From owner-freebsd-questions@FreeBSD.ORG Tue Oct 12 19:53:56 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 66F7616A4CE for ; Tue, 12 Oct 2004 19:53:56 +0000 (GMT) Received: from mproxy.gmail.com (rproxy.gmail.com [64.233.170.199]) by mx1.FreeBSD.org (Postfix) with ESMTP id 04D5E43D31 for ; Tue, 12 Oct 2004 19:53:56 +0000 (GMT) (envelope-from david.jenkins@gmail.com) Received: by mproxy.gmail.com with SMTP id 74so482264rnk for ; Tue, 12 Oct 2004 12:53:55 -0700 (PDT) Received: by 10.38.165.75 with SMTP id n75mr2017382rne; Tue, 12 Oct 2004 12:53:55 -0700 (PDT) Received: by 10.38.208.74 with HTTP; Tue, 12 Oct 2004 12:53:55 -0700 (PDT) Message-ID: <9395922d04101212532d1019e9@mail.gmail.com> Date: Tue, 12 Oct 2004 20:53:55 +0100 From: David Jenkins To: Toomas Aas In-Reply-To: <200410121827.i9CIRJ3m010356@lv.raad.tartu.ee> Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit References: <200410120127.42002.bsd@dokfilm.org> <200410121827.i9CIRJ3m010356@lv.raad.tartu.ee> cc: questions@freebsd.org cc: "Lars H. Beuse" Subject: Re: NameVirtualHost nat X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: David Jenkins List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Oct 2004 19:53:56 -0000 On Tue, 12 Oct 2004 21:26:55 +0300, Toomas Aas wrote: > Hi! > > "Lars H. Beuse" wrote: > > > i want some apache NameVirtualHost behind a Paketfilter based on ipf, placed > > in two subnets. This router has two Cards one in the private net, one in the > > public. So far i just forward port 80 and 443 into my private net > > 192.168.2.0, but every request ends up on apaches rootlevel, NameVirtualHost > > directive is useless. So, how to forward http(s):// requests through the > > Paketfilter matching the right VirtualHost? Maybe i've thought in a wrong > > direction, so far. Just some little hints should be enough. > > I can't be 100% sure because I haven't done this kind of thing myself, > but I don't see why port forwarding should interfere with Apache's > name-based virtual hosting. After all, they operate on different layers > of the OSI model: port forwarding is purely TCP business while > VirtualHosts are HTTP. Indeed. This sounds like something isn't wuite right with the Apache setup. Lars, have you tried accessing the webserver from your private network, localhost, with/without the firewall enabled. Does that make any difference or do you get the same result each time? You could also try setting "LogLevel debug" in httpd.conf and see what errors (if any) you are getting. It's probably best though if you post the VirtualHost section of your httpd.conf. Hope this helps. David