Search code examples
linuxlocalhostportforwardingfirewalld

Firewalld: Redirect port 80 to 8080 and make it work on local machine


I need to redirect port 8080 to port 80 on my linux server. My problem is the same as: https://askubuntu.com/a/579540

The only difference is that I don't have iptables - is there a way of doing this with firewalld?

EDIT: Now I know that firewalld uses iptables and commands can be passed to iptables via firewalld using:

firewall-cmd [--permanent] --direct --add-rule { ipv4 | ipv6 | eb } <table> <chain> <priority> <args>

I have:

  • HTTP server running on port 8080
  • port 80 redirected to 8080 in firewalld (zone public)
  • clients from other computers accessing through port 80 can get to the HTTP server
  • I can access the server on port 8080 from the same computer, where the server is running

I want also:

  • accessing the server on port 80 from the same computer, where the server is running

I tried:

  • adding interface "lo" to zone "public"
  • configuring zone "trusted" in the same way as zone "public"

Zone "public" configuration:

<zone>
  <short>Public</short>
  <description>For use in public areas. You do not trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted.</description>
  <service name="snmp"/>
  <service name="http"/>
  <service name="ssh"/>
  <service name="https"/>
  <icmp-block name="redirect"/>
  <icmp-block name="router-solicitation"/>
  <icmp-block name="parameter-problem"/>
  <icmp-block name="router-advertisement"/>
  <forward-port to-port="8080" protocol="tcp" port="80"/>
</zone>

Errors:

#wget "192.168.100.42:80"
--2016-12-01 16:02:29--  http://192.168.100.42/
Connecting to 192.168.100.42:80... failed: Connection refused.

#wget "192.168.100.42:8080"
--2016-12-01 16:06:37--  http://192.168.100.42:8080/
Connecting to 192.168.100.42:8080... connected.
HTTP request sent, awaiting response... 302 Found
...
HTTP request sent, awaiting response... 302 Found
...
HTTP request sent, awaiting response... 302 Found
...
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]
Saving to: ‘index.html’
...
2016-12-01 16:06:37 (69.8 MB/s) - ‘index.html’ saved [4785]

#wget "localhost:80"
--2016-12-01 16:02:12--  http://localhost/
Resolving localhost (localhost)... 127.0.0.1, ::1
Connecting to localhost (localhost)|127.0.0.1|:80... failed: Connection refused.
Connecting to localhost (localhost)|::1|:80... failed: Network is unreachable.

#wget "localhost:8080"
--2016-12-01 16:06:29--  http://localhost:8080/
Resolving localhost (localhost)... 127.0.0.1, ::1
Connecting to localhost (localhost)|127.0.0.1|:8080... failed: Connection refused.
Connecting to localhost (localhost)|::1|:8080... failed: Network is unreachable.

EDIT: SOLUTION: The server was not listening on loopback interface at all.


Solution

  • The server is not listening on loopback interface.