Welcome to the MacNN Forums.

timmerk · Jun 11, 2003, 05:10 PM

Hi,

I searched the forums and the net for this problem, but no one seems to have it.

I have an airport extreme basestation connected to my cable modem. I want to port map port 80, 21, 22 to my powerbook which is assigned 10.0.1.2 automatically. I try to add it in the settings, and it says it worked. But even from OUTSIDE networks, I still can't get through.

Any ideas?

Thanks,

karl

midwinter · Jun 11, 2003, 06:09 PM

Do you have web sharing turned on on the powerbook?

I don't think you'll be able to access it from *inside* the LAN using anything other than its local IP address. That is, you can't run dynDNS on the powerbook and access it's URL from another computer on the same LAN.

Cheers
Scott

Camelot · Jun 11, 2003, 06:09 PM

Does your ISP block http and ftp connections to their customers?

Many, many ISPs due, partly as a response the Nimda, Code Red, et. al. - the Windows virii that infest that other OS, and partly because it's often a violation of their terms of service.

Zarafa · Jun 11, 2003, 06:12 PM

Originally posted by timmerk:
Hi,

I searched the forums and the net for this problem, but no one seems to have it.

I have an airport extreme basestation connected to my cable modem. I want to port map port 80, 21, 22 to my powerbook which is assigned 10.0.1.2 automatically. I try to add it in the settings, and it says it worked. But even from OUTSIDE networks, I still can't get through.

Any ideas?

Thanks,

karl

I don't have an Airport [Extreme or otherwise] Base Station, so I can't give you help specific to that device, but maybe some generic suggestions would be helpful.

If this is overly-obvious, bear with me.

First, make sure that you haven't blocked those ports on your Powerbook itself through the firewall built in to OS X or through some third-party equivalent.

Second, from somewhere on the "outside" networks, make sure you're attempting to connect to the outside IP address of the Airport Base Station, not to the 10.0.1.2 address of your Powerbook. From your post, I can't tell if that's what you're attempting.

Hope that helps.

timmerk · Jun 11, 2003, 06:41 PM

Hi everyone,

Thanks for your replies.

Yes, I have web sharing on and ftp on, and ssh on. I am trying to access it with the outside IP, and my ISP does not block these ports.

Thanks again,

Karl

midwinter · Jun 11, 2003, 06:48 PM

Originally posted by timmerk:
I am trying to access it with the outside IP

Two quickies:

1) Is someone ELSE who is outside your LAN trying to access it via that IP?

2) Can you access the machine from within the LAN by pointing a browser to the powerbook's assigned internal IP addy? Does the page load?

Cheers
Scott

timmerk · Jun 11, 2003, 06:56 PM

Originally posted by midwinter:
Two quickies:

1) Is someone ELSE who is outside your LAN trying to access it via that IP?

2) Can you access the machine from within the LAN by pointing a browser to the powerbook's assigned internal IP addy? Does the page load?

Cheers
Scott

Yes, Ive had many people try. And Yes, I can connect to it using http://localhost/ and teh default apache page loads.

Thanks,

karl

Art Vandelay · Jun 11, 2003, 07:03 PM

Originally posted by timmerk:
Yes, Ive had many people try. And Yes, I can connect to it using http://localhost/ and teh default apache page loads.

Thanks,

karl

Try it with your local IP. Using localhost doesn't prove that it's accessible from outside your box since the system doesn't route the request out your NIC. If you use the local IP, the system will route the request out of your NIC to the base station and back to your Mac.

This wil better help you determine where the problem lies. If the page doesn't load, the problem is with your Mac. If it does load, it's either with the base station or your ISP.

Art Vandelay · Jun 11, 2003, 07:06 PM

Also, try having your friends connect to it with your Mac hooked up directly to your cable modem.

aaanorton · Jun 11, 2003, 07:06 PM

Try turning off the firewall completely (for testing) and assigning an IP manually. Make sure it is outside of the DHCP pool. You'll also need to put your ABS' IP into the DNS server field.

timmerk · Jun 11, 2003, 08:49 PM

Hi,

I think your on to something - going to http://10.0.1.2 does not work, neither does ftp 10.0.1.2 (im doing this from my only mac, the one running the servers)

Any ideas now? My firewall is off. I recently copied my whole user folder over from an external drive The permissions got messed up so I set them all again. I don't think that's teh problem though.

Thanks again,

Karl

midwinter · Jun 11, 2003, 08:50 PM

Originally posted by timmerk:
Hi,

I think your on to something - going to http://10.0.1.2 does not work, neither does ftp 10.0.1.2 (im doing this from my only mac, the one running the servers)

Any ideas now? My firewall is off. I recently copied my whole user folder over from an external drive The permissions got messed up so I set them all again. I don't think that's teh problem though.

Thanks again,

Karl

First off, are you sure that's the machine's IP address?

timmerk · Jun 11, 2003, 08:54 PM

Yes, it says so in my network pane and a few other places.

midwinter · Jun 11, 2003, 09:00 PM

Originally posted by timmerk:
Yes, it says so in my network pane and a few other places.

See if you can ping that IP address from another Mac on the LAN.

Open up the terminal and type:

ping 10.0.1.2

(or whatever the IP address is)

Let us know if it pings ok or if it times out.

absmiths · Jun 12, 2003, 11:07 AM

If you are going to map ports in your router, the best thing to do is make the IP addresses of the machines static. If not, if your router changes your IP for some reason, then your port mappings will no longer work.

benb · Jun 12, 2003, 01:04 PM

Originally posted by timmerk:
Hi,

I think your on to something - going to http://10.0.1.2 does not work, neither does ftp 10.0.1.2 (im doing this from my only mac, the one running the servers)

Any ideas now? My firewall is off. I recently copied my whole user folder over from an external drive The permissions got messed up so I set them all again. I don't think that's teh problem though.

Thanks again,

Karl

What is the exact error message you get?

midwinter · Jun 12, 2003, 01:05 PM

Originally posted by timmerk:
Yes, it says so in my network pane and a few other places.

You wouldn't have Quicktime Streaming Server installed, by any chance?

timmerk · Jun 12, 2003, 04:07 PM

Hi,

I don't get a error msg for the permissions, I think I fixed them. Also, I dont have Quicktime streaming server installed.

On the local network, I can't access 10.0.1.2, but when I log into another account, I can, which means that something in my user folder, probably library folder is causing it not to share anything on 10.0.1.2, just localhost. Any ideas now?

Thanks!

Karl

midwinter · Jun 12, 2003, 04:12 PM

Do you have the powerbook's IP address manually assigned or via DHCP? It should be manually assigned.

timmerk · Jun 12, 2003, 04:46 PM

DHCP, but DHCP has worked for me in the past. How to I set it with the aiport basestation to be manual?

Thanks,

Karl

midwinter · Jun 12, 2003, 04:50 PM

Originally posted by timmerk:
DHCP, but DHCP has worked for me in the past. How to I set it with the aiport basestation to be manual?

Thanks,

Karl

you don't. You set it in the system preferences>network>TCP/IP tab

configure it "manually," give it the static IP you want, input your DNS info, and you should be good to go.

I suspect that this is your problem.

timmerk · Jun 12, 2003, 04:53 PM

What DNS info? My cable modems ISP or does the airport have it's own?

Also, I know this is not the problem as it works in other user's accounts, but not mine, and they all use DHCP

Thanks,

Karl

midwinter · Jun 12, 2003, 05:01 PM

Originally posted by timmerk:
What DNS info? My cable modems ISP or does the airport have it's own?

Also, I know this is not the problem as it works in other user's accounts, but not mine, and they all use DHCP

Thanks,

Karl

Under the network tab in TCP/IP you may have some DNS numbers. Something like

151.164.1.8
151.164.1.7

You may not. If you don't, don't worry about it.

The problem with using DHCP for this kind of thing is that the IP address is reassigned every now and then, and so while 10.0.1.2 might work fine one day, another day it might be 10.0.1.5 or something. If you're trying to make the machine accessible from outside your LAN, you'll need to have those ports in your airport mapped to a STATIC IP address. Otherwise, when the machine's IP changes, the port mapping you've done might as well not even be there.

At any rate. If you think that something is screwy in your user account, you might try trashing some preferences there to see if that clears anything up.

timmerk · Jun 12, 2003, 06:15 PM

Hi again,

I narrowed it down some more:

When I connected my mac directly to the cable modem, it works, the servers are available to everyone. This is true with and without DHCP and from all user accounts. So, the airport base station itself is preventing the port mapping from working. Any ideas now?

Thanks again!!

Karl

aaanorton · Jun 12, 2003, 06:28 PM

Manually assign an IP outside the DHCP range.

Put the ABS' IP in the DNS Servers field.

Apply now.

Recheck the port mapping settings.

Are you sure the IP you assigned is outside the DHCP range?

timmerk · Jun 12, 2003, 06:38 PM

Originally posted by aaanorton:
Manually assign an IP outside the DHCP range.

Put the ABS' IP in the DNS Servers field.

Apply now.

Recheck the port mapping settings.

Are you sure the IP you assigned is outside the DHCP range?

How do I know what the range is? In the airport base station utility, I have it on DHCP and NAT because it says port mapping only work when it's on. If I had is on just DHCP, then I could specify the range of IPs to share, but it needs the single IP share with DHCP and NAT.

midwinter · Jun 12, 2003, 07:04 PM

Can you tell us what settings you used in the port mapping on the airport?

aaanorton · Jun 12, 2003, 07:23 PM

Originally posted by timmerk:
How do I know what the range is? In the airport base station utility, I have it on DHCP and NAT because it says port mapping only work when it's on. If I had is on just DHCP, then I could specify the range of IPs to share, but it needs the single IP share with DHCP and NAT.

The Airport s/w will tell you what the range is. It will say something like:
DHCP range 192.0.1.101 - 192.0.1.150
or
Starting DHCP IP 192.0.1.101 for 50 IPs

These both say the same thing, see? Anyway, find that range and go to Sys Prefs > Network. Under Configure, select Manually. Enter an IP that is outside the range you just found. In the example above you could use 192.0.1.2 or .25 or .99, but NOT .101. Follow? Enter the subnet mask (probably 255.255.255.0). Then enter your router's IP, which is your ABS' IP (probably 192.0.1.1). Put this same IP in the DNS servers field. Hit Apply Now.

And ya, what port mapping settings do you have?

timmerk · Jun 12, 2003, 07:30 PM

I was using port 80 to port 80 for 10.0.1.2. But now that I can access 10.0.1.2 locally, it seems to be working.

This is how I fixed it: (dont know why or hwo it works)

First I turned off airport and connected my powerbook directly to the cable modem and got net up. I then disconnected cable to cable modem and tunred aiport on again. This allowed me to go to 10.0.1.2 locally and now everything works.

Thanks for all your help guys!

Karl