LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Newbie (https://www.linuxquestions.org/questions/linux-newbie-8/)
-   -   People can't connect on my IP (https://www.linuxquestions.org/questions/linux-newbie-8/people-cant-connect-on-my-ip-927900/)

cskiwi 02-06-2012 09:14 AM

People can't connect on my IP
 
Hi,

I recently setup an linux computer using the following tutorial: http://secure-ubuntu-server.blogspot...watha-web.html
(I skipped step 6 because I didn't use an virtual host)

everything is working great on my local host. but other people can't connect to the external IP (got Ip from Ipchicken.com)

I forwarded my ports on my router (20,21,80,443,50000-50100), and added the computer to the DMZ list (just for testing if that would made any difference, but it didn't.)
but this link keep saying they're closed (http://www.yougetsignal.com/tools/open-ports/)

tested with 2 routers having same problem for both, different setup of linux though.
now using D-link DIR-300

For next testing I did:
Code:

iptables -P INPUT ACCEPT
iptables -P OUTPUT ACCEPT
iptables -P FORWARD ACCEPT

didn't have any results on external connect, but when I close them I can't connect to the server with SSH,nor can I see the site.
so the iptables does affect the server

any suggestions, what could be the problem and how to fix it?

grt kiwi

ButterflyMelissa 02-06-2012 09:49 AM

Okay, so, how about dyndns instead? I suspect you're running some sort of Internet server here. Cool! The IP address is tricky as it renews/changes all the time. However, dyndns allows you to stay accessible even using an dynamic IP address. Check out their services!

Good luck

Thor

repo 02-06-2012 10:00 AM

Check with your provider if they block ports.
Often they block ports for servers on dynamic ip's.

Kind regards

cskiwi 02-06-2012 11:40 AM

Quote:

Originally Posted by repo (Post 4595098)
Check with your provider if they block ports.
Often they block ports for servers on dynamic ip's.

Kind regards

Yep they block the following ports:

0 -> 1023, 1080, 12345, 12346, 31337 -> 31339, 31784, 27374, 1243, 31785 -> 31792, 4444, 1847, 1900, 3127

How can I make that when you connect to the IP and get the mainpage?
Gonna look for myself now to, but if you know the answer feel free to reply

EDIT: They can already can connect to IP:2000 (I've set the port for hiawatha to 2000)
so now I need to make that they auto connect to that port when they connect to it

ButterflyMelissa 02-06-2012 12:34 PM

If ports 80 or 8080 are not blocked, all you need to do is set up a page called "index.htm" or something like that (see the settings in the server) and your visitors will see that page first...
But, 1 to 1023 seems to be blocked, so there's no option here. So, I assume dyndns to be an option. Set up a domain, delegate that to your IP : port and (possibly) presto! Look into the wizard they have...

Linux_Kidd 02-06-2012 12:48 PM

Quote:

Originally Posted by Thor_2.0 (Post 4595210)
If ports 80 or 8080 are not blocked,...

he said "Yep they block the following ports: 0 -> 1023, ..." so its likely 80 is not getting through.

for OP, what "router" are you talking about? and what do you mean by "forwarded ports"? you also say "auto connect" for clients, the only way they will "auto connect" is if, as example, they save a url shortcut with fqdn[:]port in it.

ButterflyMelissa 02-06-2012 12:51 PM

Quote:

he said "Yep they block the following ports: 0 -> 1023, ..." so its likely 80 is not getting through.
Yep, did extract that out of the reply :D

@ OP - by the way, you may want to check with your provider's fine print. There is a healthy reason for these ports to be blocked: so you should not run a server...

cskiwi 02-06-2012 03:41 PM

I know that it's for security reasons but I mailed them asking if they would open it, probably not gonna work, but it's definitely worth the shot ;P
And for an dynds, I don't want to spend any money on this one, it's just for fun. or perhaps i saw the site wrong and it's an free service.

@Linux Kidd, as I said in first post it's an D-link DIR-300, and by forwarding I mean, I got to the page port forwarding, and add the ports, is there any other way then?

repo 02-06-2012 03:44 PM

Quote:

I know that it's for security reasons but I mailed them asking if they would open it, probably not gonna work, but it's definitely worth the shot ;P
They will allow it if you take a fxed IP.

Kind regards

ButterflyMelissa 02-07-2012 10:54 AM

Seconding that, repo. However, a fixed IP address (with ALL the extra's that come with it) comes with a bill. Be warmed.

suicidaleggroll 02-07-2012 02:03 PM

Quote:

Originally Posted by Thor_2.0 (Post 4596111)
Seconding that, repo. However, a fixed IP address (with ALL the extra's that come with it) comes with a bill. Be warmed.

Depends on the ISP. TimeWarner in Texas only charges $5/mo for a static IP with their basic consumer internet package.
Comcast, on the other hand, won't give you a static IP unless you upgrade to their business class account, which is double the price...

Linux_Kidd 02-07-2012 02:26 PM

if its a real business server then buy an IP. if its occassional access for friends and what-not then just use dyn-dns with a odd port like 2022 or 8080, whatever gets through the ISP, etc.


All times are GMT -5. The time now is 03:10 AM.