RED to Green - none of the Web Pages, SSH, or SFTP seem to work

[dr_techno (Dave Mikeska)]

Well lets address one, then the rest is probably needs the same alteration.

Which web server are you using, Apache or Nginx?

[dean8 (Chuck)]

Apache, Why would it change because the OS 169 to 170 on a system that is not part of IPFire?

[dr_techno (Dave Mikeska)]

Because they started using name correlation in Apache.

For example.com the configuration file should be: example.com.conf in /etc/apache2/sites-available for each web site on that server.

and the entry for each website config file should look like:

<VirtualHost *:80>
ServerAdmin admin@example.com
ServerName example.com.
ServerAlias www.example.com.
DocumentRoot /var/www/example.com./public_html
ErrorLog ${APACHE_LOG_DIR}/error.log
CustomLog ${APACHE_LOG_DIR}/access.log combined
</VirtualHost>

[dean8 (Chuck)]

So, Looking a my setup for the pages, Noting looks wrong. Mail Server, SFTP sites, Web Pages, VPN, all fail by one OS update on IPFire. I did as I said about a lot of times. Put in a Firewall ROUTEROS works fine. Test 193 does not work. I am planning coming in on the weekend to work on it again. Yet nothing to help point to the problem. or a FIX.

[dr_techno (Dave Mikeska)]

Unless you are trying to use a different DNS on the server or you don’t have TCP port 80 and 443 rule forwarded, I really don’t see why its not working. But the IPFire’s DNS has to be the resolver since you don’t have a dns installed on the web servers themselves.

I don’t think routeros has a dns server.

[hvacguy (Shaun HVAC)]

I do not have a fixed IP so can be of little help.
But what do you fire wall rules look like?
source = any
NAT = firewall (ip you need)
destination = host

or
destination = IP

[tphz (iptom)]

A thought came to mind:
if the cause of the problems has to do with Reverse Path Filtering?

edit

I found my old posts on this topic but the author of the topic did not reply.

RED to Green - none of the Web Pages, SSH, or SFTP seem to work

I wonder if the problems are related to Reverse Path Filtering. I can’t quickly recall at the moment when it was introduced to IPFire. Best

RED to Green - none of the Web Pages, SSH, or SFTP seem to work

There are several topics on the IPFire forum about this. e.g. Below is a sample reading. edit Best

Regards

[casabenedetti (Carlo)]

I would like to share some additional details that may help clarify what has been discussed so far. To dive deeper, here are two previous posts that help explain the point of view I’m trying to express:

RED to Green - none of the Web Pages, SSH, or SFTP seem to work

Sorry to say this, but have you tried remotely typing in your public IP instead of DNS? Just to try it out. My guess is that typing the IP instead of the DNS should work, as I understand. Right? In my example: type 192.168.111.15 instead of name.domain.com and tell me if it works. If you have any reverse proxies try to set some exceptions in your network if possible. I just need this evidence to understand.

RED to Green - none of the Web Pages, SSH, or SFTP seem to work

Yes, I had said I would try to recreate your situation locally, but I couldn’t do it and waited for someone to respond. I think I understand your problem correctly: remotely (from 170) you can’t access your local servers using the FQDN associated with one of your public IPs. Everything works for you if you instead (remotely) use your public IP directly. I continue to be of the opinion that there is a problem from version 170 on down, but I have no way of ascertaining that. And likewise, it seems…

This is how I had understood the problem, and @dean8 confirmed that my interpretation was correct. Still, it seems odd to me that the servers are reachable via IP but not via FQDN. I’m wondering what could explain this inconsistency, since with 169 it works.

@dean8

Yes, Using the IP of the webpage works. URL name.domain.com did not.

[dean8 (Chuck)]

OK, it is done. 193 works but still have no idea why. 191 did not work, Clean build of a system. Hand keyed the first website. Tested it came up. The second came up. The first time in a long time the webpages are working. I did a restore from a backup. Everything works still. Turn off the wifi on my phone to double check everything still works. I have 6 computers just for this now. Setup a backup system and restored it from a backup and it works.

I started this weekend thinking still it would fail. No one had an answer after a year of trying to get this to work.

What was different. IPs change from the ISP, I named Hosts for the local servers. Alias no changes. I did not name Hosts for the Public IPs.

Still do not know why it started working. Just happy it did.