Hi all,

I'm curious how to setup pound to let me ssh to the server running it and to 
those it directs to.
I have pound running as I need it - listening on one address and forwarding to
a 
server.
My setup is simple: I have have pound and apache on the same server - running a

static site, and redirecting traffic to a web app on another server.
But I can only ssh to the pound/apache server if I disable pound.

If this is a stupid question - out of the scope of pound - sorry... and could 
you be so kind as to drop me a link to any reading resources that could help, 
for example a pound wiki.
My problem is that I need to ssh and sftp to this production server, and 
obviously don't want to have to go the physical server to update or backup the 
boxes.

Many thanks



      

Hello,

As you say, this is out of the scope of pound. It sounds like you have a
port conflict with your SSH server. Make sure you are running your SSH
server on a port that is different than on those that pound manages.

If you want to ssh to the pound server and have it direct to the back ends,
then you need to setup a 1:1 NAT rule that creates a static binding for a
known port on the pound box and tunnels that port to the back end you want
to hit.

-- Jake


-----Original Message-----
From: Bsd Frmusr [mailto:bsdfrmusr(at)yahoo.com] 
Sent: Saturday, September 04, 2010 9:21 PM
To: pound(at)apsis.ch
Subject: [Pound Mailing List] SSH to box running Pound and server it
redirects to

Hi all,

I'm curious how to setup pound to let me ssh to the server running it and to

those it directs to.
I have pound running as I need it - listening on one address and forwarding
to a 
server.
My setup is simple: I have have pound and apache on the same server -
running a 
static site, and redirecting traffic to a web app on another server.
But I can only ssh to the pound/apache server if I disable pound.

If this is a stupid question - out of the scope of pound - sorry... and
could 
you be so kind as to drop me a link to any reading resources that could
help, 
for example a pound wiki.
My problem is that I need to ssh and sftp to this production server, and 
obviously don't want to have to go the physical server to update or backup
the 
boxes.

Many thanks



      

--
To unsubscribe send an email with subject unsubscribe to pound(at)apsis.ch.
Please contact roseg(at)apsis.ch for questions.

Thanks Jake,

I understand your points but I'm not sure how the ports can conflict as my sshd

listens on default port 22 and pound listens on 80 redirecting to 8080.

Once I've figured out why pound is blocking ssh I'll have try setting up a NAT 
rule as you suggest.

Thanks





________________________________
From: Jacob Anderson <jwa(at)beyond-ordinary.com>
To: pound(at)apsis.ch
Sent: Mon, September 6, 2010 6:02:46 AM
Subject: RE: [Pound Mailing List] SSH to box running Pound and server it 
redirects to

Hello,

As you say, this is out of the scope of pound. It sounds like you have a
port conflict with your SSH server. Make sure you are running your SSH
server on a port that is different than on those that pound manages.

If you want to ssh to the pound server and have it direct to the back ends,
then you need to setup a 1:1 NAT rule that creates a static binding for a
known port on the pound box and tunnels that port to the back end you want
to hit.

-- Jake


-----Original Message-----
From: Bsd Frmusr [mailto:bsdfrmusr(at)yahoo.com] 
Sent: Saturday, September 04, 2010 9:21 PM
To: pound(at)apsis.ch
Subject: [Pound Mailing List] SSH to box running Pound and server it
redirects to

Hi all,

I'm curious how to setup pound to let me ssh to the server running it and to

those it directs to.
I have pound running as I need it - listening on one address and forwarding
to a 
server.
My setup is simple: I have have pound and apache on the same server -
running a 
static site, and redirecting traffic to a web app on another server.
But I can only ssh to the pound/apache server if I disable pound.

If this is a stupid question - out of the scope of pound - sorry... and
could 
you be so kind as to drop me a link to any reading resources that could
help, 
for example a pound wiki.
My problem is that I need to ssh and sftp to this production server, and 
obviously don't want to have to go the physical server to update or backup
the 
boxes.

Many thanks



      

--
To unsubscribe send an email with subject unsubscribe to pound(at)apsis.ch.
Please contact roseg(at)apsis.ch for questions.



--
To unsubscribe send an email with subject unsubscribe to pound(at)apsis.ch.
Please contact roseg(at)apsis.ch for questions.



      

2010/9/5 Bsd Frmusr <bsdfrmusr(at)yahoo.com>:
> Hi all,
Hi,

> My setup is simple: I have have pound and apache on the same server - running
a
> static site, and redirecting traffic to a web app on another server.
sorry, here I understand that you have
- 1 web server
- 1 instance of pound
- 1 instance of apache httpd
- 1 app.server w/web app.

... what is pound used for? Maybe your setup is a little more
complicated than this?
Anyway, can you please report a little more details about your configuration?
Maybe you can post the relevant part of you config files and startup scripts?
At least the port numbers where all of the services run and output of a netstat
issued with and without pound/apache/stuffs running?

> But I can only ssh to the pound/apache server if I disable pound.
sounds like your pound/apache startup script enables a some firewall rules
that drops the ssh requests...

Greetings,

Mattia Merzi.

Thanks Mattia,

My pound config is very simple - it just listens on 192.168.0.x:80 - a jail - 
and redirects to 192.168.0.x:8080.
I have broken something and can't get pound to automatically start these days, 
so I manually start it.
Before I start it I can ssh to the last address - the one not in a jail, but 
once pound is running I can't.

I'm not at the server right now - but will get back with a netstat and more 
details in a day or two.

Thanks again



________________________________
From: Mattia Merzi <mattia.merzi(at)gmail.com>
To: pound(at)apsis.ch
Sent: Mon, September 6, 2010 6:51:07 PM
Subject: Re: [Pound Mailing List] SSH to box running Pound and server it 
redirects to

2010/9/5 Bsd Frmusr <bsdfrmusr(at)yahoo.com>:
> Hi all,
Hi,

> My setup is simple: I have have pound and apache on the same server - running

a
> static site, and redirecting traffic to a web app on another server.
sorry, here I understand that you have
- 1 web server
- 1 instance of pound
- 1 instance of apache httpd
- 1 app.server w/web app.

... what is pound used for? Maybe your setup is a little more
complicated than this?
Anyway, can you please report a little more details about your configuration?
Maybe you can post the relevant part of you config files and startup scripts?
At least the port numbers where all of the services run and output of a netstat
issued with and without pound/apache/stuffs running?

> But I can only ssh to the pound/apache server if I disable pound.
sounds like your pound/apache startup script enables a some firewall rules
that drops the ssh requests...

Greetings,

Mattia Merzi.

--
To unsubscribe send an email with subject unsubscribe to pound(at)apsis.ch.
Please contact roseg(at)apsis.ch for questions.