[SOLVED] Cannot connect to webserver in DMZ/Orange zone

Newbie user here, but relatively experienced sysop on other routing OS’s so I should be able to figure this out, but I’m new to IPFire and I’m stuck…

I have installed and configured Alpine Linux in a QEMU VM attached to the DMZ. I need to run a small WordPress instance, hence the need for a VM. I’ve setup a firewall rule to forward any network connection to the VM instance IP address and the GUI correctly displays the rule in orange. I checked my setup against this wiki entry But…

I cannot connect to the web server. I can see from the log that the connection to the red gateway (10.10.10.10) forwards to the orange instance (172.20.0.2) but nothing shows up in the web server logs.

15:31:21  DNAT  IN=green0 OUT= MAC=[deleted] SRC=10.1.0.11 DST=10.10.10.10 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=20146 DF PROTO=TCP SPT=44878 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 MARK=0x1000000 
15:31:21  FORWARDFW  IN=green0 OUT=orange0 MAC=[deleted] SRC=10.1.0.11 DST=172.20.0.2 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=20146 DF PROTO=TCP SPT=44878 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 MARK=0x1000000 

If I try and connect via the green gateway, nothing shows up in the logs on IPFire, but I’m less concerned about that at the moment.

However…

If I stop the web server and run

nc -lv 0.0.0.0 -p 443

on the VM and try and connect to it either using a web browser or nc on my PC, I get this error on the VM which I’ve never seen before

nc: connect from wrong ip/port 172.20.0.1:58062 ignored

where 172.20.0.1 is the gateway for the VM.

I’ve hit my head on my desk for over 2 hours on this and got nowhere.

Please can someone come to my aid?!

TIA

On a whim, I tried using http://10.10.10.10 rather than https. It only went and worked!

I had already set up rules for both https and http but it never occurred to me to try port 80.

I’m embarrassed… :blush: