Static IPS ports not connecting

Discussion in 'Installation/Configuration' started by zustudios, Aug 18, 2017.

  1. zustudios

    zustudios Member

    I installed Proxmox 5.I have 5 static ips. I'm running 1 ip for the host,2 webservers (ubuntu 16.04 ispconfig 3.1,2nd dns),1 windows 7,1 cloudserver (ubuntu 16.04 nextcloud).
    I have internet connection on all machines. My isp said all ports are open by default on static ips. But when I go to my ip:8080 I get no connection. when I go to my ip:80 I get a connection. What could be blocking my connections on some of my ports?
     
  2. Tuumke

    Tuumke Active Member

    Did you check local firewall?
     
  3. zustudios

    zustudios Member

  4. Tuumke

    Tuumke Active Member

    Is the IP of the ISPConfig server private, or public?
    Is it in the range of any of the ones below, then its private and you need to forward the ports on your router.
    10.0.0.0 - 10.255.255.255 (10/8 prefix)
    172.16.0.0 - 172.31.255.255 (172.16/12 prefix)
    192.168.0.0 - 192.168.255.255 (192.168/16 prefix)
     
  5. zustudios

    zustudios Member

    The IP is public.
     
  6. Tuumke

    Tuumke Active Member

    So the ISPConfig VM has a public ip adress? Thnx you should check the Ubuntu firewall to see if port 8080 is open.
    I'd think it's strange that the VM has a public ip address since it's a VM..
     
  7. zustudios

    zustudios Member

    I did a ufw command to allow port 8080 on reboot but the port is still blocked somewhere.
     
  8. Tuumke

    Tuumke Active Member

    Try an ifconfig on the ISPconfig machine in an SSH session pls
     
  9. zustudios

    zustudios Member

    root@ns1:~# ifconfig
    ens18 Link encap:Ethernet HWaddr be:4f:fa:41:fd:7b
    inet addr:X.X.X.X Bcast:X.X.X.X Mask:X.X.X.X
    inet6 addr: fe80::bc4f:faff:fe41:fd7b/64 Scope:Link
    inet6 addr: fd00:a84e:3ff4:b242:bc4f:faff:fe41:fd7b/64 Scope:Global
    UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
    RX packets:286365 errors:1 dropped:15 overruns:0 frame:1
    TX packets:136422 errors:0 dropped:0 overruns:0 carrier:0
    collisions:0 txqueuelen:1000
    RX bytes:121210775 (121.2 MB) TX bytes:23072629 (23.0 MB)

    lo Link encap:Local Loopback
    inet addr:127.0.0.1 Mask:255.0.0.0
    inet6 addr: ::1/128 Scope:Host
    UP LOOPBACK RUNNING MTU:65536 Metric:1
    RX packets:85939 errors:0 dropped:0 overruns:0 frame:0
    TX packets:85939 errors:0 dropped:0 overruns:0 carrier:0
    collisions:0 txqueuelen:1
    RX bytes:20469639 (20.4 MB) TX bytes:20469639 (20.4 MB)
     
  10. Tuumke

    Tuumke Active Member

    Can jou 'un-x' the 1st te x-es of inet addr:X.X.X.X pls, or send me in a PM
     
  11. zustudios

    zustudios Member

    I'm still unable to unblock all of the ports for ispconfig. I still can't connect.
    root@ns1:~# ufw status
    Status: active

    To Action From
    -- ------ ----
    20 ALLOW Anywhere
    21 ALLOW Anywhere
    22 ALLOW Anywhere
    25 ALLOW Anywhere
    53 ALLOW Anywhere
    80 ALLOW Anywhere
    110 ALLOW Anywhere
    143 ALLOW Anywhere
    443 ALLOW Anywhere
    587 ALLOW Anywhere
    993 ALLOW Anywhere
    995 ALLOW Anywhere
    3306 ALLOW Anywhere
    8080 ALLOW Anywhere
    8081 ALLOW Anywhere
    10000 ALLOW Anywhere
    20 (v6) ALLOW Anywhere (v6)
    21 (v6) ALLOW Anywhere (v6)
    22 (v6) ALLOW Anywhere (v6)
    25 (v6) ALLOW Anywhere (v6)
    53 (v6) ALLOW Anywhere (v6)
    80 (v6) ALLOW Anywhere (v6)
    110 (v6) ALLOW Anywhere (v6)
    143 (v6) ALLOW Anywhere (v6)
    443 (v6) ALLOW Anywhere (v6)
    587 (v6) ALLOW Anywhere (v6)
    993 (v6) ALLOW Anywhere (v6)
    995 (v6) ALLOW Anywhere (v6)
    3306 (v6) ALLOW Anywhere (v6)
    8080 (v6) ALLOW Anywhere (v6)
    8081 (v6) ALLOW Anywhere (v6)
    10000 (v6) ALLOW Anywhere (v6)

    root@ns1:~#
     
  12. zustudios

    zustudios Member

    root@ns1:~# wget -q -O htf-common-issues.php "http://gitplace.net/pixcept/ispcon fig-tools/raw/stable/htf-common-issues.php" && php -q htf-common-issues.php

    ##### SCRIPT FINISHED #####
    Results can be found in htf_report.txt
    To view results use your favourite text editor or type 'cat htf_report.txt | mor e' on the server console.

    If you want to see the non-anonymized output start the script with --debug as pa rameter (php -q htf-common-issues.php --debug).

    root@ns1:~# cat htf_report.txt | more

    ##### SERVER #####
    IP-address (as per hostname): ***.***.***.***
    IP-address(es) (as per ifconfig): ***.***.***.***
    [WARN] ip addresses from hostname differ from ifconfig output. Please check your
    ip settings.
    [INFO] ISPConfig is installed.

    ##### ISPCONFIG #####
    ISPConfig version is 3.1dev


    ##### VERSION CHECK #####

    [INFO] php (cli) version is 7.0.22-0ubuntu***.***.***.***

    ##### PORT CHECK #####

    [WARN] Port 8080 (ISPConfig) seems NOT to be listening
    [WARN] Port 8081 (ISPConfig Apps) seems NOT to be listening
    [WARN] Port 443 (Webserver SSL) seems NOT to be listening

    ##### MAIL SERVER CHECK #####
    --More--
     
  13. zustudios

    zustudios Member

    root@ns1:~# wget -q -O htf-common-issues.php "http://gitplace.net/pixcept/ispconfig-tools/raw/stable/htf-common-issues.php" && php -q htf-common-issues.php

    ##### SCRIPT FINISHED #####
    Results can be found in htf_report.txt
    To view results use your favourite text editor or type 'cat htf_report.txt | more' on the server console.

    If you want to see the non-anonymized output start the script with --debug as parameter (php -q htf-common-issues.php --debug).

    root@ns1:~# cat htf_report.txt | more

    ##### SERVER #####
    IP-address (as per hostname): ***.***.***.***
    IP-address(es) (as per ifconfig): ***.***.***.***
    [WARN] ip addresses from hostname differ from ifconfig output. Please check your ip settings.
    [INFO] ISPConfig is installed.

    ##### ISPCONFIG #####
    ISPConfig version is 3.1dev


    ##### VERSION CHECK #####

    [INFO] php (cli) version is 7.0.22-0ubuntu***.***.***.***

    ##### PORT CHECK #####

    [WARN] Port 8080 (ISPConfig) seems NOT to be listening
    [WARN] Port 8081 (ISPConfig Apps) seems NOT to be listening
    [WARN] Port 443 (Webserver SSL) seems NOT to be listening

    ##### MAIL SERVER CHECK #####


    ##### RUNNING SERVER PROCESSES #####

    [INFO] I found the following web server(s):
    Apache 2 (PID 1576)
    [INFO] I found the following mail server(s):
    Postfix (PID 2170)
    [INFO] I found the following pop3 server(s):
    Dovecot (PID 1386)
    [INFO] I found the following imap server(s):
    Dovecot (PID 1386)
    [INFO] I found the following ftp server(s):
    PureFTP (PID 1963)

    ##### LISTENING PORTS #####
    (only ()
    Local (Address)
    [localhost]:10023 (1743/postgrey.pid)
    [localhost]:10024 (2210/amavisd-new)
    [localhost]:10025 (2170/master)
    [localhost]:10026 (2210/amavisd-new)
    [localhost]:10027 (2170/master)
    [anywhere]:587 (2170/master)
    [localhost]:11211 (1231/memcached)
    [anywhere]:5901 (1445/Xtightvnc)
    [anywhere]:110 (1386/dovecot)
    [anywhere]:143 (1386/dovecot)
    [anywhere]:465 (2170/master)
    [anywhere]:6001 (1445/Xtightvnc)
    [anywhere]:21 (1963/pure-ftpd)
    ***.***.***.***:53 (1227/named)
    [localhost]:53 (1227/named)
    [anywhere]:22 (1226/sshd)
    [anywhere]:25 (2170/master)
    [localhost]:953 (1227/named)
    [anywhere]:993 (1386/dovecot)
    [anywhere]:995 (1386/dovecot)
    *:*:*:*::*:10023 (1743/postgrey.pid)
    *:*:*:*::*:10024 (2210/amavisd-new)
    *:*:*:*::*:10026 (2210/amavisd-new)
    *:*:*:*::*:3306 (1718/mysqld)
    *:*:*:*::*:587 (2170/master)
    [localhost]10 (1386/dovecot)
    [localhost]43 (1386/dovecot)
    *:*:*:*::*:80 (1576/apache2)
    *:*:*:*::*:465 (2170/master)
    *:*:*:*::*:21 (1963/pure-ftpd)
    *:*:*:*::*:53 (1227/named)
    *:*:*:*::*:22 (1226/sshd)
    *:*:*:*::*:25 (2170/master)
    *:*:*:*::*:953 (1227/named)
    *:*:*:*::*:993 (1386/dovecot)
    *:*:*:*::*:995 (1386/dovecot)




    ##### IPTABLES #####
    Chain INPUT (policy ACCEPT)
    target prot opt source destination
    f2b-dovecot-pop3imap tcp -- [anywhere]/0 [anywhere]/0 multiport dports 110,99
    5,143,993
    f2b-pureftpd tcp -- [anywhere]/0 [anywhere]/0 multiport dports 21
    f2b-postfix-sasl tcp -- [anywhere]/0 [anywhere]/0 multiport dports 25
    f2b-sshd tcp -- [anywhere]/0 [anywhere]/0 multiport dports 22

    Chain FORWARD (policy ACCEPT)
    target prot opt source destination

    Chain OUTPUT (policy ACCEPT)
    target prot opt source destination

    Chain f2b-dovecot-pop3imap (1 references)
    target prot opt source destination
    RETURN all -- [anywhere]/0 [anywhere]/0

    Chain f2b-postfix-sasl (1 references)
    target prot opt source destination
    REJECT all -- ***.***.***.*** [anywhere]/0 reject-with icmp-port-unreachable
    RETURN all -- [anywhere]/0 [anywhere]/0

    Chain f2b-pureftpd (1 references)
    target prot opt source destination
    RETURN all -- [anywhere]/0 [anywhere]/0

    Chain f2b-sshd (1 references)
    target prot opt source destination
    RETURN all -- [anywhere]/0 [anywhere]/0
     
  14. Tuumke

    Tuumke Active Member

    Looks to my like your ISPConfig install is not right. It's not listening on 8080? Apache is also not listening on 443.
    I'd advise to reinstall.
     
  15. zustudios

    zustudios Member

  16. zustudios

    zustudios Member

    Problem solved so far. I did a reinstall and I am able to access my ispconfig 3.1 panel. My problem was my sources list. I deleted the original one and replaced it(copy and paste whole file) with the info on the tutorial. https://www.howtoforge.com/tutorial...l-pureftpd-bind-postfix-doveot-and-ispconfig/

    root@ns1:~# wget -q -O htf-common-issues.php "http://gitplace.net/pixcept/ispconfig-tools/raw/stable/htf-common-issues.php" && php -q htf-common-issues.php

    ##### SCRIPT FINISHED #####
    Results can be found in htf_report.txt
    To view results use your favourite text editor or type 'cat htf_report.txt | more' on the server console.

    If you want to see the non-anonymized output start the script with --debug as parameter (php -q htf-common-issues.php --debug).

    root@ns1:~# cat htf_report.txt | more

    ##### SERVER #####
    IP-address (as per hostname): ***.***.***.***
    IP-address(es) (as per ifconfig): ***.***.***.***
    [WARN] ip addresses from hostname differ from ifconfig output. Please check your ip settings.
    [INFO] ISPConfig is installed.

    ##### ISPCONFIG #####
    ISPConfig version is 3.1dev


    ##### VERSION CHECK #####

    [INFO] php (cli) version is 7.0.22-0ubuntu***.***.***.***

    ##### PORT CHECK #####


    ##### MAIL SERVER CHECK #####


    ##### RUNNING SERVER PROCESSES #####

    [INFO] I found the following web server(s):
    Apache 2 (PID 1520)
    [INFO] I found the following mail server(s):
    Postfix (PID 2728)
    [INFO] I found the following pop3 server(s):
    Dovecot (PID 1296)
    [INFO] I found the following imap server(s):
    Dovecot (PID 1296)
    [INFO] I found the following ftp server(s):
    PureFTP (PID 2172)

    ##### LISTENING PORTS #####
    (only ()
    Local (Address)
    [localhost]:10023 (1533/postgrey.pid)
    [localhost]:10024 (2019/amavisd-new)
    [localhost]:10025 (2728/master)
    [localhost]:10026 (2019/amavisd-new)
    [localhost]:10027 (2728/master)
    [anywhere]:587 (2728/master)
    [localhost]:11211 (1261/memcached)
    [anywhere]:110 (1296/dovecot)
    [anywhere]:143 (1296/dovecot)
    [anywhere]:465 (2728/master)
    [anywhere]:21 (2172/pure-ftpd)
    ***.***.***.***:53 (1267/named)
    [localhost]:53 (1267/named)
    [anywhere]:22 (1251/sshd)
    [anywhere]:25 (2728/master)
    [localhost]:953 (1267/named)
    [anywhere]:993 (1296/dovecot)
    [anywhere]:995 (1296/dovecot)
    *:*:*:*::*:10023 (1533/postgrey.pid)
    *:*:*:*::*:10024 (2019/amavisd-new)
    *:*:*:*::*:10026 (2019/amavisd-new)
    *:*:*:*::*:3306 (1709/mysqld)
    *:*:*:*::*:587 (2728/master)
    [localhost]10 (1296/dovecot)
    [localhost]43 (1296/dovecot)
    *:*:*:*::*:8080 (1520/apache2)
    *:*:*:*::*:80 (1520/apache2)
    *:*:*:*::*:465 (2728/master)
    *:*:*:*::*:8081 (1520/apache2)
    *:*:*:*::*:21 (2172/pure-ftpd)
    *:*:*:*::*:53 (1267/named)
    *:*:*:*::*:22 (1251/sshd)
    *:*:*:*::*:25 (2728/master)
    *:*:*:*::*:953 (1267/named)
    *:*:*:*::*:443 (1520/apache2)
    *:*:*:*::*:993 (1296/dovecot)
    *:*:*:*::*:995 (1296/dovecot)




    ##### IPTABLES #####
    Chain INPUT (policy ACCEPT)
    target prot opt source destination
    f2b-dovecot-pop3imap tcp -- [anywhere]/0 [anywhere]/0 multiport dports 110,995,143,993
    f2b-pureftpd tcp -- [anywhere]/0 [anywhere]/0 multiport dports 21
    f2b-postfix-sasl tcp -- [anywhere]/0 [anywhere]/0 multiport dports 25
    f2b-sshd tcp -- [anywhere]/0 [anywhere]/0 multiport dports 22

    Chain FORWARD (policy ACCEPT)
    target prot opt source destination

    Chain OUTPUT (policy ACCEPT)
    target prot opt source destination

    Chain f2b-dovecot-pop3imap (1 references)
    target prot opt source destination
    RETURN all -- [anywhere]/0 [anywhere]/0

    Chain f2b-postfix-sasl (1 references)
    target prot opt source destination
    REJECT all -- ***.***.***.*** [anywhere]/0 reject-with icmp-port-unreachable
    RETURN all -- [anywhere]/0 [anywhere]/0

    Chain f2b-pureftpd (1 references)
    target prot opt source destination
    RETURN all -- [anywhere]/0 [anywhere]/0

    Chain f2b-sshd (1 references)
    target prot opt source destination
    RETURN all -- [anywhere]/0 [anywhere]/0
     
  17. Tuumke

    Tuumke Active Member

    Okai, good to know! :)
     
  18. zustudios

    zustudios Member

    Thank you.
     
    Tuumke likes this.

Share This Page