Topic: port 80 not reachable from external ip after ip change

[hiasl]

Hi,

We have been happy users of an SME Server (currently 6.0beta3) for years and use it as internal and external test server for our web applications, as mailserver and as fileserver.

About a month ago we changed internet provider and therfor received a new external IP address. I changed SME's external IP using the server console end everything was working fine again, except that web requests on port 80 on the external network interface are not answered anymore. All other connections from outside work (e.g. SSH, HTTPS, Mail)

from outside apache doesn't answer a

telnet our.host 80

but it does answer on

telnet our.host 443

In the internal network all requests (80 and 443) are answered properly.

Additionally I just found the following in my httpd error_log:

[Tue May 25 12:26:43 2004] [error] mod_ssl: SSL handshake failed (server www.berggasse.getdesigned.at:443, client 213.133.111.114) (OpenSSL library error)
[Tue May 25 12:26:43 2004] [error] OpenSSL: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol [Hint: speaking not SSL to HTTPS port!?]



213.133.111.114 is the external ip from which I try to connect to the external interface of our SME. I don't understand, why SSL is required externally on port 80.

Do you have any ideas, what could be going wrong?

Thanks,
Hiasl

[wyron]

The most probable cause is a faulty DNS-setup not reflecting the changes in ip-adress.
If your ISP are also your DNS-provider, they are at fault.
If they are not, you should contact your DNS-provider and inform them of the changes, or, if you are in control of your own DNS-setup, you should make the changes yourself.

[hiasl]

why should the dns settings be the problem, if ssh and especially https is working? I suspect that port 80 is somehow blocked.

Thanks,
matthias

[raem]

> happy users of an SME Server (currently 6.0beta3)

I suggest you upgrade to a final release either v6.0 or 6.0.1
Check the release notes as I vaguely recall an issue like this with the beta release.