[twopeak]

Hello

I would like to give people access to my webserver. I have set up the server on port 80 and 1080 (because my isp blocks all traffic on ports lower than 1024)
On my local network, it works great, I can access the site through the two ports from my comp and other comps in the network, using the ip of the computer or using the ip of the router.

I've been trying to make the router allow connections, but it's not working. I use Airport Extreme

I have given the server-computer a fixed adress
I have put port forwarding from port 1080 to port 80
and I tried all kinds of crazy stuff.
The server just won't answer.

it's the same problem as this unsolved post from a year ago
http://media.fastclick.net/w/get.med...c&t=s&pageid=1
I've found this information
http://docs.info.apple.com/article.html?artnum=150754
but it doesn't make sense, I have to turn off dhcp from my server, but I have a dynamic ip, so I can't recieve an ip from my server,
And when I do turn off dhcp for the router, and want to share the ip's manually, it will tell me it's a wrong ip!

any ideas how to make this work?

[stevesnj]

What do you want people to see on your server? A website or get/share files?

[aaanorton]

When port forwarding on the AXP, there are 3 fields to fill in: Public Port, Private Address and Private Port. How have you configured these 3 fields?
You do not need to disable DHCP to do this. Just make sure that the manual IP address you assign to your server is outside of the DHCP range. Usually AXPs use 10.0.1.2 through 10.0.1.200 as the DHCP pool. In this case, 10.0.1.201 would be a good IP address for your server. Manually assigning the IP of your server is done in System Prefs > Network, not in the Airport Utility.
You could also try adding the correct port to the URL when connecting. Try connecting to x.x.x.x:1080 (where x.x.x.x = your public IP), after you have forwarded 1080 to your server.

[twopeak]

sorry for posting in the wrong forum, I just followed the previous without checking.
I would like people to access the built-in apache webserver.

I followed all the info in this tread:
http://forums.macnn.com/showthread.p...hreadid=161328
this is:

- give the server computer the 10.0.1.201 ip (all other computers get their ip by dhcp)
- make the port forwarding to this computer
- turn off the firewall (you never know)

I tested by:
- accessing the server from the server computer (127.0.0.1:1080) and it worked
- access the server from another computer on the network (10.0.1.201:1080) and it worked
- access the server from outside the network (my ip adress and port 1080) and it didn't wrok
my isp blocks all ports under 1024

I think somewhere I must do something stupid...
However I found
this document on Apple Support saying I need to turn off nat to run a server on my network (local?)

[aaanorton]

Originally posted by aaanorton:
When port forwarding on the AXP, there are 3 fields to fill in: Public Port, Private Address and Private Port. How have you configured these 3 fields?

Please answer this question. ^^^^^^

[twopeak]

Public Port: 1080
Private IP Adress: 10.0.1.201
Private Port: 1080

Before I had tried to get the traffic to private port 80 but that also didn't work.

10.0.1.201:1080 works
10.0.1.201:80 _ also works
the apache server accepts both ports.

[leira]

this will do what you want easily. and give you a nice easy name to remember too.


http://www.dyndns.org/services/mywebhop/

[twopeak]

the basic custom dns services will not help me, as I can not connect to my server; so adding a "hostname" to it will not solve anything

the webhop option does exactly the same....
The port redirect wizard intrigued me, but I think I shouldn't be paying for something that should be easy to install.

People on windows computer just have to check one checkbox and they have a webserver online so it ought to be easyer with MacOsX!

[John Strung]

Originally posted by twopeak:

- access the server from outside the network (my ip adress and port 1080) and it didn't wrok
[/B]

Did you actually try to access from OUTSIDE your LAN? You won't be able to access from inside your LAN using your internet IP.

Also, are you sure you were using the right IP? You can find our what your WAN IP address is by going to http://www.whatismyip.com from a browser on your LAN.

[twopeak]

yes, I really tried from outside my network, a friend in Spain while I live in BE accessed
I got my ip out of the airport extreme configuration; and I double checked with the site you gave and it's the same...

[John Strung]

Exactly what happened when your friend tried to connect? Does your IP change from time to time? Do you feel comfortable posting it here?

[Partisan01]

Originally posted by John Strung:
Did you actually try to access from OUTSIDE your LAN? You won't be able to access from inside your LAN using your internet IP.

Also, are you sure you were using the right IP? You can find our what your WAN IP address is by going to http://www.whatismyip.com from a browser on your LAN.

It sounds like you set up port forwarding incorrectly. Set up your router so that from the OUTSIDE port 1080 is open, and the inside port 1080 on your server corresponds to it. I have a similar setup here, my ISP blocks port 80, so I have a webserver set up at port 81 and ssh running. I just set up my router to allow connections to those ports, and direct them to my server.

If you want people on the internet to connect to your computer on port 1080 and the router to direct that connection to port 80 on your local machine you could setup a firewall rule to allow that. You mentioned you use Airport for your router, I don't know if that can accept rules. If you wish to setup a rule in OpenBSD I can help you. Best of luck

Nate

[aaanorton]

Do you have the firewall enabled on the server? If so, turn it off.

[GCW]

Are you sure that your ISP isn't blocking port 1080 also?

Contrary to the post above, you should be able to access your server locally, via your public IP (it works for me anyway). So you can let your friend in Spain off the hook.

When you pop open a terminal and do a "curl <my_ip>:1080" what do you get, a "Connect failed"?

You could try directly connecting your server to your modem temporarily, and allow it to pick up its IP via dhcp. If you can access it then, your problem is your router.

[twopeak]

Thanks all for the answers

John Strung:
when ppl from outside of my network try to connect they get the "server not found" message" I will send you my ip in a private message.

The ip does change about once a month (or even more time) so it's not fixed but not that variable too

Partisan01
It's my best guess too that I do some stupidity with the port forwarding, I assume there are people with servers on macosx on my isp.
But I've been looking for errors, resetting the router, remaking the port forwarding, and it doesn't help...
Is there some way to check if my ISP blocks the port I want to use? I went looking on a support site for the isp, and there it said they block all ports untill port 1024.

aaanorton
I turn the firewall off when I test the server.
I had the port 1080 added as custom rule in the firewall, but just to exclude this, I turned the firewall off.
It shouldn't be a problem, or it should also block connections from within my own network (no?)

GCW
When I do curl <my_ip>:1080
I see the page, I first tried with the local ip, then with the external ip. Both work.
I've been told several times that even if using my external ip will work for me, it might not work for others (and this is what I'm experiencing now)

I will try the idea to connect the server-computer to my modem tonight. It seems like a good way to filter out where the problem is (isp or router or me)


Anyway, thank you everybody for your concern!!!

[aaanorton]

Ya, removing the base from the set-up is a good idea. Also make sure all your ethernet cables are OK.

[John Strung]

I get a timeout when I try to connect to the IP you sent me. I can ping it however. I am afraid I am just about out of ideas.

You could try going to http://www.grc.com and using their ShieldsUP link to do a port scan on your computer to see if port 80 is open.

[John Strung]

I tried a port scan on your IP and found both ports 80 and 1080 blocked.

[twopeak]

ok, sorry to disturb everyone, but I managed to find the error:

I put the modem on my computer, so I discovered it didn't work (the router was probably not the error)
So I contacted the helpdesk, and at first they didn't want to help me. So I contacted an old friend that used to work at the helpdesk, and he told me they blocked all ports untill 1024 but also some extra ports higher.

So I had the server on port 9876; and it works!!!
Now I just have to find a port easy to remember and put the router back on, and test it again, and I know it works for sure!!!

THANK YOU EVERYONE!

[edit]I'm in the setup like I want it now (with router and firewall, and it WORKS![/edit]