You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@openmeetings.apache.org by Graham Mcleish <gr...@mcleish.me> on 2012/08/02 14:33:45 UTC
Runs internally on VPS but not internet
I have loaded Openmeetings 2.0 Ubuntu 12.04.iso onto my VPS. It runs OK
inside the VPS if I start it with its own Firefox browser using
127.0.0.1:5080/openmeetings/install but I cannot get it to run when I
attempt through my browser using the 'VPS's IP
address':5080/openmeetings/install. Can anyone tell me what I have to do
to get it to run through the internet from my browser? Many thanks.
Re: Runs internally on VPS but not internet
Posted by Jakub Skory <ku...@ukw.edu.pl>.
On Fri, Aug 03, 2012 at 10:19:07AM +0200, BBS Technik wrote:
> > # allow to connect FROM your ubuntu
> Port 25 (SMTP) should also be allowed (confirmation mail, ... ) .
No, it should not. Sending mail via smtp is connection initiated by
Ubuntu. It does not come from out side, so it is handle by following
rules:
- SYN initiating connection to SMTP server:
> > iptables -A INPUT -p tcp --syn -m conntrack --ctstate NEW -j TCP
- any packet belong to connection initiated by SYN:
> > iptables -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
--
Jakub Skory, <kuba(at)ukw(dot)edu(dot)pl>
System Operator
IT Center:
_______________________________________________________________________
tel: +48 52 3257 649, +48 52 3257 647
fax: +48 52 3257 646, +48 52 3257 647
working hours: 08a.m. - 04p.m.
mail: di(at)ukw(dot)edu(dot)pl
web: http://di.ukw.edu.pl/
postal address: M. Kopernika 1 (room 8/9), 85-074, Bydgoszcz.
_______________________________________________________________________
Kazimierz Wielki University,
J. K. Chodkiewicza 30,
85-064, Bydgoszcz, Poland.
_______________________________________________________________________
Re: Runs internally on VPS but not internet
Posted by BBS Technik <do...@gmx.de>.
Hi,
Port 25 (SMTP) should also be allowed (confirmation mail, ... ) .
Best Regards
Ed
-------- Original-Nachricht --------
> Datum: Fri, 3 Aug 2012 10:06:55 +0200
> Von: Jakub Skory <ku...@ukw.edu.pl>
> An: openmeetings-user@incubator.apache.org
> Betreff: Re: Runs internally on VPS but not internet
> On Thu, Aug 02, 2012 at 04:10:59PM +0100, Graham Mcleish wrote:
> > I must confess that I have only turned off the firewall completely at
> > this point to get it working as I have never had to open any ports on
> > Ubuntu before! I'll away and turn it back on and try and figure out how
> > to open the specific ports.
> Read 'iptables' manual (man iptables) :)
>
> For example something like this:
> # remove all previous entrys
> iptables -F
> iptables -X
>
> iptables -N TCP
> iptables -N UDP
>
> # default policy
> iptables -P FORWARD DROP
> iptables -P OUTPUT ACCEPT
> iptables -P INPUT DROP
>
> # allow loopback
> iptables -A INPUT -i lo -j ACCEPT
>
> # allow to connect FROM your ubuntu
> iptables -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
> iptables -A INPUT -p udp -m conntrack --ctstate NEW -j UDP
> iptables -A INPUT -p tcp --syn -m conntrack --ctstate NEW -j TCP
>
> # disallow invalid
> iptables -A INPUT -m conntrack --ctstate INVALID -j DROP
>
> # allow ping echo requests
> iptables -A INPUT -p icmp --icmp-type 8 -m conntrack --ctstate NEW -j
> ACCEPT
>
> # set reject policy
> iptables -A INPUT -p udp -j REJECT --reject-with icmp-port-unreachable
> iptables -A INPUT -p tcp -j REJECT --reject-with tcp-rst
> iptables -A INPUT -j REJECT --reject-with icmp-proto-unreachable
>
> # allow specified ports (22 is ssh), remember to change -i eth0 to your
> # interface
> for port in 22 5080 8443 1935 8088; do
> iptables -A TCP -p tcp -m state --state NEW --dport $port -i eth0 -j
> ACCEPT
> done
>
> I did not tested it, but should work. Hope it will help!
> --
> Jakub Skory, <kuba(at)ukw(dot)edu(dot)pl>
> System Operator
> IT Center:
> _______________________________________________________________________
> tel: +48 52 3257 649, +48 52 3257 647
> fax: +48 52 3257 646, +48 52 3257 647
> working hours: 08a.m. - 04p.m.
> mail: di(at)ukw(dot)edu(dot)pl
> web: http://di.ukw.edu.pl/
> postal address: M. Kopernika 1 (room 8/9), 85-074, Bydgoszcz.
> _______________________________________________________________________
> Kazimierz Wielki University,
> J. K. Chodkiewicza 30,
> 85-064, Bydgoszcz, Poland.
> _______________________________________________________________________
Re: Runs internally on VPS but not internet
Posted by Jakub Skory <ku...@ukw.edu.pl>.
On Thu, Aug 02, 2012 at 04:10:59PM +0100, Graham Mcleish wrote:
> I must confess that I have only turned off the firewall completely at
> this point to get it working as I have never had to open any ports on
> Ubuntu before! I'll away and turn it back on and try and figure out how
> to open the specific ports.
Read 'iptables' manual (man iptables) :)
For example something like this:
# remove all previous entrys
iptables -F
iptables -X
iptables -N TCP
iptables -N UDP
# default policy
iptables -P FORWARD DROP
iptables -P OUTPUT ACCEPT
iptables -P INPUT DROP
# allow loopback
iptables -A INPUT -i lo -j ACCEPT
# allow to connect FROM your ubuntu
iptables -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
iptables -A INPUT -p udp -m conntrack --ctstate NEW -j UDP
iptables -A INPUT -p tcp --syn -m conntrack --ctstate NEW -j TCP
# disallow invalid
iptables -A INPUT -m conntrack --ctstate INVALID -j DROP
# allow ping echo requests
iptables -A INPUT -p icmp --icmp-type 8 -m conntrack --ctstate NEW -j
ACCEPT
# set reject policy
iptables -A INPUT -p udp -j REJECT --reject-with icmp-port-unreachable
iptables -A INPUT -p tcp -j REJECT --reject-with tcp-rst
iptables -A INPUT -j REJECT --reject-with icmp-proto-unreachable
# allow specified ports (22 is ssh), remember to change -i eth0 to your
# interface
for port in 22 5080 8443 1935 8088; do
iptables -A TCP -p tcp -m state --state NEW --dport $port -i eth0 -j ACCEPT
done
I did not tested it, but should work. Hope it will help!
--
Jakub Skory, <kuba(at)ukw(dot)edu(dot)pl>
System Operator
IT Center:
_______________________________________________________________________
tel: +48 52 3257 649, +48 52 3257 647
fax: +48 52 3257 646, +48 52 3257 647
working hours: 08a.m. - 04p.m.
mail: di(at)ukw(dot)edu(dot)pl
web: http://di.ukw.edu.pl/
postal address: M. Kopernika 1 (room 8/9), 85-074, Bydgoszcz.
_______________________________________________________________________
Kazimierz Wielki University,
J. K. Chodkiewicza 30,
85-064, Bydgoszcz, Poland.
_______________________________________________________________________
RE: Runs internally on VPS but not internet
Posted by greenes <zu...@gmail.com>.
Good :)
Alvaro
---
El jue, 02-08-2012 a las 16:10 +0100, Graham Mcleish escribió:
> Hi Alvaro, Thank you very much. That was the problem and it is working
> normally now.
>
> I must confess that I have only turned off the firewall completely at
> this point to get it working as I have never had to open any ports on
> Ubuntu before! I'll away and turn it back on and try and figure out how
> to open the specific ports.
>
> Thank you again (and Maxim) for such a speedy response. When I get to an
> impasse like this my brain turns to cabbage soup and I search everywhere
> but the correct place! The solution is so simple when you are told it!
>
> You may guess that I am not very knowledgeable with Linux, Ubuntu and
> Openmeetings but it is such a brilliant project. It certainly keeps my
> brain cells active!
>
> Congratulation to you and everyone else involved.
>
> Regards
>
> Graham
>
>
>
>
>
> -----Original Message-----
> From: greenes [mailto:zurcamos@gmail.com]
> Sent: 02 August 2012 16:35
> To: openmeetings-user@incubator.apache.org
> Subject: Re: Runs internally on VPS but not internet
>
> Hi Graham,
>
> You means about the iso.
>
> Run Firestarter (firewall) and open the ports
> on this: 1935 and 5080
>
> Regards
>
> Alvaro
>
>
> El jue, 02-08-2012 a las 13:33 +0100, Graham Mcleish escribió:
> > I have loaded Openmeetings 2.0 Ubuntu 12.04.iso onto my VPS. It runs
> > OK inside the VPS if I start it with its own Firefox browser using
> > 127.0.0.1:5080/openmeetings/install but I cannot get it to run when I
> > attempt through my browser using the 'VPS's IP
> > address':5080/openmeetings/install. Can anyone tell me what I have to
> > do to get it to run through the internet from my browser? Many
> > thanks.
> >
> >
> >
> >
>
>
>
RE: Runs internally on VPS but not internet
Posted by Graham Mcleish <gr...@mcleish.me>.
Hi Alvaro, Thank you very much. That was the problem and it is working
normally now.
I must confess that I have only turned off the firewall completely at
this point to get it working as I have never had to open any ports on
Ubuntu before! I'll away and turn it back on and try and figure out how
to open the specific ports.
Thank you again (and Maxim) for such a speedy response. When I get to an
impasse like this my brain turns to cabbage soup and I search everywhere
but the correct place! The solution is so simple when you are told it!
You may guess that I am not very knowledgeable with Linux, Ubuntu and
Openmeetings but it is such a brilliant project. It certainly keeps my
brain cells active!
Congratulation to you and everyone else involved.
Regards
Graham
-----Original Message-----
From: greenes [mailto:zurcamos@gmail.com]
Sent: 02 August 2012 16:35
To: openmeetings-user@incubator.apache.org
Subject: Re: Runs internally on VPS but not internet
Hi Graham,
You means about the iso.
Run Firestarter (firewall) and open the ports
on this: 1935 and 5080
Regards
Alvaro
El jue, 02-08-2012 a las 13:33 +0100, Graham Mcleish escribió:
> I have loaded Openmeetings 2.0 Ubuntu 12.04.iso onto my VPS. It runs
> OK inside the VPS if I start it with its own Firefox browser using
> 127.0.0.1:5080/openmeetings/install but I cannot get it to run when I
> attempt through my browser using the 'VPS's IP
> address':5080/openmeetings/install. Can anyone tell me what I have to
> do to get it to run through the internet from my browser? Many
> thanks.
>
>
>
>
Re: Runs internally on VPS but not internet
Posted by greenes <zu...@gmail.com>.
Hi Graham,
You means about the iso.
Run Firestarter (firewall) and open the ports
on this: 1935 and 5080
Regards
Alvaro
El jue, 02-08-2012 a las 13:33 +0100, Graham Mcleish escribió:
> I have loaded Openmeetings 2.0 Ubuntu 12.04.iso onto my VPS. It runs
> OK inside the VPS if I start it with its own Firefox browser using
> 127.0.0.1:5080/openmeetings/install but I cannot get it to run when I
> attempt through my browser using the 'VPS's IP
> address':5080/openmeetings/install. Can anyone tell me what I have to
> do to get it to run through the internet from my browser? Many
> thanks.
>
>
>
>
Re: Runs internally on VPS but not internet
Posted by Jakub Skory <ku...@ukw.edu.pl>.
On Thu, Aug 02, 2012 at 01:33:45PM +0100, Graham Mcleish wrote:
> I have loaded Openmeetings 2.0 Ubuntu 12.04.iso onto my VPS. It runs OK
> inside the VPS if I start it with its own Firefox browser using
> 127.0.0.1:5080/openmeetings/install but I cannot get it to run when I
> attempt through my browser using the 'VPS's IP
> address':5080/openmeetings/install. Can anyone tell me what I have to
> do to get it to run through the internet from my browser? Many thanks.
Check iptables rules. I had same problem. Default policy on INPUT,
OUTPUT and FORWARD is set up to DROP.
--
Jakub Skory, <kuba(at)ukw(dot)edu(dot)pl>
System Operator
IT Center:
_______________________________________________________________________
tel: +48 52 3257 649, +48 52 3257 647
fax: +48 52 3257 646, +48 52 3257 647
working hours: 08a.m. - 04p.m.
mail: di(at)ukw(dot)edu(dot)pl
web: http://di.ukw.edu.pl/
postal address: M. Kopernika 1 (room 8/9), 85-074, Bydgoszcz.
_______________________________________________________________________
Kazimierz Wielki University,
J. K. Chodkiewicza 30,
85-064, Bydgoszcz, Poland.
_______________________________________________________________________
Re: Runs internally on VPS but not internet
Posted by Maxim Solodovnik <so...@gmail.com>.
you can additionally check firewall on Ubuntu.
It seems to be configuration problem of your machine
On Thu, Aug 2, 2012 at 7:47 PM, Graham Mcleish <gr...@mcleish.me> wrote:
> Hi Maxim, Thanks for such a quick reply. I have another ‘hard disk’ on
> the VPS with Openmeetings 1.9 on Ubuntu 10.04 and when I fire that up it
> works OK from the internet so I assume the 5080 and 1935 ports on the VPS
> are open.
>
>
>
> -----Original Message-----
> *From:* Maxim Solodovnik [mailto:solomax666@gmail.com]
> *Sent:* 02 August 2012 13:36
> *To:* openmeetings-user@incubator.apache.org
> *Subject:* Re: Runs internally on VPS but not internet
>
>
>
> Try check if 5080 port and 1935 are opened on your VPS
>
> On Thu, Aug 2, 2012 at 7:33 PM, Graham Mcleish <gr...@mcleish.me> wrote:
>
> I have loaded Openmeetings 2.0 Ubuntu 12.04.iso onto my VPS. It runs OK
> inside the VPS if I start it with its own Firefox browser using
> 127.0.0.1:5080/openmeetings/install but I cannot get it to run when I
> attempt through my browser using the 'VPS's IP
> address':5080/openmeetings/install. Can anyone tell me what I have to do to
> get it to run through the internet from my browser? Many thanks.
>
>
>
>
>
>
>
> --
> WBR
> Maxim aka solomax
>
--
WBR
Maxim aka solomax
RE: Runs internally on VPS but not internet
Posted by Graham Mcleish <gr...@mcleish.me>.
Hi Maxim, Thanks for such a quick reply. I have another 'hard disk' on
the VPS with Openmeetings 1.9 on Ubuntu 10.04 and when I fire that up it
works OK from the internet so I assume the 5080 and 1935 ports on the
VPS are open.
-----Original Message-----
From: Maxim Solodovnik [mailto:solomax666@gmail.com]
Sent: 02 August 2012 13:36
To: openmeetings-user@incubator.apache.org
Subject: Re: Runs internally on VPS but not internet
Try check if 5080 port and 1935 are opened on your VPS
On Thu, Aug 2, 2012 at 7:33 PM, Graham Mcleish <gr...@mcleish.me>
wrote:
I have loaded Openmeetings 2.0 Ubuntu 12.04.iso onto my VPS. It runs OK
inside the VPS if I start it with its own Firefox browser using
127.0.0.1:5080/openmeetings/install but I cannot get it to run when I
attempt through my browser using the 'VPS's IP
address':5080/openmeetings/install. Can anyone tell me what I have to do
to get it to run through the internet from my browser? Many thanks.
--
WBR
Maxim aka solomax
Re: Runs internally on VPS but not internet
Posted by Maxim Solodovnik <so...@gmail.com>.
Try check if 5080 port and 1935 are opened on your VPS
On Thu, Aug 2, 2012 at 7:33 PM, Graham Mcleish <gr...@mcleish.me> wrote:
> I have loaded Openmeetings 2.0 Ubuntu 12.04.iso onto my VPS. It runs OK
> inside the VPS if I start it with its own Firefox browser using
> 127.0.0.1:5080/openmeetings/install but I cannot get it to run when I
> attempt through my browser using the 'VPS's IP
> address':5080/openmeetings/install. Can anyone tell me what I have to do to
> get it to run through the internet from my browser? Many thanks.
>
>
>
--
WBR
Maxim aka solomax