http server access problems

[Guest_imported]

I have problems with Apache http server access from an external network. There's no problem with internal access. My server has a public IP. It should work but since we changed the machine, the problems started. I've checked httpd.conf, ifconfig, etc. and everything is OK. What is wrong??

Thanx a lot.

 

[mithrilhall]

What IP are you using to access the http server? Also, on the network you have apache on, is port 80 being blocked? You may want to change the default port in apache from 80 to 8080 and see if that works. If it does then port 80 is being blocked.

 

[Guest_imported]

but how could I unblock the port?? in order to try...

Thanx!

 

[mithrilhall]

Where do you have this network set up? Is this at home or work?

Many ISP block port 80 since the code red virus and have no intensions on opening it up again. You should call your ISP and ask if port 80 is open to outbound traffic. I found out that my dsl provider blocks port 80 and I had to switch my apache server to run on 8080.

 

[Guest_imported]

I'm not sure that's the problem... My Apache runs on a Linux server and the ISP doesn't block this port...
Really puzzled

 

[mithrilhall]

Here could be another problem.

Are you sharing your internet connection with the other computers on the network? If so, is it through a router? Is the router set to forward calls on port 80 to the IP of the machine that apache is running on?

 

[Guest_imported]

The server is installed at work, so that's probably not the problem...

 

[ifincham]

Hi,

If its a redhat 7.x server, then you may (inadvertently) be firewalling port 80 on the internet connex. Unless you do a custom install, you may well find that the 'lokkit' ipchains based firewall is active.

To admin that do as root:

/usr/sbin/lokkit

and follow gui screens to allow inbound http / port 80.

To see active firewall code do :

/sbin/ipchains -L
or
/sbin/iptables -L (2.4.x kernels)

Regards

 

[Guest_imported]

ipchains shows the following...
my machine isn't visible yet (from an external network)!!
((((((((((((((



Chain input (policy ACCEPT):
target prot opt source destination ports
ACCEPT tcp -y---- anywhere anywhere any ->
http
ACCEPT tcp -y---- anywhere anywhere any ->
ftp
ACCEPT all ------ anywhere anywhere n/a
ACCEPT udp ------ amazonas.unired.net.pe anywhere domain
-> any
ACCEPT udp ------ urubamba.unired.net.pe anywhere domain
-> any
ACCEPT udp ------ manu.unired.net.pe anywhere domain -
> any
REJECT tcp -y---- anywhere anywhere any ->
any
REJECT udp ------ anywhere anywhere any ->
any
Chain forward (policy ACCEPT):
Chain output (policy ACCEPT):

 

[Guest_imported]

The problem is solved. Thank you very much for your help...
It was because the machine has two IP's. Just gotta configurate the public IP as the first IP...

Thanx!!!