Koozali.org: home of the SME Server

[Solved] Cannot serve SME website with new Uverse ISP

Offline LANMonkey

  • *****
  • 350
  • +0/-0
    • Database Collection of Transcripts for the ICTY
Re: Cannot serve SME website with new Uverse ISP
« Reply #15 on: August 08, 2016, 12:28:24 AM »
Can you access your SME using its local IP on the LAN and serve the webpages using a browser ?

If yes then the problem is not SME.

port forwarding only work from the outside or wan side of a router. Again you can not hit your sme with externalIP:whateverport from inside your lan... This is simply a limitation of NAT, it is impossible to do , see this thread https://supportforums.cisco.com/discussion/11262681/nat-port-forward-doesnt-work-inside-lan as an example. As long as you do not understand this, you will not be able to go further.

If you want to test your connection port forwarding you will have to do this from outside with your phone connection ( not connected with wifi on your lan of course) or from elsewhere. All test you do from inside will fail and end up in a loop.

I am no longer concerned about port forwarding from 80 from some other port, that is clearly not necessary.  My ISP is not blocking port 80.  Again, I have demonstrated that if I configure my gateway to open port 80 and direct it to my workstation on the LAN and test it with ShieldsUp, it is open.  If I configure my gateway to open port 80 and direct it to SME server on the LAN, then ShieldsUp shows it to be in stealth mode -- not open.  My ISP is not blocking port 80.

For years now, I have accessed my website hosted on my LAN from the internet using both the URL and my DSL IP connection address.   When I switched to another ISP and hooked up the same SME server to the LAN, opened up the HTTP port 80 and directed it to that SME server, I can no longer do this.  This is not right.  Something has changed.  If I ping my IP connection address, I get a prompt reply. If I test the port forwarding to SME it is not open.  If I test port forwarding to some other machine on the LAN it is open.

This will be the same with your domain name unless:
- your sme has the domain defined as local and act as dhcp for all your computer
- your router act as dhcp server for lan and is evolved to handle split dns and point the domain to your sme ( not probable)
- you defined your local sme ip as associated to your domain on all hosts files of all your computer

I can't understand what you are saying here, but here is some related information.  My SME server is using a static address.  I thought I would try changing that so it would use an address served up by the AT&T gateway.  I tried going into admin from command line and I don't see the option to use an address from another DHCP.  Does such an option exist?  My gateway seems to suffer some problems from not being able to use the static address in configuring the firewall.  I can use it once, but can not edit it or add to it having done so the first time.  It only identifies the static address with a device name that it assigns to it.  I can't edit firewall settings with the static address or remove it, I can only clear all the settings with a reset and start over.

Also, in my SME Server Manager, Domains (Just one domain) is set with the URL I use to access it from the internet and the DNS is set to "interenet domain server", not locally resolved.  This is the way I understand that different domains are directed to different iBays.  I tried setting it to "locally resolved" to see if that would fix it, it didn't.

But again from inside you wiill be able to access to you sme with port 80 only for webserver, unless you also define in the sever manager a port forward 8080 to 80 on localhost, which is for the moment as useless as creating on your modem router  the forward of 8080  to 80 fo the lan ip of your sme.

The only step you should try from now are:
- as told by Janet, contact your ISP to have the level 2 support so they will be able to answer technical question rather than having somebody reading a script.
- only do a port forward on your modem router from 80 to 80 direct to the LAN IP of your SME, Then go outside of your lan, and try to connect from outside to your internet ip on port 80 with sme on and its ip being the same as given in the router for port forwarding.

None of that is necessary, my ISP is not blocking HTTP port 80.



Offline janet

  • *****
  • 4,812
  • +0/-0
Re: Cannot serve SME website with new Uverse ISP
« Reply #16 on: August 08, 2016, 07:59:05 AM »
Lanmonkey

You need to tell us real IPs, real URLs, actual config settings for your sme server, actual settings for your modem/router/firewall.

Also output of
config show masq

Edit
Also show output of
config show httpd-e-smith
config show wan
config show DomainName
config show ExternalIP
config show ExternalInterface
config show InternalInterface
config show LocalIP
config show SystemMode
« Last Edit: August 08, 2016, 12:21:44 PM by janet »
Please search before asking, an answer may already exist.
The Search & other links to useful information are at top of Forum.

Offline LANMonkey

  • *****
  • 350
  • +0/-0
    • Database Collection of Transcripts for the ICTY
Re: Cannot serve SME website with new Uverse ISP
« Reply #17 on: August 08, 2016, 01:13:45 PM »
Lanmonkey

You need to tell us real IPs, real URLs, actual config settings for your sme server, actual settings for your modem/router/firewall.

I need instructions on how to do that, unless that is what the below instructions are ...

Also output of
config show masq

Edit
Also show output of
config show httpd-e-smith
config show wan
config show DomainName
config show ExternalIP
config show ExternalInterface
config show InternalInterface
config show LocalIP
config show SystemMode

config show masq

Code: [Select]
masq=service
    DenylogTarget=drop
    Logging=most
    Stealth=no
    Trace=disabled
    pptp=yes
    status=enabled

config show httpd-e-smith

Code: [Select]
httpd-e-smith=service
    SSLv2=enabled
    SSLv3=disabled
    TCPPort=80
    access=public
    status=enabled

config show wan

Code: [Select]
wan=service
    status=disabled

config show DomainName
Code: [Select]
DomainName=ictytranscripts.org
config show ExternalIP

Code: [Select]
(No response, returns command prompt.)
config show ExternalInterface

Code: [Select]
ExternalInterface=interface
    Configuration=disabled
    Driver=e1000
    Gateway=
    IPAddress=76.191.171.74
    Name=none
    Netmask=255.255.255.0

IPAddress=76.191.171.74  This must be an error.  This is very much like the IP connection address of my old ISP.  My notes show 76.191.171.84 as being the old address at my DNS that my URL pointed to.  My connection IP address is now completely different.

config show InternalInterface

Code: [Select]
InternalInterface=interface
    Broadcast=192.168.1.255
    Configuration=static
    Driver=e1000
    IPAddress=192.168.1.11
    NICBondingOptions=miimon=200 mode=active-backup
    Name=eth0
    Netmask=255.255.255.0
    Network=192.168.1.0

config show LocalIP

Code: [Select]
LocalIP=192.168.1.11
config show SystemMode

Code: [Select]
SystemMode=serveronly
« Last Edit: August 08, 2016, 01:16:13 PM by LANMonkey »

Offline LANMonkey

  • *****
  • 350
  • +0/-0
    • Database Collection of Transcripts for the ICTY
Re: Cannot serve SME website with new Uverse ISP
« Reply #18 on: August 08, 2016, 06:12:49 PM »
....

...  My SME server is using a static address.  I thought I would try changing that so it would use an address served up by the AT&T gateway.  I tried going into admin from command line and I don't see the option to use an address from another DHCP.  Does such an option exist?  My gateway seems to suffer some problems from not being able to use the static address in configuring the firewall.  I can use it once, but can not edit it or add to it having done so the first time.  It only identifies the static address with a device name that it assigns to it.  I can't edit firewall settings with the static address or remove it, I can only clear all the settings with a reset and start over.

....

An update on this observation.  I tried changing the IP address on my LAN workstation to static and opened HTTP port 80 to this machine and ShieldsUp shows it open.  So the static address of SME server is not the problem.

Offline Jean-Philippe Pialasse

  • *
  • 2,912
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: Cannot serve SME website with new Uverse ISP
« Reply #19 on: August 08, 2016, 06:47:43 PM »
Lanmonkey

You need to tell us real IPs, real URLs, actual config settings for your sme server, actual settings for your modem/router/firewall.


simple, what is the IP you use to connect to your router from your LAN. This will give us the IP of the gatway.

when you are connected to the interface, go to the setting where you can see informaiton on DHCP for the LAN
we need the netmask and /or the IP range for DHCP.

you real URL, well if you do not know it we can not help you on how to find it :D

eventually you current external IP for us to check your domain resolve to it and not to another IP. This should be shown somewhere on your router on an external status or something like that, alternatively you can seak it from an external website by searching on your favorite search engine "what is my ip".



this would be good start.

also add the output of this command from your SME:
Code: [Select]
config show GatewayIP

Offline LANMonkey

  • *****
  • 350
  • +0/-0
    • Database Collection of Transcripts for the ICTY
Re: Cannot serve SME website with new Uverse ISP
« Reply #20 on: August 08, 2016, 07:16:13 PM »
simple, what is the IP you use to connect to your router from your LAN. This will give us the IP of the gateway.

This is 192.168.1.254

when you are connected to the interface, go to the setting where you can see informaiton on DHCP for the LAN
we need the netmask and /or the IP range for DHCP.

From my router/gateway

Code: [Select]
Router/Gateway Address 192.168.1.254
Subnet Mask 255.255.255.0
Private Network DHCP Info
Range 192.168.1.64 – 192.168.1.253
Allocated 1
Remaining 189
Timeout 1440 minutes

you real URL, well if you do not know it we can not help you on how to find it :D

What is a "real" URL?  Of course my website has a URL, is that what you mean?  That would be www.ictytranscripts.org.

eventually you current external IP for us to check your domain resolve to it and not to another IP. This should be shown somewhere on your router on an external status or something like that, alternatively you can seak it from an external website by searching on your favorite search engine "what is my ip".

this would be good start.

Code: [Select]
Current Internet Connection
Type Value
IP Address 172.5.251.147
Subnet Mask 255.255.252.0
Default Gateway 172.5.248.1
Primary DNS 68.94.156.8
Secondary DNS 68.94.157.8


also add the output of this command from your SME:
config show GatewayIP

Code: [Select]
GatewayIP=192.168.1.1

Offline LANMonkey

  • *****
  • 350
  • +0/-0
    • Database Collection of Transcripts for the ICTY
Re: Cannot serve SME website with new Uverse ISP
« Reply #21 on: August 09, 2016, 12:10:08 AM »
Still tinkering ...

I went into admin and tested internet access and the system failed.  I am also trying to update the system and I am getting "Couldn't resolve host ... " errors for the mirrors.  I have also tried pinging my IP connection address and Yahoo and get "Destination Host Unreachable".

So my SME server has no internet access.  However I can ping my LAN workstation machine from the SME server command line.  And obviously, I can get into the server manager and the rest, so LAN communication is possible.

Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
Re: Cannot serve SME website with new Uverse ISP
« Reply #22 on: August 09, 2016, 12:36:38 AM »
Code: [Select]
GatewayIP=192.168.1.1

So that's what's wrong. It should be 192.168.1.254.

Offline LANMonkey

  • *****
  • 350
  • +0/-0
    • Database Collection of Transcripts for the ICTY
Re: Cannot serve SME website with new Uverse ISP
« Reply #23 on: August 09, 2016, 01:29:21 AM »
So that's what's wrong. It should be 192.168.1.254.

Odd, but in all the years I have used this server in different configurations, server only and gateway, and with different modem routers, I have never had cause to change this address.

OK, some dramatic improvements.  ShieldsUp shows HTTP port 80 is now open and my SME server has internet access.

But, I still can't reach my website.  It is now 4:30 PM where I am at and I will tackle this again tomorrow.

Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
Re: Cannot serve SME website with new Uverse ISP
« Reply #24 on: August 09, 2016, 01:59:50 AM »
Odd, but in all the years I have used this server in different configurations, server only and gateway, and with different modem routers, I have never had cause to change this address.

I think it would be a good idea for you to find a good tutorial on the basics of IP networking. If you don't have an understanding of what the default gateway address means then you will have a lot of trouble diagnosing connectivity issues.

If you have never changed the GatewayIP address, it is because your router has always been configured to use 192.168.1.1 as its LAN address.

Offline LANMonkey

  • *****
  • 350
  • +0/-0
    • Database Collection of Transcripts for the ICTY
Re: Cannot serve SME website with new Uverse ISP
« Reply #25 on: August 09, 2016, 07:40:17 AM »
Another clue ...

In my LAN workstation, I am running Windows 10.  I installed Microsoft's HTTP server, IIS, and was able to bring up the basic webpage using http://HTTP://localhost and http://HTTP://192.168.X.X with the X's representing the workstation address numbers.  The firewall on the workstation is open to HTTP.

But despite pointing the gateway/modem's port forwarder to the workstation machine, I was not able to bring up the basic webpage from the internet.

So based on this, I have to go back and blame the gateway/modem.  I don't think it is SME at all.

Is there perhaps some setting in my gateway/modem that I am missing?  Otherwise I'm back to AT&T.

Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
Re: Cannot serve SME website with new Uverse ISP
« Reply #26 on: August 09, 2016, 03:58:24 PM »

IPAddress=76.191.171.74  This must be an error.

You can ignore that. Your system is in serveronly mode, and the ExternalInterface record has Configuration->disabled.

Offline LANMonkey

  • *****
  • 350
  • +0/-0
    • Database Collection of Transcripts for the ICTY
Re: Cannot serve SME website with new Uverse ISP
« Reply #27 on: August 09, 2016, 11:27:57 PM »
I have finally made some progress.

There is three settings in my gateway/modem for the firewall.  You can choose pinholes for individual applications, you can have complete protections, or you can open up everything in what they call the DMZPlus mode. 

I tried this with my workstation with the IIS server on it and found that it now can be reached from the internet.  Success!  The problem is that it requires the computer to use the DHCP to get an IP address and SME does not appear to have this option.  It's very strange, the DHCP assigns my IP connection address to the ethernet connection.

If anyone has a fix for this, I'd appreciate it, but this is another subject.  I'll do some hunting on the subject and start a new thread about it if I don't find a solution.

Offline michelandre

  • *
  • 261
  • +0/-0
Re: Cannot serve SME website with new Uverse ISP
« Reply #28 on: August 10, 2016, 04:54:14 AM »
Hi LANMonkey

- At the server console, login with admin.
- Choose #2 Configure this server.
- At the 9th screen, choose #2 Use DHCP  (send ethernet  address as client identifier).
- Leave the other screen as is.
- The server will restart and all will be OK.
- Login as root and execute the command: ifconfig

You should see you addresses, local and external.

https://wiki.contribs.org/SME_Server:Documentation:Administration_Manual
https://wiki.contribs.org/SME_Server:Documentation:Administration_Manual:Chapter5#Configuring_Your_External_Ethernet_Adapter

Hope for the best,

Michel-André

Offline michelandre

  • *
  • 261
  • +0/-0
Re: Cannot serve SME website with new Uverse ISP
« Reply #29 on: August 10, 2016, 04:56:06 AM »
Hi LANMonkey,

I forgot, shut down your station as it might use your IP already.

Michel-André