web server behind a router: a problem of firewall?

hello, everybody

first of all, sorry for my english, I'm from Italy, i hope
you'll understand :-)

I'm trying to publish a small page on the web using my apache web server
(Linux RH9.0) and i'm trying to make it visible from outside my domestic
LAN trough the 80 port .
I am connected to the internet by a U.S.Robotics Sureconnect ADSL
modem/router (it has firewall built-in functions, i suppose) and it seems
that something is blocking the HTTP requests from outside to internal
80 port.

I must say that from the outside people can reach
the 8080 port (my router uses that port for the
its administration by its buit-in micro_http service),
so people can reach the gateway (i mean the router)
from outside my domestic LAN.
But people can't reach reach the webserver behind it!

I've already configured the NAT ;
assuming that 192.168.1.2 is the internal address
of my web server (and by the way 192.168.1.1 is the router)
i set:

NAT -- Virtual Servers Setup

Server_Name
Web_Server(HTTP)

External_Port_Start 80
External_Port_End 80

Protocol TCP

Internal_Port_Start 80
Internal_Port_End 80

Server_IP_Address 192.168.1.2


Besides, i've configured the NAT -- PortTriggering

NAT -- Port Triggering

Application_Name Triggering_"Outgoing Ports" Open_"Incoming Ports"

httpd TCP (port range: da 80 a 80) TCP (port range: da 80 a 80)


Does anybody have any suggestion?

Thanks a lot

flood

Flood wrote:
> hello, everybody
>
> first of all, sorry for my english, I'm from Italy, i hope
> you'll understand :-)
>
> I'm trying to publish a small page on the web using my apache web server
> (Linux RH9.0) and i'm trying to make it visible from outside my domestic
> LAN trough the 80 port .
> I am connected to the internet by a U.S.Robotics Sureconnect ADSL
> modem/router (it has firewall built-in functions, i suppose) and it seems
> that something is blocking the HTTP requests from outside to internal
> 80 port.
>
> I must say that from the outside people can reach
> the 8080 port (my router uses that port for the
> its administration by its buit-in micro_http service),
> so people can reach the gateway (i mean the router)
> from outside my domestic LAN.
> But people can't reach reach the webserver behind it!
>
> I've already configured the NAT ;
> assuming that 192.168.1.2 is the internal address
> of my web server (and by the way 192.168.1.1 is the router)
> i set:
>
> NAT -- Virtual Servers Setup
>
> Server_Name
> Web_Server(HTTP)
>
> External_Port_Start 80
> External_Port_End 80
>
> Protocol TCP
>
> Internal_Port_Start 80
> Internal_Port_End 80
>
> Server_IP_Address 192.168.1.2
>
>
> Besides, i've configured the NAT -- PortTriggering
>
> NAT -- Port Triggering
>
> Application_Name Triggering_"Outgoing Ports" Open_"Incoming Ports"
>
> httpd TCP (port range: da 80 a 80) TCP (port range: da 80 a 80)
>
>
> Does anybody have any suggestion?
>
> Thanks a lot
>
> flood
>
>

Check your ADSL service agreement with the ISP. Many service
providers block incoming TCP port 80 to prevent customers
from having Web servers.

--

Tauno Voipio
tauno voipio (at) iki fi

Il Fri, 29 Jul 2005 18:25:46 +0000, Tauno Voipio ha scritto:

>
> Check your ADSL service agreement with the ISP. Many service
> providers block incoming TCP port 80 to prevent customers
> from having Web servers.

first of all, Thanks for your answer :-)

I read something like that in a forum (ISPs that block
the incoming TCP port 80)...
(My ISP is "tele2"... but i think that tells you nothing ...)

In that case, i could change my web server http port
from 80 to, say, 8081 ...
I can do that changing the httpd.conf of the apache web
server...
I shoud also change configuration of the router
for "NAT -- Virtual Servers" and "NAT -- Port Triggering"

OK,I'll try ...

Thanks...

:-)

flood

Il Fri, 29 Jul 2005 18:25:46 +0000, Tauno Voipio ha scritto:



> Check your ADSL service agreement with the ISP. Many service
> providers block incoming TCP port 80 to prevent customers
> from having Web servers.

You were right :-))

that was the problem.
I changed the web server listen port (now it is 8081)
and i have configured the router, and
it works !! :-))

if you point you browser to this Url (i have set a dinamic
DNS also):
http://flood.homelinux.org:8081

you should read some William Shakespeare verses.
:-)

THANKS, Tauno!

--
Padre sei diventato vecchio senza diventar saggio
(Re Lear - W.S.)

Flood wrote:
> Il Fri, 29 Jul 2005 18:25:46 +0000, Tauno Voipio ha scritto:
>
>
>
>
>>Check your ADSL service agreement with the ISP. Many service
>>providers block incoming TCP port 80 to prevent customers
>>from having Web servers.
>
>
> You were right :-))
>
> that was the problem.
> I changed the web server listen port (now it is 8081)
> and i have configured the router, and
> it works !! :-))
>
> if you point you browser to this Url (i have set a dinamic
> DNS also):
> http://flood.homelinux.org:8081
>
> you should read some William Shakespeare verses.
> :-)
>
> THANKS, Tauno!
>

Thank you for the positivr feedback - it keeps the
response engine running!

--

Tauno Voipio
tauno voipio (at) iki fi