Port forwarding to set up web server?

Syth

I'm having a bit of trouble setting up a web server. I've got apache installed and all. I can access it fine from http://localhost/. No problems there. But if I type in my IP into the address bar I get "connection refused". I'm on Esat broadband (broadband modem = ZyXEL Prestige 623R-T1), and I've set the broadband modem's web interface to be accessable off port 8080, so I can access it from localhost:8080, and if I type in my IP (available from whatsmyip.{com,net,org}) followed by :8080 I can access it fine, so I know my IP is correct. Must be a port forwarding you say. and I thought of this and this is the relevant line on the NAT page:
Start Port No: 80, End Port No: 80, Ip Address: 192.168.1.10. Looks right, doesn't it? And my firewall is off now (AFAIK). So where is the problem?

aidan_walsh

Have you set up a pinhole\forward for 8080? Also, perhaps you'll need to specify incoming traffic to both\either 80 and\or 8080.

Blub2k4

Have a look at what is happening with tcpdump, or the easier to use gui on ethereal at http://www.ethereal.com/

You can see where the packets are going if all else fails.

Syth

Blub2k4 wrote:

Have a look at what is happening with tcpdump

Well I ran tcp dump and access the IP. This is what I got:

15:14:14.481089 IP nayru.localhost.33240 > ###-###-###-###.bas###.dsl.esat.net.http: S 4007860050:4007860050(0) win 5840 <mss 1460,sackOK,timestamp 739445 0,nop,wscale 0>
15:14:14.482170 IP ###-###-###-###.bas###.dsl.esat.net.http > nayru.localhost.33240: R 0:0(0) ack 4007860051 win 0

(I've hidden some of the number to prevent you leet haxxors from access my PC).

That's basically all that's happening. I see that on the second line there is the 'R' flag. Doesn't that mean 'Reset'? Does that mean the connection is being canceled? Is that the cause of the problem?

doodle_sketch wrote:

Have you set up a pinhole\forward for 8080?

Eh? Why should I do this? I am able to access the modem's web configurator page externally through port 8080, that's the way I want it. The problem is with port 80.

When here is the tcpdump of when I access the web interface of my broadband modem through port 8080:

15:23:16.408952 IP ###-###-###-###.bas###.dsl.esat.net.8080 > nayru.localhost.33243: S 4024147968:402414
7968(0) ack 259749407 win 1024 <mss 512>
15:23:16.408983 IP nayru.localhost.33243 > ###-###-###-###.bas###.dsl.esat.net.8080: . ack 1 win 5840
15:23:16.409040 IP nayru.localhost.33243 > ###-###-###-###.bas###.dsl.esat.net.8080: P 1:399(398) ack 1
win 5840
15:23:16.412347 IP ###-###-###-###.bas###.dsl.esat.net.8080 > nayru.localhost.33243: . ack 399 win 626
15:23:16.413155 IP ###-###-###-###.bas###.dsl.esat.net.8080 > nayru.localhost.33243: . ack 399 win 1024
15:23:16.415222 IP ###-###-###-###.bas###.dsl.esat.net.8080 > nayru.localhost.33243: P 1:190(189) ack 39
9 win 1024
15:23:16.415249 IP nayru.localhost.33243 > ###-###-###-###.bas###.dsl.esat.net.8080: . ack 190 win 6656
15:23:16.417123 IP ###-###-###-###.bas###.dsl.esat.net.8080 > nayru.localhost.33243: P 190:333(143) ack
399 win 1024
15:23:16.417151 IP nayru.localhost.33243 > ###-###-###-###.bas###.dsl.esat.net.8080: . ack 333 win 6656
15:23:16.417270 IP nayru.localhost.33243 > ###-###-###-###.bas###.dsl.esat.net.8080: F 399:399(0) ack 33  3 win 6656
15:23:16.418719 IP ###-###-###-###.bas###.dsl.esat.net.8080 > nayru.localhost.33243: . ack 400 win 1024
15:23:16.419984 IP ###-###-###-###.bas###.dsl.esat.net.8080 > nayru.localhost.33243: F 333:333(0) ack 40  0 win 1024
15:23:16.419997 IP nayru.localhost.33243 > ###-###-###-###.bas###.dsl.esat.net.8080: . ack 334 win 6656
15:23:16.439605 IP modem.localhost.domain > nayru.localhost.32802:  10777 1/2/2 (171)
15:23:34.885459 IP nayru.localhost.33244 > ###-###-###-###.bas###.dsl.esat.net.8080: S 285801295:2858012  95(0) win 5840 <mss 1460,sackOK,timestamp 795485 0,nop,wscale 0>
15:23:34.886671 IP ###-###-###-###.bas###.dsl.esat.net.8080 > nayru.localhost.33244: S 4099801088:409980  1088(0) ack 285801296 win 1024 <mss 512>
15:23:34.886702 IP nayru.localhost.33244 > ###-###-###-###.bas###.dsl.esat.net.8080: . ack 1 win 5840
15:23:34.886751 IP nayru.localhost.33244 > ###-###-###-###.bas###.dsl.esat.net.8080: P 1:330(329) ack 1   win 5840
15:23:34.888360 IP ###-###-###-###.bas###.dsl.esat.net.8080 > nayru.localhost.33244: . ack 330 win 695
15:23:34.889202 IP ###-###-###-###.bas###.dsl.esat.net.8080 > nayru.localhost.33244: . ack 330 win 1024
15:23:34.891351 IP ###-###-###-###.bas###.dsl.esat.net.8080 > nayru.localhost.33244: P 1:137(136) ack 33  0 win 1024
15:23:34.891377 IP nayru.localhost.33244 > ###-###-###-###.bas###.dsl.esat.net.8080: . ack 137 win 5840
15:23:34.893354 IP ###-###-###-###.bas###.dsl.esat.net.8080 > nayru.localhost.33244: P 137:358(221) ack   330 win 1024
15:23:34.893383 IP nayru.localhost.33244 > ###-###-###-###.bas###.dsl.esat.net.8080: . ack 358 win 6656
15:23:34.893499 IP nayru.localhost.33244 > ###-###-###-###.bas###.dsl.esat.net.8080: F 330:330(0) ack 35  8 win 6656
15:23:34.894941 IP ###-###-###-###.bas###.dsl.esat.net.8080 > nayru.localhost.33244: . ack 331 win 1024
15:23:34.896088 IP ###-###-###-###.bas###.dsl.esat.net.8080 > nayru.localhost.33244: F 358:358(0) ack 33  1 win 1024
15:23:34.896109 IP nayru.localhost.33244 > ###-###-###-###.bas###.dsl.esat.net.8080: . ack 359 win 6656

That looks like everything is working fine there.

Could Esat/IOL have set it up so that one can't ruin web servers using their broadband service? I'm on the standard (ie cheapest) package. I'm sure it's in their terms of service that you don't run a web server.