and does work as you described. </DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV> </DIV>
<DIV>BTW,,,,, all my PCs are behind a router with the NAT firewall, =
so I may=20
also have to expose the Xitami PC to the Internet when Xitami is =
configured=20
to start using registerd Domain Names(???).<BR><BR>Thanks again for =
your=20
time, help and advise!!!<BR><BR>Jerry :)</DIV></BLOCKQUOTE>
<DIV dir=3Dltr>You can have Xitami behind the firewall. You have to =
configure=20
the router to pass all traffic for port 80 to the PC running =
Xitami.</DIV>
<DIV dir=3Dltr> </DIV>
<DIV dir=3Dltr>Here's how the request process should work:</DIV>
<DIV dir=3Dltr>Someone far away requests <A=20
href=3D"http://www.yourdomain.com">www.yourdomain.com</A>. The =
appropriate DNS=20
servers hand back <A =
href=3D"http://www.yourdomain.com">www.yourdomain.com</A> =3D=20
192.168.0.1 (These addresses are made up for this discussion). A =
request to=20
port 80 of 192.168.0.1 for <A=20
href=3D"http://www.yourdomain.com">www.yourdomain.com</A> is =
made, and=20
Xitami returns the webpage.</DIV>
<DIV dir=3Dltr>If you are running more than one domain name on Xitami, =
Xitami=20
Virtual hosts will recognise which domain is being asked for, and =
supplies=20
it.</DIV>
<DIV dir=3Dltr> </DIV>
<DIV dir=3Dltr>So now let's say you want to access the website from =
inside your=20
network. You type is <A=20
href=3D"http://www.yourdomain.com">www.yourdomain.com</A>. an =
appropriate=20
outside DNS server hands back <A=20
href=3D"http://www.yourdomain.com">www.yourdomain.com</A> =3D =
192.168.0.1. Your PC=20
says "Hey! That's only one PC away from me!" And connect directly to =
it.</DIV>
<DIV dir=3Dltr> </DIV>
<DIV dir=3Dltr>As you can see, it's exactly the same mechanism for =
being inside=20
the network or outside the network.</DIV>
<DIV dir=3Dltr> </DIV>
<DIV dir=3Dltr>So what we are dealing with here is some other problem. =
If all=20
the above works from the outside, but not the inside, it is almost =
certainly a=20
firewall problem.</DIV>
<DIV dir=3Dltr>If you are having problems with both the outside and =
the inside,=20
it could be either DNS not configured properly, firewall not =
configured=20
properly, or Xitami not configured properly.</DIV>
<DIV dir=3Dltr> </DIV>
<DIV dir=3Dltr>Hope this helps,</DIV>
<DIV dir=3Dltr>Tom</DIV>
<DIV dir=3Dltr> </DIV></BLOCKQUOTE></BODY></HTML>
------=_NextPart_000_008E_01C3FA78.FEDB4BB0--