[SOLVED-unhappily] can't access httpd server externally

--EDIT--
due to here and here i have learned that my ISP is in fact blocking inbound TCP connections on port 80. i have sent an email to RCN requesting they're "static IP service" which that second link claims has no ports blocked.
if/when they open port 80 i will retry my apache setup and if i still have problems i may resurrect this thread.
thanks for all your help guys.
--/EDIT--
I'm trying to set up a simple server on my home box. i've got apache/php up and running with a simple test /example.html file and the test.php from the LAMP wiki.
my router has port 80 forwarded (among others)
my external IP is mapped to pbrisbin.com (resolves for vsftp and sshd just fine)
httpd running, with `httpd: ALL` and `http: ALL` in my hosts.allow file`
no firewalls, no iptables
http://localhost/example.html works great
http://www.pbrisbin.com/example.html also works great when run from _inside_ my network
http://www.pbrisbin.com/example.html does not work from outside my network
so, calling the loopback interface works
calling the external IP from inside the network works
calling the external IP from outside the network does not work
when i connect from inside the network, my php test page indicates the server address as my internal IP (192.168...) and the remote address as my external IP. so even though i type pbrisbin.com (which resolves to my 64.25... external IP), the php test page shows the "server address" as my 192.168.../internal IP address.
is there some step i missed? is it possible to do what i'm trying to do behind a router?
any help much appreciated
my config files are out of the box but i can supply them later if you like.
thanks,
pat
Last edited by brisbin33 (2009-01-09 15:21:25)

tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
09:28:41.389672 IP 192.168.0.5.37669 > 207.242.93.22.80: Flags [S], seq 3890161873, win 5840, options [mss 1460,sackOK,TS val 456489250 ecr 0,nop,wscale 6], length 0
09:28:41.426192 IP 207.242.93.22.80 > 192.168.0.5.37669: Flags [S.], seq 4011900771, ack 3890161874, win 16384, options [mss 1460,nop,wscale 0,nop,nop,TS val 0 ecr 0,nop,nop,sackOK], length 0
09:28:41.426203 IP 192.168.0.5.37669 > 207.242.93.22.80: Flags [.], ack 1, win 92, options [nop,nop,TS val 456489261 ecr 0], length 0
09:28:41.426371 IP 192.168.0.5.37669 > 207.242.93.22.80: Flags [P.], ack 1, win 92, options [nop,nop,TS val 456489261 ecr 0], length 192
09:28:41.589064 IP 207.242.93.22.80 > 192.168.0.5.37669: Flags [.], ack 193, win 65343, options [nop,nop,TS val 282118 ecr 456489261], length 1448
09:28:41.589070 IP 192.168.0.5.37669 > 207.242.93.22.80: Flags [.], ack 1449, win 137, options [nop,nop,TS val 456489310 ecr 282118], length 0
09:28:41.589181 IP 207.242.93.22.80 > 192.168.0.5.37669: Flags [P.], ack 193, win 65343, options [nop,nop,TS val 282118 ecr 456489261], length 600
09:28:41.589184 IP 192.168.0.5.37669 > 207.242.93.22.80: Flags [.], ack 2049, win 182, options [nop,nop,TS val 456489310 ecr 282118], length 0
09:28:41.589497 IP 207.242.93.22.80 > 192.168.0.5.37669: Flags [.], ack 193, win 65343, options [nop,nop,TS val 282118 ecr 456489261], length 872
09:28:41.589503 IP 192.168.0.5.37669 > 207.242.93.22.80: Flags [.], ack 2921, win 227, options [nop,nop,TS val 456489310 ecr 282118], length 0
09:28:41.616491 IP 207.242.93.22.80 > 192.168.0.5.37669: Flags [FP.], seq 2921:3034, ack 193, win 65343, options [nop,nop,TS val 282118 ecr 456489310], length 113
09:28:41.616596 IP 192.168.0.5.37669 > 207.242.93.22.80: Flags [F.], seq 193, ack 3035, win 227, options [nop,nop,TS val 456489318 ecr 282118], length 0
09:28:41.652062 IP 207.242.93.22.80 > 192.168.0.5.37669: Flags [.], ack 194, win 65343, options [nop,nop,TS val 282118 ecr 456489318], length 0
09:30:00.065474 IP 192.168.0.5.56804 > 64.85.73.40.80: Flags [S], seq 833785785, win 5840, options [mss 1460,sackOK,TS val 456512853 ecr 0,nop,wscale 6], length 0
09:30:00.167007 IP 64.85.73.40.80 > 192.168.0.5.56804: Flags [S.], seq 159355854, ack 833785786, win 4380, options [mss 1460,nop,wscale 0,nop,nop,TS val 3151313888 ecr 456512853,sackOK,eol], length 0
09:30:00.167020 IP 192.168.0.5.56804 > 64.85.73.40.80: Flags [.], ack 1, win 92, options [nop,nop,TS val 456512883 ecr 3151313888], length 0
09:30:00.167192 IP 192.168.0.5.56804 > 64.85.73.40.80: Flags [P.], ack 1, win 92, options [nop,nop,TS val 456512883 ecr 3151313888], length 144
09:30:00.383987 IP 64.85.73.40.80 > 192.168.0.5.56804: Flags [.], ack 145, win 4524, options [nop,nop,TS val 3151314106 ecr 456512883], length 0
09:30:06.346279 IP 64.85.73.40.80 > 192.168.0.5.56804: Flags [.], ack 145, win 4524, options [nop,nop,TS val 3151320069 ecr 456512883], length 1448
09:30:06.346289 IP 192.168.0.5.56804 > 64.85.73.40.80: Flags [.], ack 1449, win 137, options [nop,nop,TS val 456514737 ecr 3151320069], length 0
09:30:06.346291 IP 64.85.73.40.80 > 192.168.0.5.56804: Flags [P.], ack 145, win 4524, options [nop,nop,TS val 3151320069 ecr 456512883], length 12
09:30:06.346295 IP 192.168.0.5.56804 > 64.85.73.40.80: Flags [.], ack 1461, win 137, options [nop,nop,TS val 456514737 ecr 3151320069], length 0
09:30:06.450650 IP 64.85.73.40.80 > 192.168.0.5.56804: Flags [P.], ack 145, win 4524, options [nop,nop,TS val 3151320174 ecr 456514737], length 341
09:30:06.450657 IP 192.168.0.5.56804 > 64.85.73.40.80: Flags [.], ack 1802, win 182, options [nop,nop,TS val 456514768 ecr 3151320174], length 0
09:30:06.451024 IP 192.168.0.5.56804 > 64.85.73.40.80: Flags [P.], ack 1802, win 182, options [nop,nop,TS val 456514769 ecr 3151320174], length 191
09:30:06.658371 IP 64.85.73.40.80 > 192.168.0.5.56804: Flags [.], ack 336, win 4715, options [nop,nop,TS val 3151320382 ecr 456514769], length 0
09:30:06.868707 IP 64.85.73.40.80 > 192.168.0.5.56804: Flags [P.], ack 336, win 4715, options [nop,nop,TS val 3151320591 ecr 456514769], length 307
09:30:06.869006 IP 192.168.0.5.56804 > 64.85.73.40.80: Flags [F.], seq 336, ack 2109, win 227, options [nop,nop,TS val 456514894 ecr 3151320591], length 0
09:30:06.980473 IP 64.85.73.40.80 > 192.168.0.5.56804: Flags [.], ack 337, win 4715, options [nop,nop,TS val 3151320705 ecr 456514894], length 0
09:30:06.982140 IP 64.85.73.40.80 > 192.168.0.5.56804: Flags [F.], seq 2109, ack 337, win 4715, options [nop,nop,TS val 3151320705 ecr 456514894], length 0
09:30:06.982149 IP 192.168.0.5.56804 > 64.85.73.40.80: Flags [.], ack 2110, win 227, options [nop,nop,TS val 456514928 ecr 3151320705], length 0
^C
31 packets captured
31 packets received by filter
0 packets dropped by kernel
192.168... is my lan IP
my external IP is 209.94.131.65
the IP of the computer i was connecting _from_ is 216.204.172.218
i don't know where the other IP's in that output come from
so now it's down to a hosts.allow/httpd.conf problem?

Similar Messages

How can i access dmz server via public ip from inside?

hi all !
As shown in Figure，how can i access the server in dmz zone via public？
i can access it via private ip 192.168.1.1 now,but i can't access it via 101.100.1.2.
who can help me ?
thank you !

Hi,
You would have to configure Static NAT from DMZ to INSIDE for the server in the same way you have done for DMZ to OUTSIDE.
Basically in the following way for example
object network DMZ-WEB
host 192.168.1.1
nat (dmz,inside) static 101.100.1.2
This would enable your users on the "inside" to access the "dmz" server with the public IP address. And naturally only with the public IP address after this NAT.
Hope this helps
Please do remember to mark a reply as the correct answer if it answered your question.
Feel free to ask more if needed
- Jouni

Can't Access the Server RootDSE

Hi All,
I am working on Windows platform and trying to create a directory instance in Sun Directory Server 6.0 using its commandline utility dsadmin by executing the following command:
dsadm create - h localhost -p 2389 -P 1064 D:\Temp\SUNDS_TEMPthen strat the instance as:
dsadm start D:\Temp\SUNDS_TEMPThe instance gets created successfully but when I try to access the instance using an LDAP browset it gives me error:
Can't Access the Server RootDSE
Error Code: 32
Error Message: No Such Object
I am creating this instance to use as Access Manager configuration store. Is anybody aware of this issue?
Thanks,
Tariq Chauhdary

Thank you very much all. I was able to resolve this issue.
I did not create the Suffix and LDAP browser and that was the reason for LDAP browser to raise RootDSE error.

I can not accessed J2EE Server because i dont know username and password

I set username and password as tutorials but not successful.
and after that i can't access J2EE server with localhost:4848.
please tell me the way access J2EE server.Or Default username and password of it.
Thanks your help!

Hi,
Can you please send more infomation on exactly what is failing? Are you trying to execute asadmin commands?
Also, which platform are you running the appserver on? Does the appserver show up in the list of currently running processes?
I believe that the default username is "admin" and the password is "adminadmin".
Thanks,
Kyle

SSRS 2005 why some users can't access report server.

There is one user who can't access report server by clicking a link to a report. A window will pop up asking for login. Even he enters login, the window will keep coming back. I have set the user for that report and assigned the 'Browser' role to the user.
Other users don't have this problem. E.g. for another user I also set him up for the report and assigned 'Browser' role but he can access the same report no problem.

Hi thotwielder,
As per my understanding, I think this issue can be caused by the following two reasons:
The report server can be blocked by Firewall. If Windows Firewall is turned on, the port that the report server is configured to use is most likely closed. Indications that a port might be closed are the appearance of a blank Web page after requesting a
report, or a blank page when you attempt to open Report Manager from a remote client computer. In this scenario, we can try to open port 80 in Windows Firewall on both report server and client computers.
The report server can be blocked by browser. We should ass the report server URL to trusted site in the browser.
We can also grant the user access to site-wide operations with system-level row in report manager to check the issue again.
Please double-check we have been grand the user the browser role on the report. We can navigate to Security property of the report to check the issue.
Reference:
Configure a Firewall for Report Server Access
Configure a Native Mode Report Server for Local Administration (SSRS)
Grant User Access to a Report Server (Report Manager)
Thanks,
Katherine Xiong
Katherine Xiong
TechNet Community Support

[Solved] Owncloud can't access remotely if not on root of server

I installed Owncloud on a new archlinux server I have. It will be used as a firewall and router (it has 2 nics)
The default owncloud package from AUR makes a config file for apache that creates a virtual host on port 80 of the server pointing to owncloud.
So when I browse the servers IP from the lan, I get owncloud's web interface.
But I want to access that interface from a /owncloud address so I can use the root of the web server to host a page with links to different services and some info that will be useful for the people on that lan. So I removed the virtual host from the conf file.
Now i can only access the web interface if i browse on the server it self. But when I try from a computer on the lan I get the "https" on the url bar and a "can't connect" error.
the modified owncloud.conf for the apache server is this: http://pastebin.com/nJrYWh3r
How can I "move" the owncloud to use 192.168.0.1/owncloud on the lan for the web interface?
Last edited by santodelaespada (2012-08-31 20:35:32)

teekay wrote:
It should work already as the default config also sets an /owncloud alias. If it doesn't work, try
ln -s /usr/share/webapps/owncloud /srv/http/owncloud
It worked before when I first tested owncloud (6 months ago)
the symlink works if I remove apaches owncloud conf file.
I'll mark this as solved, but it should work with the conf file in place, not the symlink on the filesystem.
Thanks, I don't know why i did not try that before

Can't access Portal Server

Hi,
After installation of JSE(Windows Version),
I can access the identity admin console with url
http://host:port/amconsole
But I can't use the url
http://host:port/portal or
http://host:port/portal/dt
to access Portal Server Desktop, the browser
receive an 500 Internal Error Message.
The summary report after installation is
Installation Summary Report
Install Summary
Sun Java System Message Queue 3.0.1 Service Pack 2 : Installed, Configured
Sun Java System Application Server 7 Update 1 : Installed, Configured
Sun Java Studio Enterprise 6 2004Q1 : Installed, Configured
Sun Java System Web Server 6.1 Service Pack 1 : Installed, Configured
Sun Java System Directory Server 5.2 : Installed, Configured
Sun Java System Identity Server 6.1 : Installed, Configured
Sun Java System Portal Server 6.2 : Installed, Configured
PolicyAgent: Installed, Configured
It seems nothing wrong, and how can I solve
this problem?
Many thanks,

So, you got Java SE installed. Great. (I've been following your other thread re: installing IS and PS properly).It's not exactly right. I try to use Windows 2000 to install JES and with the same DNS configuration.
It works. But I still can't install IS/PS correctly in the original machine(Win XP).
Check the troubleshooting info in the Java SE Install Guide, I believethis error is covered in there. Be sure you use a new instance of your browser to access the PS desktop. And, be sure to check the supported browser list in the Release Notes.
I go through the overall Install Guide, it's really that I can't find and answer to solve my problem :'(
Regards,

How can i access my lacie external drive with os mountain lion

I have just upgradet my macbook pro from snow leopard to mountain lion, and now i can't restore my backed up files from my Lacie external drive.
When i try to connect to it through time machine or migration assistant i get the message:
"the version of the server you are trying to connect to is not supported"
I have tried to enable all UAMs but i still can't connect.
I have browsed after other similar situations, but i can't seem to find any though i'm hardly the only one with this problem.

If the backup was made using time machine, you should be able to access any files you need or want manually using the finder. It may not be pretty, but it should work. I don't know why the migration assistant would be unable to access it though.
If you can't access the contents of the backup with the finder, then I would say your problem is a bit more serious.

HP pavillion m6 notebook, Can't access Bios on external screen.

Hello my laptop screen has been completely ruined due to my kid brother (4years old) but thats not the problem.
The problem is that i'm now using my TV as a external screen via a HDMI cable, my problem is i can't access Bios on it.
Is there a solution to this problem ?
I've read someting about a key combination could solve the problem, but i can't find that combination, and i dont know when i should use it.
Thanks

Hi Patrickkje, and welcome to the HP Support Forums!
I understand that you are looking for a key combination to get the external monitor to turn on while in the BIOS. I did some research and found a couple things. First is this document for Testing a Hard Disk from the BIOS where you need to press the F10 repeatedly to get to the BIOS menu.
I found another combination that follows pressing FN & F1 at powerup switches to the external monitor.
I hope this information helps, please let me know how it goes.
Good luck and have a great day!
I worked on behalf of HP.

I can not access everything on External Hard drive

I switched from PC to MAC and am using an external hard drive to do Time Machine back ups. I used the hard drive to store pics and other files before on PC, and now that I have used to to store backups can no longer access my other files.
Question: How can I access the other files?
OR
How can I turn off the time machine backups on this disc (or tell the external drive it is not the back up anymore) so I can get to my pictures? I think once I do this, I could partitian the drive and use for both... No?

In Disk Utility, you should see an icon in the drive list representing the external drive. Below that is an icon for each volume on the drive. One of those is the Time Machine backup volume. If there are no others, then there is no other data on the drive, at least none that you can get to.

Can connect via VPN, but can't access AFP server on same Xserve

Hi:
I've set up our XServe with MacOS X Server 10.5.2 to do AFP and VPN (L2TP only; PPTP is disabled). The XServe is a standalone server, not connected to any other direstory server.
I can connect to the XServe's AFP server from my Mac over our wired and wireless network. The AFP server shows up in the sidebar of Finder windows. So far, so good.
I am able to successfully connect to our network via the VPN with Mac OS X 10.5.2 client (on two different machines) using L2TP through our network's firewall (on a Netopia T1 router; UDF ports 500 and 4500 and IP Protocol 50 and 51 are open) using a shared secret.
But I cannot connect to the XServe itself to use Server Admin or AFP (using afp://server.company.com or afp://xxx.xxx.xxx.xxx via the Go > Connect to Server command).
The error I get while connecting to the 10.5.2 AFP server is Some data in apf://server.mycompany.com could not be read or written (Error Code -36 ). I saw this error associated with a SMB problem in 10.4.x, but SMB is not running.
Other iChat users in my office also do not automatically show up in the Bonjour list when I connect to the network. Other computers on our network do not appear in the sidebar of a Finder window. (I'm told these are to be expected, as Bonjour isn't supported (in the "local area Bonjour" over a WAN link - it's purely a multicast feature on the network in the office, and won't be routed across the VPN link. True?)
Now, here's the odd part. There is a second server (v10.4.11) on our network running AFP. I can connect to it (using afp://server.company.com via the Go > Connect to Server command) and mount its various sharepoints via the VPN.
The only thing I see in the VPN log that seems amiss is this (but I have no idea what it means):
Tue Mar 11 23:09:27 2008 : Unsupported protocol 0x8057 received
--Both the 10.5.2 and the 10.4.11 servers have DNS properly configured (though our ISP; we're not running our own DNS).
--Both servers and the client have public IP addresses and have the same subnet mask. Network Utility confirms this while connected to the VPN.
--NAT is not running. The ISP is responding with public IPs for the servers.
--The firewall for the 10.5.2 server is not running (but will be once I get this all working).
--The IP address range for the VPN server doesn't overlap our DHCP pool (which also currently uses public IP addresses).
--Any user can access any service.
--No network routing definitions have been set up.
--In essence, I've followed the steps on Pages 141-142 of the Network Services Admin Guide.
One other note: After I connect, the Network Preferences > VPN > Advanced > TCP/IP window shows the IP address for the client just fine (assigned from the VPN pool), but lists the router as having the IP address of the XServe (rather than the router on the network). Is that normal?
I'm hoping I don't need to have the XServe run DNS as an internal LAN DNS server.... And I'm not sure why I would have to if I can already successfully connect to the 10.4.11 AFP server .
What simple step am I missing?
TIA,
mm

"I am able to successfully connect to our network via the VPN with Mac OS X 10.5.2 client (on two different machines) using L2TP through our network's firewall (on a Netopia T1 router; UDF ports 500 and 4500 and IP Protocol 50 and 51 are open) using a shared secret."
I suspect you mean UDP ports and you might need UDP port 1701 open too.
You only need IP protocol 50 (ESP), protocol 51 (AH) isn't used. And ESP is only used when client and server isn't behind NAT (when NAT is used only the UDP ports are used).
"Unsupported protocol 0x8057 received"
This is usually seen when you can't get GRE through but since you don't use PPTP I can't be sure why this is registered in the logs. Sometimes when connecting using PPTP you have to disconnect and then reconnect for everything to work - you might try this for L2TP too.
But if you already can reach services on any LAN nodes through the VPN I wouldn't bother with it.
As you have a firewall in front of the server you need a second alias IP on the server that you can use to get at the services running on the server through the VPN. The firewall blocks all ports protocols not opened - that's why you can't use the server main IP even if the VPN is up.
The netmask is used by all nodes to determine how big your subnet is: what part of the IP number is the network number and what range the node number is in => really: should traffic be directed to a node on the same LAN or sent directly to the gw/router for forwarding.
What you can't do is connect from a NATed network to another NATed network that both are using the same network number. (That's why people should stay away from using the "default" 192.168.0.0/24 and 192.168.1.0/24 networks for VPN server LANs).
Try your settings at http://www.jodies.de/ipcalc to see what I mean.
"...lists the router as having the IP address of the XServe (rather than the router on the network). Is that normal?"
Yes. The VPN server is the VPN gw/router.
"The firewall for the 10.5.2 server is not running (but will be once I get this all working)."
If you already have a firewall in front of your servers that is a bit redundant.
"--No network routing definitions have been set up."
"I'm hoping I don't need to have the XServe run DNS as an internal LAN DNS server"
You need routing definitions if you want to setup a split tunnel VPN or all traffic is routed through the VPN when connected. The VPN becomes the default gw.
Without ipforwarding ON in the server you can only reach nodes on the server LAN - not Internet.
DNS is needed for your servers forward and reverse names/IPs for advanced services but doesn't need to run in any of your own servers.
If you decide to do a split tunnel VPN config (adding public and private routing definitions) a reachable DNS IP for VPN clients (in VPN config on server) is needed for VPN clients or they can't use names to find anything. To reach this DNS IP if public/not on your server LAN, you need your server to forward IP DNS lookups and have a routing definition for it.
A split tunnel VPN only send traffic for your server LAN through the VPN and all other traffic directly to the local gw/router (Internet).

Can't Access POP Server

Hi
Suddenly, I can't access my POP server. After years of good service, all of a sudden I couldn't access the server a few hours ago. I use Mail. I opened the Connection Doctor, and after several minutes of trying, I received the following error message:
"Alert
The mail server denied access to the user specified in Mail preferences because of a serious system error. Verify the settings for account “POP Account”. If necessary, contact your service provider to resolve the problem.
The server returned the error: Unable to process From lines (envelopes), change recognition modes or check for corrupted mail drop."
I haven't changed anything - so something's either corrupted - or the problem's not on my side. If something has been corrupted can I use a back-up Mail preferences file from my last back-up?
Finally, maybe I'm paranoid but I wonder, would this be the error message I'd get if I had been denied access?
Marcus

Step one. Call your ISP and see what they say.

Can't access my plexor external

I recently upgraded to the latest ML from SL and now can't access my external hard drive. It's a plexor px-eh 25l and I keep getting messages that it's not supported. Any ideas on how to support it?

Plextor Support

Can't access weblogic server from internet but can from intranet

Hopefully this isn't the wrong place to post but I've searched through many many
newsgroups to figure out where to post this but can't find a specific enough one.
I've recently run into a problem with my weblogic server in that it can not be
accessed from the internet now. This was all working several weeks ago, when
I had the wl server listening for SSL communications on port 7002. I could access
the server from both within our corporate intranet (kind of) as well as access
it from the internet. I say kind of for the intranet in that when I chose to
setup SSL on the the wl server, I couldn't get port 7002 to communicate through
our proxy server. After a little research I determined that it would be best
to communicate on the default SSL port of 443. After switching to 443, I didn't
need to bypass the proxy any longer, when accessing from within intranet, but
now couldn't access the server from the internet. The wl server is behind a firewall,
but I had the network administrators open up port 443 on the firewall. They ran
a network sniffer and determined that the wl server is sending a TCP FIN packet
immediately following the last ACK packet in a TCP session establishment. I don't
really understand what that all means, but it seems really strange that everything
works great when inside the intranet and I don't get any TCP FIN packets sent
from the server, but when you try to communcate through the firewall you do.
Does anyone have any insight into this issue? something else I could look at.
The network administrators are basically saying it's the webserver that needs
configuration (even though it worked great in the past when listening on port
7002 instead of 443). PLEASE HELP!!!

Got it. This thread helped!
Thanks!
https://discussions.apple.com/thread/3193444?tstart=60

Can't Access my server from the Server App

Upgraded to Lion Server, everything seemed to go OK. Now, for some reason, I can't access the settings from the Server app. It asks for a passowrd, and it won't take it. I can reboot the server, log in just fine. But entering in my username and passowrd in the Server app, no dice.
Thoughts???

Got it. This thread helped!
Thanks!
https://discussions.apple.com/thread/3193444?tstart=60

[SOLVED-unhappily] can't access httpd server externally

Similar Messages

Maybe you are looking for