I'm wondering if you're worrying about routing when you should be 
worrying about the port forward.

Routing: can the server ping, say, 1.1.1.1? Can other hosts at various 
points on your LAN? If so, your routes are just fine.

Also, where are your NAT points? There has to be one on the innermost 
box with a public address, but is there one between your 10. and 192.  
networks? Hopefully the public router is the only thing doing NAT.

Port forward: have you inspected the inbound port forward settings on 
the router (the box with the public IP address, I've lost track). You 
need one mapping inbound TCP to ws-public-address:443 to 
ws-lan-address:443.

Can you run a tcpdump on one of the routers in the chain to see what 
happens? My local firewall's a UNIX box so I can do this there to watch 
any traffic between an internal host and the outer world.

ANd of course what others have been saying: traceroute does not tell you 
everything: various nodes may not respond as needed, and it certainly 
will not be passed through to your WS server inless the inbound rule is 
wide open (all traffic types), which would be a bad thing.

Cheers,
Cameron Simpson <c...@cskk.id.au>
_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

Reply via email to