LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Networking (https://www.linuxquestions.org/questions/linux-networking-3/)
-   -   Can't access website externally with Linksys BEFW11S4 (https://www.linuxquestions.org/questions/linux-networking-3/cant-access-website-externally-with-linksys-befw11s4-175644/)

apache363 04-28-2004 03:55 PM

Can't access website externally with Linksys BEFW11S4
 
I'm having trouble accessing my website from outside my network. I've set up my Linksys BEFW11S4 router to use port forwarding on port 80 and others, and to forward them to my Debian server's internal IP address. Any help would be appreciated. I'm using Apache 1.3.29, Debian 3.0r1, and my connection is dynamic (PPPoE) but almost never-crashing, and I'm sure I have the right IP.

david_ross 04-28-2004 04:03 PM

Have you asked your ISP if they block port 80?

It may be worth trying it on another port to test.

Jeff205 04-28-2004 04:06 PM

Have you set up your Linksys router so the IP address of your "website" is the DMZ?

On my Linksys router, you need to select the "Advanced" tab in setup.

Freeman-Jo 04-29-2004 02:59 PM

when u mention you have pppoe and said you have the right ip. which ip did you put in the browser when you try to connect from outside?

MS3FGX 04-29-2004 04:30 PM

You really shouldn't put anything in the DMZ unless there is absolutely no other choice, and that very rarely occurs.

apache363 04-29-2004 06:18 PM

David_ross: I called Verizon Online, and eventually a tech support "engineer" was able to tell me that they don't block any ports whatsoever.

Jeff205: (please see MS3FGX)

Freeman-Jo: I put my external IP address into my browser. I know that the IP is correct because I can access my Webmin with the same IP. The port is 10000 though, instead of 80, and Webmin uses SSL. (see footnote)

MS3FGX: I agree entirely. That's why I didn't want to have that be a permanent situation and don't consider the DMZ host to be a viable option.

Footnote: After updating the firmware to 1.45 from 1.44.2z, I was able to access Webmin, which I had not been able to do before. However, I still cannot access my webpage.

MS3FGX 04-29-2004 08:35 PM

After checking, it turns out I have the same model router as you, so I can give you some tips that I used.

I originally couldn't get anything to get past this router, I made sure the ports were correct, and the IPs correct but nothing.

Eventually, after experimenting with the settings for awhile, I found you have to disable SPI to get it to let most things through. If you have this enabled, disable it and (at least from my experience) things might just start working.

I also enabled all the "Pass Through" options as well, but this doesn't seem to be as important as the SPI setting.

apache363 04-29-2004 08:57 PM

I can't seem to find an "SPI" setting in my router config pages. What is SPI?
Also, I have version 2 of the router, if that differs from yours.

MS3FGX 04-29-2004 09:09 PM

Hmm, possibly, I have the original one.

On mine it is under "Filters".

apache363 04-29-2004 09:31 PM

I looked in the Filters page, and my router doesn't have that option.
After the IP filters,
  • Private MAC Filter (Button which says "Edit MAC Filter Setting")
  • Block WAN Request (Disabled)
  • Multicast Pass Through (Enabled)
  • IPSec Pass Through (Enabled)
  • PPTP Pass Through (Enabled)
  • Remote Management (Disabled)
  • Remote Upgrade (Disabled)
  • MTU (Enabled) (1492)
After the options, in parantheses are my choices for each (except for Private MAC Filter).

odious1 04-29-2004 09:39 PM

You don't have a firewall rule on your local iface that would block 80 do you? You said you are having trouble with internet access, does that mean internal access is ok?

Tom

apache363 04-29-2004 10:01 PM

Yes, internal access works beautifully. But as soon as I attempt from a computer outside my own network, I can't get my website.
I'm pretty sure I don't have anything on the local iface blocking port 80.

odious1 04-29-2004 11:29 PM

I have the same router and firmware as you. Just for kicks ang giggles I set up fowarding on port 80 to one of my local machines here at home. I used the plug and play tcp and udp. It worked fine. All your other settings look like mine do but there are of course others.

You may want to consider resetting router to defaults and see if that possibly clears something; mine was at default until I made the foward change.

Good luck
Tom

Jeff205 04-30-2004 06:38 PM

Okay, thanks for the suggestion to NOT put my machine on the DMZ. I removed it, tested my web from the outside world, and it failed.

So, to fix the issue without DMZ, I went back into "Advanced", then "Forwarding".

For Ext. Port I entered 80 to 80

For Protocol I checked TCP

Under IP address, I entered the internal IP address of my machine.

Then I checked "Enable".

Applied the changes, and tested.

I am able to access my site from my public address.

apache363 04-30-2004 08:53 PM

I'm sorry to say, but neither of those methods worked! :(


All times are GMT -5. The time now is 03:27 AM.