Hi,
I am a newbie in Linux. I am using Ubuntu Linux 18.04.
I just setup an apache server running at port 80.
I try to access from local machine and from other machines within the same network and it works fine.

Then I try to enable the firewall and it block all the incoming port, so I cannot access from the local machine and from other machines within the network.

Then I add a new rule using ufw to allow from anywhere to access port 80 and check with ufw status.
The new rule is displayed correctly, but it does not work.

Then I add a new rule using iptables:
iptables -A INPUT -p tcp --dport 80 -j ACCEPT

After adding the new rule using iptables, I am able to access from other machine within the same network, but I still CANNOT access the port 80 from my local machine.

Anybody can help?

Thanks,

sulq

from the local machine how do you address the web site?

If using localhost then that usually goes to 127.0.0.1:80 and not the network IP. If the web site is not listening on the loopback address it will fail.

Also, are you using only http or also using https? If only http then port 80 is adequate, but if https as well then you need to add port 443 to the firewall rules.

Thanks computersavvy for your reply.

I am using http (just for testing) and the new rule I put in was:
iptables -A INPUT -p tcp --dport 80 -j ACCEPT

which is actually from anywhere and should the 127.0.0.1 is included?

Run
or

UFW is a front-end for IPtables. So if you are using UFW, stick with that and ignore iptables. And if you are using iptables stick with that and, uninstall UFW. Try something like,

See "man ufw" for the details and other options.

Myself, since iptables is deprecated, I've moved to nftables. It is far easier than iptables yet more flexible and with more options. Supposedly it is more efficient under the hood, too. So if you are just starting out, I would give serious consideration to taking a step back and begining with nftables instead. Failing that, stick with UFW. Either way, avoid iptables.

https://wiki.nftables.org/

https://wiki.nftables.org/wiki-nftab..._in_10_minutes

Yes, & No.

That means the firewall should not block it. However, the config for httpd defines what interfaces it listens to. If it is only listening on the network interface then the loopback interface (127.0.0.1) is ignored.

Check the settings in /etc/httpd/conf/httpd.conf to see what interfaces it listens on.
As you can see I have not bound the httpd daemon to a single interface so it will be listening on all available interfaces.

Running both the commands given by @ferarri gives me
You can see that it is listening on all interfaces, port 80.

1 members found this post helpful.

You are all correct.

The localhost is using the loopback interface.

After adding the below command:
sudo iptables -A INPUT -i lo -j ACCEPT

It works.

Thanks All,

Sulq