apache server cannot be accessed from other computers in LAN

mohtasham1983 · 04-02-2007, 06:03 PM

Hi,
I have installed OpenSuse on my machine and installed apache which is working properly.

I can see the test page from my computer, but I am not able to see that page from other computers connected to the same network. I have scanned my open ports and I can see port 80 open.

Is there anything I am missing in apache configuration file?

Doctor22 · 04-02-2007, 06:18 PM

Quote:

Originally Posted by mohtasham1983

Hi,
I have installed OpenSuse on my machine and installed apache which is working properly.

I can see the test page from my computer, but I am not able to see that page from other computers connected to the same network. I have scanned my open ports and I can see port 80 open.

Is there anything I am missing in apache configuration file?

do you have any firwall or something on. chek that out as well

also try to reinstall it see if that will help.

mohtasham1983 · 04-02-2007, 06:42 PM

How can I see if it is behind firewall?

ErrorBound · 04-02-2007, 11:38 PM

Can you SSH into the machine from elsewhere on the network?

twantrd · 04-03-2007, 12:07 AM

Can you show us how you are verifying that port 80 is open? You should see something like this "0.0.0.0:80". Also, run 'iptables -L' to see if your firewall is blocking it.

-twantrd

mohtasham1983 · 04-03-2007, 01:07 AM

i used nmap localhost to see open ports of my machine. But there is no other linux machine in the network to scan my machine open ports.

My guess is that, the network administrator has blocked html and ssh port.

Since it is at work, I have to check it tomorrow.

Thanks for replies.

mohtasham1983 · 04-03-2007, 01:04 PM

iptables -L gives me following result:

Code:

Chain INPUT (policy DROP)
target     prot opt source               destination         
ACCEPT     0    --  anywhere             anywhere            
ACCEPT     0    --  anywhere             anywhere            state RELATED,ESTABLISHED 
input_ext  0    --  anywhere             anywhere            
input_ext  0    --  anywhere             anywhere            
LOG        0    --  anywhere             anywhere            limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix `SFW2-IN-ILL-TARGET ' 
DROP       0    --  anywhere             anywhere            

Chain FORWARD (policy DROP)
target     prot opt source               destination         
LOG        0    --  anywhere             anywhere            limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix `SFW2-FWD-ILL-ROUTING ' 

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         
ACCEPT     0    --  anywhere             anywhere            
ACCEPT     0    --  anywhere             anywhere            state NEW,RELATED,ESTABLISHED 
LOG        0    --  anywhere             anywhere            limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix `SFW2-OUT-ERROR ' 

Chain forward_ext (0 references)
target     prot opt source               destination         

Chain input_ext (2 references)
target     prot opt source               destination         
DROP       0    --  anywhere             anywhere            PKTTYPE = broadcast 
ACCEPT     icmp --  anywhere             anywhere            icmp source-quench 
ACCEPT     icmp --  anywhere             anywhere            icmp echo-request 
ACCEPT     icmp --  anywhere             anywhere            state RELATED,ESTABLISHED icmp echo-reply 
ACCEPT     icmp --  anywhere             anywhere            state RELATED,ESTABLISHED icmp destination-unreachable 
ACCEPT     icmp --  anywhere             anywhere            state RELATED,ESTABLISHED icmp time-exceeded 
ACCEPT     icmp --  anywhere             anywhere            state RELATED,ESTABLISHED icmp parameter-problem 
ACCEPT     icmp --  anywhere             anywhere            state RELATED,ESTABLISHED icmp timestamp-reply 
ACCEPT     icmp --  anywhere             anywhere            state RELATED,ESTABLISHED icmp address-mask-reply 
ACCEPT     icmp --  anywhere             anywhere            state RELATED,ESTABLISHED icmp protocol-unreachable 
ACCEPT     icmp --  anywhere             anywhere            state RELATED,ESTABLISHED icmp redirect 
LOG        tcp  --  anywhere             anywhere            limit: avg 3/min burst 5 tcp dpt:http flags:FIN,SYN,RST,ACK/SYN LOG level warning tcp-options ip-options prefix `SFW2-INext-ACC-TCP ' 
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:http 
reject_func  tcp  --  anywhere             anywhere            tcp dpt:ident state NEW 
LOG        0    --  anywhere             anywhere            limit: avg 3/min burst 5 PKTTYPE = multicast LOG level warning tcp-options ip-options prefix `SFW2-INext-DROP-DEFLT ' 
DROP       0    --  anywhere             anywhere            PKTTYPE = multicast 
LOG        tcp  --  anywhere             anywhere            limit: avg 3/min burst 5 tcp flags:FIN,SYN,RST,ACK/SYN LOG level warning tcp-options ip-options prefix `SFW2-INext-DROP-DEFLT ' 
LOG        icmp --  anywhere             anywhere            limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix `SFW2-INext-DROP-DEFLT ' 
LOG        udp  --  anywhere             anywhere            limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix `SFW2-INext-DROP-DEFLT ' 
LOG        0    --  anywhere             anywhere            limit: avg 3/min burst 5 state INVALID LOG level warning tcp-options ip-options prefix `SFW2-INext-DROP-DEFLT-INV ' 
DROP       0    --  anywhere             anywhere            

Chain reject_func (1 references)
target     prot opt source               destination         
REJECT     tcp  --  anywhere             anywhere            reject-with tcp-reset 
REJECT     udp  --  anywhere             anywhere            reject-with icmp-port-unreachable 
REJECT     0    --  anywhere             anywhere            reject-with icmp-proto-unreachable

mcupples · 04-03-2007, 01:38 PM

This may sound stupid, but which ip are you using to connect to your computer? Does it start with 192.168? Are you using the external ip? If you're using the external ip you have to forward port 80 to the router.

mohtasham1983 · 04-03-2007, 02:42 PM

i am using 130.65.42.234

mcupples · 04-03-2007, 02:56 PM

Ah, okay that's the problem. You need to find out the local ip of your box. Pop open a shell and hit "ip addr". That should bring up your network ip address. You want the one that starts with "192.168.x.x". If you direct other computers in your network to that ip it should work smoothly.

The only thing is, this will not work outside of your network. To do that, you'll need to forward some ports. Let me know if you need to do that and I can help with that.

And if this isn't the problem... my bad?