Skip to main content
Kpax
New Member
January 19, 2016
Question

Webserver is not been publish - VIP redirection

  • January 19, 2016
  • 1 reply
  • 2492 views

greetings guys,

 

Scenario:

I have web server (runs IIS7) which resides in my DataCenter and been published to the world on port 80,21

I want to permit only specific external IP e.g. 109.110.111.112 to be accessed to this web server on the above ports.

 

current situation on the DataCenter firewall:

VIP group which contain these two vips

[ul]
  • WAN1, 0.0.0.0 > e.g 192.168.1.2 on port 80 (TCP)
  • WAN1, 0.0.0.0 > e.g 192.168.1.2 on port 21 (TCP)[/ul]

      also create the correspondence Security policy for these vips

     

    note: following this guideline

    http://docs.fortinet.com/uploaded/files/2057/using-port-forwarding-to-allow-limited-access-to-an-internal-server.pdf

     

    as soon I replace 0.0.0.0 to 109.110.111.112, there is no access to the website, anymore.

     

    I just want to clarify if this issue related to IIS, or Fortigate.

    In IIS there is a module which called URL Rewrite, and I can bypass this issue but this is not the forum to discuss about.

     

    thanks in advance,

    Kpax

    • 1 reply

      Kpax
      KpaxAuthor
      New Member
      January 19, 2016

      Solved:

       

      I used Source Address Filter, instead and its working.

       

      thanks,

      Kpax