Enquiry - Github Webhook

Question

Good Afternoon, 
 I need some advice on how to best setup my firewall for Github Webhook forwarding to a Jenkins web-server. 
 - My Sophos: SFVH (SFOS 19.5.1 MR-1-Build278) 
 
 I have tested the following request successfully, in triggering a jenkins job locally: 
 - POST jenkins-internal/.../invoke 
 
 I have configured Github to trigger a Webhook for my repository to point to the following: 
 - www.mydomain.com:4433/.../invoke 
 
 What do I need to do next in order to create the necessary rules/routing on the firewall to pass the request from the public interface to the jenkins node on the internal interface? I googled for KB articles and followed some posts I found.. but nothing I could get to work successfully in the end. 
 
 Any help you can offer is much appreciated. 
 
 Les

Vishal_R · Answer

Hi Leslie Fleming Thank you for reaching out to the Sophos community team. Publishing In-house service on Firewall WAN can be done via the DNAT rule. https://docs.sophos.com/nsg/sophos-firewall/19.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/RulesAndPolicies/NATRules/NATDNATServerAccessAssistant/index.html techvids.sophos.com/.../qQzynSUroGrH9KzEGSnkPA Hope in your example your URL www.mydomain.com is pointing to any of your firewall WAN Interface IP. If yes you may use that WAN Interface in the above DNAT with the required service port numbers.

Vishal_R · Answer

Hi Leslie Fleming In that case WAF will help you. Please find the below feature of WAF, In the advanced settings feature for "Rewrite HTML", and "Pass host header" details there. You may refer "Path-specific routing" section as well. docs.sophos.com/.../index.html

Enquiry - Github Webhook

Top Replies