no internal access to websites

6 posts / 0 new
Topic locked
Last post
#1 Thu, 07/14/2016 - 10:53
eduardoeltortuga

no internal access to websites

Hello I just switched to a Mikrotik routerboard. It was a little tricky to set up but I think I'm close. The problem is that I can access my websites from outside my network but not from the inside. From the inside I get my router login page. I can ping the domains and the ip's. I'm using Ubuntu server 14.04 and virtualmin/webmin. Like I said, that Mikrotik routerboard was a little tricky for me to configure. Any advice would be greatly appreciated.

Fri, 07/15/2016 - 11:43
andrew.harrison

Are you running two nics? If so, you will need to do policy based routing. Please show your routing rules:

route -n

The issue we had, (your issue sounds similar), is that you can only have ONE default gateway per server. When you have two nics, this then becomes an issue:

NIC ONE eth0 internal network NIC TWO eth1 your ISP

Each NIC requires its own gateway.

If this looks like it could be your issue, please let me know and I will post instructions.

Thanks Andrew

Mon, 07/18/2016 - 13:56
eduardoeltortuga

Thanks Sorry I took so long to respond. I have 4 computers at home hooked up to this new Mikrotik routerboard. My Ubuntu server does have two nics. One is not being used. I replaced my old TP-link router to get better broadband speeds. It was easy to configure my Ubuntu server on the old router. I just did port forwarding and set a static private ip for my server.

I thought maybe that there was a setting in virtualmin I could change. but I have no clue.

Thanks Eddie

Mon, 07/18/2016 - 14:27
andrew.harrison

Thanks for your reply, it looks like you do not have the same issue as we had. Our issue was due to two nics in the server. We had to create policy based routing tables.

Thu, 07/21/2016 - 13:55
eduardoeltortuga

Solved

I needed to add a hairpin NAT rule to my router. Thanks Eddie

Thu, 07/21/2016 - 13:55
eduardoeltortuga

Solved

I needed to add a hairpin NAT rule to my router. Thanks Eddie

Topic locked