Re: Are the issues with my domain DNS related?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, 2007-08-10 at 21:08 -0500, Steven P. Ulrick wrote:
> The problem had been that when I attempted to browse pages on my own
> website, on the same computer that I run the server on, most pages
> would never finish loading.

Before you added to your local loopback addresses, when you browsed your
site were you browsing it via its IP address or a domain name?

And if you were using a domain name, what IP was associated with it at
*that* time?

If you browse your server using an internal LAN address, whether that be
127.0.0.1 or 192.168.1.2, etc., the networking is handled internally by
your computer.  Barring some unusual firewall rules, that should work
fine.

If you try browsing your server using an external address, your
connections (logically) would go out of your network and back in again.
That doesn't always work.  Some systems will not allow internal LAN
addresses to connect to external public ones.  That's the sort of thing
that some hackers will try (fake an internal address to get through your
firewall).  My firewall blocks those sorts of things, and my external
address applies to my router rather than my PC.  If I try to connect to
my external address, from inside my LAN, I end up connecting to the
webserver inside my router, that's used to configure it.  It doesn't
allow you to connect to the WAN side of things.

To confuse things even further, some systems will realise that the
public address is applied to itself, and avoid actually going through
the network, and just route things internally.

Whether you use a local DNS server, or your hosts file, the simplest way
for internally testing a webserver is to have entries that tell your LAN
your webserver domain name refers to an internal LAN address.  However,
this can confuse the Dickens out of scripts that update dynamic
addresses with outside servers.  I avoided that by running my server on
a PC that I don't actually use directly, so it doesn't have confusing
entries for its own domain name.

-- 
[tim@bigblack ~]$ uname -ipr
2.6.22.1-41.fc7 i686 i386

Using FC 4, 5, 6 & 7, plus CentOS 5.  Today, it's FC7.

Don't send private replies to my address, the mailbox is ignored.
I read messages from the public lists.




[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux