[Shorewall-users] cannot reach the apache server

Ed Greshko
Mon, 23 Jun 2003 08:46:17 -0000

On Mon, 2003-06-23 at 21:02, Anthony Kong wrote:

> You are right! My ISP is actually blocking access to
> port 80! I change the port to 8008 and then I can see
> my web server! Oh, gee, they did not tell me that when
> I opened an account with them... sob.

Here is one case where subscribing to a service like "easydns" comes
in
handy.

With easydns you can define a host pointing to a url.  That allows you,
for example, to define a host of www.mydomain.com and point it to
http://www.mydomain.com:8080/

Ed
>
> Thanks a lot ! Fortunately it proves that shorewall is
> solid and my understanding is proper :-)
>
> Regards,
>
> Anthony
>
>
>
>
> --- Ed Greshko <Ed.Greshko@greshko.com> wrote:
> > On Mon, 2003-06-23 at 18:15, Anthony Kong wrote:
> > > Hi, all,
> > >
> > > I have posted it once, but I guess I did not
> > recive
> > > any reply yet, so I posted once again.
> > >
> > > My problem is people cannot reach my server. I
> > have
> > > opened the ssh port and ftp ports. They are Ok in
> > term
> > > of connectivity. However when it comes to apache i
> > do
> > > not know if it is a firewall issue or apache
> > issue. At
> > > least in apache log I did not see any error
> > message.
> > > Event the https can get through.
> > >
> > > attached is a partial output of the iptables. Any
> > > suggestion are welcomed!
> >
> > It is quite simple.  Your rules seem OK.  You say
> > people can use https
> > and you''ve set that up the same way as http.  Right?
> >
> > So, did you look in your log files to see if you
> > have any DROPS to the
> > destination port 80?
> >
> > If you don''t want to make the effort of greping your
> > log file you could
> > always "tail -f /var/log/messages" and then
> > "http://www.yourhost.com" from
> > out on the internet.  If you don''t see anything in
> > the tail and you don''t
> > see anything in your Apache logs then your ISP is
> > blocking port 80.
> >
> > This is not an uncommon practice.  Many ISPs will
> > charge you more money
> > to allow you to host a web server.
> >
> > Ed
> >
>
> > ATTACHMENT part 2 application/pgp-signature
> name=signature.asc
>
>
>
> __________________________________
> Do you Yahoo!?
> SBC Yahoo! DSL - Now only $29.95 per month!
> http://sbc.yahoo.com
--
http://www.shorewall.net       Shorewall, for all your firewall needs
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 240 bytes
Desc: This is a digitally signed message part