Port redirect 8443 to 443

roshan.s · 07-14-2011, 04:52 AM

Hi Advance thanks,

I am facing the last 7 days to port redirect 8443 to 443(default port)
but i could not able to redirect,please help me this issue it is very importent to solve

Here are the iptables rulls which i have setted up in linux machine

# Generated by iptables-save v1.4.7 on Thu Jul 14 09:33:54 2011
*filter
:INPUT ACCEPT [76547:220544258]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [62284:205568831]
COMMIT
# Completed on Thu Jul 14 09:33:54 2011
# Generated by iptables-save v1.4.7 on Thu Jul 14 09:33:54 2011
*nat
:PREROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [3:267]
:POSTROUTING ACCEPT [3:267]
-A PREROUTING -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 8080
-A PREROUTING -p tcp -m tcp --dport 443 -j REDIRECT --to-ports 8443
-A PREROUTING -d 127.0.0.1/32 -p tcp -m tcp --dport 443 -j REDIRECT --to-ports 8443
-A PREROUTING -d 10.168.61.237/32 -p tcp -m tcp --dport 443 -j REDIRECT --to-ports 8443
-A OUTPUT -d 10.168.61.237/32 -p tcp -m tcp --dport 443 -j REDIRECT --to-ports 8443
COMMIT
# Completed on Thu Jul 14 09:33:54 2011
/etc/sysconfig/iptables (END)

But the thing is i can able to redirected to 8080 to 80 but
i could not able access like https://localhost insted of https://localhost:8443

hope i will get answer from duddes...

Thanks,
Roshan MS.

opnsrc · 07-14-2011, 03:57 PM

I don't think your problem is one of redirect, I think it's of the listening service. By default, ssl listens on 443, if you want it 8443. Not sure which Linux flavor you're using, but look for ssl.conf (ie: /etc/httpd/conf.d/ssl.conf).

This will give you a list of currently *listening* services:

netstat -ntap |grep -i listen

chrism01 · 07-14-2011, 07:37 PM

In addition to the above

Code:

-A PREROUTING -p tcp -m tcp --dport 443 -j REDIRECT --to-ports 8443
-A PREROUTING -d 127.0.0.1/32 -p tcp -m tcp --dport 443 -j REDIRECT --to-ports 8443
-A PREROUTING -d 10.168.61.237/32 -p tcp -m tcp --dport 443 -j REDIRECT --to-ports 8443

the first rule there makes the next 2 redundant (iptables does first match).
Also, your request is

Quote:

redirect 8443 to 443

but your rules redirect 443 to 8443 (opposite direction ) ... which is it?

Are you really sure you want

Code:

-A OUTPUT -d 10.168.61.237/32 -p tcp -m tcp --dport 443 -j REDIRECT --to-ports 8443

that's for pkts leaving your system to go to another system (usually...)

roshan.s · 07-15-2011, 01:31 AM

Thanks for your reply

I am using EC2-Amazon Linux Server with sudo privileges, actuaily i want to be EX: https://www.roshan.com like do not want to be https://www.roshan.com:8443 why means i have configured server.xml conf. file for https:8443 so give me suggestion to above links which can not show the link with PORT number

SO please help out in this issue.Hope i will get reply from You ASAP.

roshan.s · 07-15-2011, 01:40 AM

I am using
Ec2 Amazon Linux Server