Can't get ISPCONFIG Server from outside.

Discussion in 'General' started by BullyWug, Nov 10, 2006.

  1. BullyWug

    BullyWug New Member

    I'm having some problems, with my ispconfig server, will trying to access to im can't get nothing, in the router i have open the respective ports, for management, ssh, and webserver. but nothing.

    I have run the portscanner are the ports are open, i have portscanner the ports in public wan ip, for exemple the 22, 80 and 81, and nothing, how can i resolve this issue, where can i find logs the shows something, in my linux server (SO: Suse linux 10.1).

    Port 21 (tcp) is open (ftp)!
    Port 22 (tcp) is open (ssh)!
    Port 25 (tcp) is open (smtp)!
    Port 53 (tcp) is open (domain)!
    Port 80 (tcp) is open (http)!
    Port 81 (tcp) is open (ISPConfig)!
    Port 110 (tcp) is open (pop3)!
    Port 111 (tcp) is open (sunrpc)!
    Port 143 (tcp) is open (imap)!
    Port 443 (tcp) is open (https)!
    Port 953 (tcp) is open (unknown)!
    Port 961 (tcp) is open (unknown)!
    Port 993 (tcp) is open (imaps)!
    Port 995 (tcp) is open (pop3s)!
    Port 2544 (tcp) is open (novell-zen)!
    Port 3306 (tcp) is open (mysql)!

    best regards
     
  2. edge

    edge Active Member Moderator

    The portscanner is only doing a scan within your (home) network!
    If you are behind a router, it's of no use!

    Get someone to scan your IP from the internet to see if the port(s) are open!

    If not (as in your case) you will have to set the router to redirect the ports to the correct LAN IP of the server.
     
  3. BullyWug

    BullyWug New Member

    do you now a good portscanner
     
  4. edge

    edge Active Member Moderator

  5. falko

    falko Super Moderator Howtoforge Staff

    What's the output of
    Code:
    iptables -L
    and
    Code:
    ps aux | grep -i apparmor
    ?
     
  6. BullyWug

    BullyWug New Member

    Here is the output of the commands that you have requested.

    *** iptables -L

    Chain INPUT (policy DROP)
    target prot opt source destination
    DROP tcp -- anywhere loopback/8
    ACCEPT all -- anywhere anywhere state RELATED,ESTAB LISHED
    ACCEPT all -- anywhere anywhere
    DROP all -- BASE-ADDRESS.MCAST.NET/4 anywhere
    PUB_IN all -- anywhere anywhere
    PUB_IN all -- anywhere anywhere
    PUB_IN all -- anywhere anywhere
    PUB_IN all -- anywhere anywhere
    DROP all -- anywhere anywhere

    Chain FORWARD (policy DROP)
    target prot opt source destination
    ACCEPT all -- anywhere anywhere state RELATED,ESTAB LISHED
    DROP all -- anywhere anywhere

    Chain OUTPUT (policy ACCEPT)
    target prot opt source destination
    PUB_OUT all -- anywhere anywhere
    PUB_OUT all -- anywhere anywhere
    PUB_OUT all -- anywhere anywhere
    PUB_OUT all -- anywhere anywhere

    Chain INT_IN (0 references)
    target prot opt source destination
    ACCEPT icmp -- anywhere anywhere
    DROP all -- anywhere anywhere

    Chain INT_OUT (0 references)
    target prot opt source destination
    ACCEPT icmp -- anywhere anywhere
    ACCEPT all -- anywhere anywhere

    Chain PAROLE (9 references)
    target prot opt source destination
    ACCEPT all -- anywhere anywhere

    Chain PUB_IN (4 references)
    target prot opt source destination
    ACCEPT icmp -- anywhere anywhere icmp destination-un reachable
    ACCEPT icmp -- anywhere anywhere icmp echo-reply
    ACCEPT icmp -- anywhere anywhere icmp time-exceeded
    ACCEPT icmp -- anywhere anywhere icmp echo-request
    PAROLE tcp -- anywhere anywhere tcp dpt:ftp
    PAROLE tcp -- anywhere anywhere tcp dpt:ssh
    PAROLE tcp -- anywhere anywhere tcp dpt:smtp
    PAROLE tcp -- anywhere anywhere tcp dpt:domain
    PAROLE tcp -- anywhere anywhere tcp dpt:http
    PAROLE tcp -- anywhere anywhere tcp dpt:hosts2-ns
    PAROLE tcp -- anywhere anywhere tcp dpt:pop3
    PAROLE tcp -- anywhere anywhere tcp dpt:https
    PAROLE tcp -- anywhere anywhere tcp dpt:ndmp
    ACCEPT udp -- anywhere anywhere udp dpt:domain
    DROP icmp -- anywhere anywhere
    DROP all -- anywhere anywhere

    Chain PUB_OUT (4 references)
    target prot opt source destination
    ACCEPT all -- anywhere anywhere


    *** ps aux | grep -i apparmor

    root 16705 0.0 0.2 1856 656 pts/1 S+ 10:03 0:00 grep -i apparmor
     
  7. falko

    falko Super Moderator Howtoforge Staff

    This looks ok. What's the output of
    Code:
    netstat -tap
    ?
     
  8. fullback

    fullback New Member

    I cannot access ISPconfig Outside the LAN network.

    Hey, I have Ubuntu server set up, and i am new at setting up servers. Though i have managed to install the server as explained in the guide and I bought a domain (for testing) and set it up in zoneedit.com because i do not have a static ip address. I also set the domain up with my router so it will resolve the new ip address when it changes. But i cannot access ISPconfig from the WAN network (outside network). What should i do to fix this problem? Thank you for your help.
     
  9. edge

    edge Active Member Moderator

    Did you also open / forward the correct ports on your router (port 80, 81 ... ) to the LAN server IP?
     
  10. fullback

    fullback New Member

    hey

    Hey i have forwarded my port.
     
  11. till

    till Super Moderator Staff Member ISPConfig Developer

    @fullback: what happens exactly when you enter the domain in a webbrowser when you are not inside your home network?
     
  12. fullback

    fullback New Member

    Hey thank you for responding to my question

    the error i get is
    "The connection has timed out













    The server at www.rabgo.com is taking too long to respond.








    * The site could be temporarily unavailable or too busy. Try again in a few
    moments.

    * If you are unable to load any pages, check your computer's network
    connection.

    * If your computer or network is protected by a firewall or proxy, make sure
    that Firefox is permitted to access the Web."

    Also My domain name is www.rabgo.com . I have bought it through godaddy.com and use Zoneedit.com to provide me with name servers and manage my dynamic ip address.
    Here is a copy of my configurations for /etc/hosts
    """"
    127.0.0.1 localhost.localdomain localhost
    192.168.1.110 www.rabgo.com www
    # The following lines are desirable for IPv6 capable hosts
    ::1 ip6-localhost ip6-loopback
    fe00::0 ip6-localnet
    ff00::0 ip6-mcastprefix
    ff02::1 ip6-allnodes
    ff02::2 ip6-allrouters
    ff02::3 ip6-allhosts
    """""""
    Thank you very much! for all your help.
     
  13. falko

    falko Super Moderator Howtoforge Staff

    IS this the right IP address?

    Code:
    mh1:~# dig www.rabgo.com
    
    ; <<>> DiG 9.2.1 <<>> www.rabgo.com
    ;; global options:  printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 22811
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
    
    ;; QUESTION SECTION:
    ;www.rabgo.com.                 IN      A
    
    ;; ANSWER SECTION:
    www.rabgo.com.          300     IN      A       [B][COLOR="Red"]69.238.212.39[/COLOR][/B]
    
    ;; Query time: 191 msec
    ;; SERVER: 213.191.92.84#53(213.191.92.84)
    ;; WHEN: Sat Nov 17 18:54:59 2007
    ;; MSG SIZE  rcvd: 47
    
    mh1:~#
    Does your router forward port 80 to your ISPConfig server? Also make sure that your ISP doesn't block port 80.
     

Share This Page