Re: [Hampshire] Apache Config issue

Top Page

Reply to this message
Author: Jack Knight (OSM EU)
Date:  
To: stephen.davies, Hampshire LUG Discussion List
CC: 
Subject: Re: [Hampshire] Apache Config issue
Stephen Davies wrote:
> I have a little problem with a webserver on my Mac Mini (ppc H/w
> running FC7)
> I'm trying to setup 'gallery' on the Mini.
>
> I have set it the httpd service and configured gallery and if I access
> it from inside my firewall all is ok.
>
> It is ok if I use the external address ( of my DSL router)
> However if I try to access it from an external web page then it does
> not respond.


Can you just clarify these last 2 lines please?

Are you saying that if you enter a numeric IP address (of the router's
external interface) the router forwards the request to the web server
appropriately, but if you use an FQDN type address which resolves (or
should) to that of the router's external interface it fails? If so it
sounds more like a DNS resolution issue.

jfk

> Selinux is disabled as is iptables for this test.
>
> Here are two ethereal traces. The first is using my DSL modems
> external IP Address. The second is access from an external system.
> The Netgear DSL Modem is 192.168.1.1. The Mac Mini is at 192.168.1.3
>
> ------------
> 1190623001.342198  192.168.1.1 -> 192.168.1.3  TCP rfio > http [SYN] 
> Seq=0 Len=0 MSS=1260
> 1190623001.342389 AppleCom_0a:f2:78 -> Broadcast    ARP Who has 
> 192.168.1.1?  Tell 192.168.1.3
> 1190623001.342658 Netgear_0c:81:a4 -> AppleCom_0a:f2:78 ARP 
> 192.168.1.1 is at 00:18:4d:0c:81:a4
> 1190623001.342673  192.168.1.3 -> 192.168.1.1  TCP http > rfio [SYN, 
> ACK] Seq=0 Ack=1 Win=5840 Len=0 MSS=1460
> 1190623001.347788  192.168.1.1 -> 192.168.1.3  TCP rfio > http [ACK] 
> Seq=1 Ack=1 Win=17640 Len=0
> 1190623001.348383  192.168.1.1 -> 192.168.1.3  HTTP GET 
> /gallery2/main.php?g2_itemId=34 HTTP/1.1
> 1190623001.348442  192.168.1.3 -> 192.168.1.1  TCP http > rfio [ACK] 
> Seq=1 Ack=537 Win=6432 Len=0
> 1190623006.085943  192.168.1.3 -> 192.168.1.1  HTTP HTTP/1.1 200 OK 
> (text/html)
> 1190623006.085990  192.168.1.3 -> 192.168.1.1  HTTP Continuation or 
> non-HTTP traffic
> 1190623006.092751  192.168.1.1 -> 192.168.1.3  TCP rfio > http [ACK] 
> Seq=537 Ack=2521 Win=17640 Len=0
> 1190623006.092846  192.168.1.3 -> 192.168.1.1  HTTP Continuation or 
> non-HTTP traffic
> 1190623006.097976  192.168.1.1 -> 192.168.1.3  TCP rfio > http [FIN, 
> ACK] Seq=537 Ack=3601 Win=16560 Len=0
> 1190623006.137456  192.168.1.3 -> 192.168.1.1  TCP http > rfio [ACK] 
> Seq=3601 Ack=538 Win=6432 Len=0
> 1190623006.140921  192.168.1.3 -> 192.168.1.1  TCP http > rfio [FIN, 
> ACK] Seq=3601 Ack=538 Win=6432 Len=0
> 1190623006.144176  192.168.1.1 -> 192.168.1.3  TCP rfio > http [ACK] 
> Seq=538 Ack=3602 Win=16560 Len=0
> 1190623006.327535 Netgear_0c:81:a4 -> AppleCom_0a:f2:78 ARP Who has 
> 192.168.1.3?  Tell 192.168.1.1
> 1190623006.327563 AppleCom_0a:f2:78 -> Netgear_0c:81:a4 ARP 
> 192.168.1.3 is at 00:14:51:0a:f2:78
> --------------
> It appears that the DSL Modem is seeing the address of itself and 
> looping it all back correctly.
> ------------------
> Capturing on eth0
> 1190623231.220500 ***.36.43.240 -> 192.168.1.3  TCP isoipsigport-2 > 
> http [SYN] Seq=0 Len=0 MSS=1418
> 1190623234.176403 ***.36.43.240 -> 192.168.1.3  TCP isoipsigport-2 > 
> http [SYN] Seq=0 Len=0 MSS=1418
> 1190623236.203789 Netgear_0c:81:a4 -> AppleCom_0a:f2:78 ARP Who has 
> 192.168.1.3?  Tell 192.168.1.1
> 1190623236.203819 AppleCom_0a:f2:78 -> Netgear_0c:81:a4 ARP 
> 192.168.1.3 is at 00:14:51:0a:f2:78
> 1190623240.194249 ***.36.43.240 -> 192.168.1.3  TCP isoipsigport-2 > 
> http [SYN] Seq=0 Len=0 MSS=1418

>
> -------------
> I have changed the external IP Address as it is a test system on a
> customers site.
> So, the requests get to the system but NOTHING appears in the logs in
> /var/log/httpd
> As can be seen from the first example, the request gets to the HTTPD
> server. IN the second, TCP seems to be blocking it.
> The httpd.conf is OOTB. ie no changes from what was setup with the
> original install. I know that this is going to have to change at a
> later date but I want to get something basic working if possible first.
> Any suggestions most welcome.
>
> Stephen D
>
>