Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Fullmoon
Contributor III

port forwarding without typing any port after the address

I read someone already posted the same question, but nowhere to find. 

example: www.x.x.x.y:8080 was properly configured in my VIP settings. Now, how do i enforce when my users want to access our web server it will divert to our web server page without typing 8080 after the address? 

 

What possible changes on my dns server which is hosting the said web site? appreciate your feedback. thank you

 

Fortigate Newbie

Fortigate Newbie
4 REPLIES 4
ede_pfau
Esteemed Contributor III

hi,

 

in short: no way.

Longer:

This is not a question of configuration of your firewall but one of internet protocol standards.

For the "http://" prefix the protocol (HTTP) has the default port 80, for "https://" it's 443.

There is no way to change the protocol's default settings worldwide just because you change something on your FGT.


Ede

"Kernel panic: Aiee, killing interrupt handler!"
Ede"Kernel panic: Aiee, killing interrupt handler!"
rwpatterson
Valued Contributor III

As Ede said this is not a firewall function, but a function of your web server. You would have to build a redirect into your server's configuration to send port 80 traffic to port 8080. If you use Apache it would be something similar to:

 

<VirtualHost *:80>     ServerName    host.domain.com     ServerAlias    publichost.domain.com     redirect /    http://publichost.domain.com:8080/ </VirtualHost>

 

Make sure your web server is configured to listen on the redirected port or it will simply hang there. If you click on the link in my signature, you will see that I am doing the same exact thing to port 5190.

Bob - self proclaimed posting junkie!
See my Fortigate related scripts at: http://fortigate.camerabob.com

Bob - self proclaimed posting junkie!See my Fortigate related scripts at: http://fortigate.camerabob.com
Markus
Valued Contributor

Another (not comfortable way) is to do port forwarding with your vip. The disadvantage of this "solution" - you have to do this then for any other port you use e.g. 443 to 443 etc.


________________________________________________________
--- NSE 4 ---
________________________________________________________

________________________________________________________--- NSE 4 ---________________________________________________________
Fullmoon

guys, thank you so much for your replies. deeply appreciated.

Fortigate Newbie

Fortigate Newbie
Labels
Top Kudoed Authors