Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I have a Fortigate 80C at home and have a number of servers hosted: mail, git, web, RDP, voip etc.

Now I want these subdomains to redirect to certain internal IPs:

mail.domain.com > 192.168.0.200
git.domain.com > 192.168.0.201
www.domain.com > 192.168.0.202
rdp.domain.com > 192.168.0.203
voip.domain.com > 192.168.0.204

Now I have one external IP (X.Y.Z.20), so I was wondering is it possible for the Fortigate box to to pick up what subdomain has referred the client to its external IP (X.Y.Z.20) and then deal with the traffic accordingly?

Ideally I would like to ssh in to mail, git and www to administer them without having to use random port numbers, I would like to be able to execute ssh like so:

ssh administrator@mail.domain.com, ssh administrator@git.domain.com, etc

Without having to specify a specific port.

I know I could set up NAT rules to redirect say port 12345 on X.Y.Z.20 to port 22 on 192.168.0.200 but would much rather just have the router utilise the FQDN to do a direct NAT from every port on the FQDN to every port on the internal box.

Any ideas would be greatly appreciated!

Cheers! Myles

share|improve this question

migrated from serverfault.com Sep 13 '11 at 14:34

This question came from our site for professional system and network administrators.

    
Hi Chris, webmail isn't such a problem as I can create a VirtualHost in Apache for specific subdomains/directories. The main problem here I suppose is ssh'ing in to the separate *nix servers without using random ports... Say if I could get extra external IPs I would be able to do the above couldn't I? –  Myles Gray Sep 13 '11 at 13:18
    
I'm not aware of any way to reverse proxy SSH. So you'd have to get more external IPs, use different ports, or use one as a bridgehead for SSHing into the others. –  Chris S Sep 13 '11 at 14:48
    
Thanks Chris, I'll mark your answer as accepted if you post it up. Myles –  Myles Gray Sep 13 '11 at 14:51

2 Answers 2

up vote 1 down vote accepted

What you want is generically called 'reverse proxy', a quick Google suggests the 80C doesn't support it.

Some of the ports can probably be forwarded separately, the RDP on port 3389 and SIP has it's own ports too. SMTP is on port 25, but if you want webmail then it will coincide with the www server. Git typically runs on 9418, so it should be good too.

I'm not aware of any way to reverse proxy SSH. So you'd have to get more external IPs, use different ports, or use one as a bridgehead for SSHing into the others.

share|improve this answer

afaik not possible like you want to use it in this setup. sorry :-(

you could use a proxy-style-setup (need a proxy for every used service) or your nat/port solution

share|improve this answer
    
thx for downvote... accepted answer says the same but more in detail. this makes people who try to help real happy. –  Mose Sep 13 '11 at 15:40
    
For the record I didn't downvote... –  Myles Gray Sep 14 '11 at 10:07
    
ok, sorry for my offense. –  Mose Sep 14 '11 at 12:01
1  
@Michael, it doesn't matter how good your answers are, you'll eventually get a drive by downvote for no apparent reason. Or my personal favorite, someone disagrees with one little point in your much larger answer and downvotes you for that. It happens, if you stick around it'll happen again, it's just a part of life around SE. BTW: Long and detailed answers tend to get more upvotes and the accept. –  Chris S Sep 15 '11 at 19:28

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.