isn't validating my site, or any of my pages. I have proper DTD doctypes at the top of the page (copy/pasted from w3.org directly). Port forwarding works correctly (I can connect to server) and firewall has granted access to apache process(es).
I am not able to access it either. The server is closing the connection as soon as it is opened. I get a RST packet immediately following the SYN ACK packet. Perhaps w3.org is getting a similar response?
I would suspect an IDS issue, since firewalls tend to block the connection request, not send RST packets after the connection is established. That behavior is more commonly associated with an IDS that believes that an intrusion is beginning.
Zonealarm is apparently triggering on an incoming request to Port 80 and assuming that it is an attack. To kill the attack, it is sending a RST packet and closing the socket.
This is the most applicable reference that I could find on Zone Labs' website:
You were very helpful. Thank you! I have now isolated the problem - its my ZoneAlarm. I have moved over to their forums, but they take a while to respond.
I have tried to grant all permissions possible to Apache and opened port 80 anywhere and everywhere I could!! I have even tried to lower the security from "high" to "medium" and down to "off" but nothing has worked. The only thing that works is completely shutting ZoneAlarm down, which defeats the purpose of having a $40.00 USD firewall.
70% of webservers run apache. I wonder ... what would happen if they all had zonealarm? ... They should definately correct this problem soon!
I saw several posts there about running apache with ZoneAlarm, but most people operating servers do not use a host-based firewall. Host-based firewalls are for home users. They are intrusive, slow and most effective at disabling the host on which they are used. Granted, they are better than nothing, but the port filtering accomplished by the DSL Router/Cable modem is almost as effective at stopping the outsider from getting in, and are far less likely to cause problems.
If you are serious about running a server, then you may want to invest in a small, cheap computer to use as a firewall and install one of the free Linux firewalls like Shorewall, IPCop, etc. They will not keep a user from getting virii or adware, but they will protect the server(s) that you are running.
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.