Firewall settings for httpd

[lespaul]

Hey guys,

Quick question. I've been staring at this problem for a while now, and i just can't figure it out.

I'm trying to get my httpd server to allow external connections. My iptables are as follows:

Code: Select all

[root@webproxy]# iptables --list
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTABLISHED 
REJECT     icmp --  anywhere             anywhere            reject-with icmp-port-unreachable 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:ssh 
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:http state NEW,ESTABLISHED 
REJECT     all  --  anywhere             anywhere            reject-with icmp-host-prohibited 

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         
REJECT     all  --  anywhere             anywhere            reject-with icmp-host-prohibited 

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination  

As i understand these rules should allow for external access to port 80 on this server. Within my local network I can access the webserver perfectly fine, but apparently not from outside of our network. The local requests are done from a computer within our network, and not from the same server. Does this have anything to do with my firewall settings, httpd settings or something completely unrelated?

LesPaul

[B3N]

Are you behind NAT? If you are behind NAT you have to configure Port Forwarding in your router.

[Whoever]

Something unrelated.

If you can access the web server from the LAN, then it's not the firewall on the web server that is the problem. Use tcpdump to see if the packets are even reaching your web server. Also look in your httpd logs to see if there is a configuration issue.

My guess is that packets from outside the LAN are not reaching your webserver, or that the webserver's replies are being sent to a different router from the router that sent them to your webserver. For the latter question: is your webserver's default gateway the same as the router that is sending packets to your webserver?

[lespaul]

The router was properly configured to let port 80 through to that server.
Apparently it was a DHCP lease issue with the router, as it fixed itself overnight, even though it already had the correct IP address

Anyway, thanks for the help!