I'm having some problems accessing my Apache2 intranet site when connected to my network's VPN server.
- ASUS RT-66U router with PPTP VPN server.
- Debian server with apache 2.2 as "intranet server".
- LAN addresses are in the 10.0.0.0 network.
The intranet site on the Apache2 server is configured so that only the LAN addresses have access (as below):
Order deny,allow Deny from all Allow from localhost # IPv4 Allow from 127.0.0.0/8 # IPv4 Loopback Addresses Allow from 169.254.0.0/16 # IPv4 Link-local Addresses Allow from 10.0.0.0/8 # IPv4 Normal LAN Address Space
My ASUS RT-660U router is setup with a built-in PPTP VPN server, and I'm connecting to it with the Windows 7 built-in VPN client.
The VPN connection works fine with regards to the LAN; I can access network shares, SSH to the Linux/Apache2 server, and access the router's web interface at 10.0.0.1. So far, so good.
However, I cannot access the intranet virtual site on the Apache2 server. I can access this when connected to the LAN, and from the outside I get the
403 Forbidden message. So basically it works as it should.
But when I connect to the VPN and try to open the intranet site, I still get the
403 Forbidden message. This is, as mentioned, while having no problems accessing other LAN resources.
When I'm connected to the VPN, from my mobile network, this is Windows
PPP adapter AEV25 VPN: Connection-specific DNS Suffix . : IPv4 Address. . . . . . . . . . . : 10.0.0.200 Subnet Mask . . . . . . . . . . . : 255.255.255.255 Default Gateway . . . . . . . . . : 0.0.0.0 Wireless LAN adapter Wireless Network Connection: Connection-specific DNS Suffix . : Link-local IPv6 Address . . . . . : fe80::ccb5:407b:3314:5a66%12 IPv4 Address. . . . . . . . . . . : 192.168.1.206 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 192.168.1.1
The Windows 7 PC is connected to my Android phone's network (hotspot), then connected to the VPN.
From my basic understanding of networking, it seems that Apache2 uses the address of the Wireless LAN, which is connected to the "outside" through my mobile phone, and not the PPTP adapter address, which is the LAN address.
So, how can I get Apache2 to recognize the "correct" adapter/address, so that I can access the internal site via the VPN connection?