I have a small network which includes a Belkin router and an Apache2 web server. The router access the internet through Thompson Speedtouch 510 ADSL (pppoe1) modem.

Browsing the internet and sending/fetching mail works fine. I can access the Apache internally by typing the server IP in the browser on any other PC in the internal network. I have enabled port forwarding (port 80) in both router and modem.

But I cannot access the Apache from outside. I get the IP for the ADSL by DHCP, but typing this IP gives nothing at all, it says "connecting to <IP address> and finally just times out. I have tried disabling the firewall in the router. On the router I also tried to put the Apache server in the DMZ.

Any help greatly apreciated.

Maybe apache is listening in a different port? Try searching your apache.config files. This varies badly from one distro to another and apache version. On my Ubuntu, for example, I have the following files:

/etc/apache2/apache.conf
/etc/apache2/httpd.conf
/etc/apache2/ports.conf

Once you find which file has the default port for listening, check if it matches with the port you gave forward on your router. The line should look like this:

Listen 80

Some distros defaults to port 8080, and I believe that's you case (wild guess).

Good luck!

Thanks for your reply. My distro (suse 9.2) uses Listen 80, which I haven't changed.

It is possible that your ISP blocks port 80. You could either ask them if they do or you could set up Apache to listen on an odd port number, reset your router and modem, and if that works, then your ISP blocks port 80.

huh?

May you explain more carefully how you find your ip?

And perhaps you could tell us what isp you use, someone might know if they block port 80.

Hangdog42: I'll try that, although they said that they do not block it. They may do even so ....

apepost: I find the IP through www.ipadresse.no, and it tallies with what the service page of my isp (Telenor online) gives.

Hi

Cruised by and wanted to share a little link :

http://www.canyouseeme.org/

Nice way to check if they block you Og forresten : Telenor e vel ikkje akkurat kjent for fleksibilitet

OK. Telenor doesn't block port 80. At least not for me.
Perhaps you have configured apache not to allow connections from the Internet?

The Thompson Speedtouch 510 is capable of working as a router, why do you have two? Are you sure the Thompson isn't in router mode? In which case you would need to forward the port there too. (Or just remove your second router)

Telenor doesn't block me, so far so good. The Speedtouch is set up for forwarding port 80 (switching it off makes canyouseeme think the ISP has blocked me). The Belkin is a wireless router, only the apache HW and proxy server are connected by patch cables.

The apache is pretty much default setup, so I would be surprised if it would deny access from internet? But if so, what would the variable name be?

I have now tried to connect the server directly to the Speedtouch. It is still not seen, and canyouseeme reported the port as blocked. To add to the confusion, the speedtouch wouldn't accept the temporary address of the server in NAPT. Is there anywhere else in the server that external requests may be blocked? The firewall on the server is disabled.

You really shouldn't do dual nat. The speedtouch should be connected directly into the local network together with your computers instead of into the wan port of the wireless router.

I will thereafter recommend you to upgrade the speedtouch to the newest firmware , as it offers vast performance, configuration simplicity, and functionality improvements.

If it still doesn't work you would have to post your apache configuration file, and perhaps the relevant parts of your speedtouch configuration. I have an almost identical setup, and it works for me, so I am sure its possible.

I intended to place the Apache in DMZ outside the Belkin but obviosly inside the Speedtouch. Do you still recommend changing the network as described in you post?

Now canyouseeme finds the IP of the web server, but still sees the port as blocked, is it reasonable to assume that the server is the culprit?

Now I'm really confused. When I run canyouseeme with the proxy set in the browser it sees the internal IP of the PC (or server as trhe case may be), but with the browser accessing the Belkin router directly canyouseeme sees the external IP. The proxy is a squid on a separate machine.

Port 80 on the squid is not in use I suppose, so that is really what canyouseeme reports on. That leaves me to believe that when port 80 is reported as OK for the external IP then the speedtouch will accept port 80? But does it apply to the Belkin as well?

Putting a client in DMZ didn't change anything.