Apache 2.2.8 Ubuntu not accepting connections from outside LAN

[bartockbat]

---

Okay - I apologise if this is someone already has an answer for this someplace in here. Kind of under the gun - I want to make sure that I am not on a 'Wild Goose Chase'

I have an Apache 2.2.8 server running on an Ubuntu (Debian 4.3.2-1 kernel 2.6.28.1) . It only will accept connections from the localhost. I run Firefox in an X window on the server, I can get to it just fine. However, I attempt to connect from an external IP, and I cannot.

I run a sniffer on my local machine here, and it seems to want to connect (if anyone wants me to post the trace I will) and when I run a sniffer on the remote machine (the one where the web server is), it is getting an http request to the machine.

I checked the iptables - nothing blocked.

I have verbose (debug logging) turned on. I don't see anything.

I am thinking one of two things:

1. it (apache) is configured to not accept external connections - and I do not know how to check this.
2. the hosting provider has it blocked somehow that I cannot see.

To add mystery I have Tomcat running on the same server (tcp port 8080) and I can reach it just fine.

Any helpful words of wisdom from anyone?

Thanks - it would be much appreciated!

Glen

[elija]

This is probably a probelm with the configuration of the site in Apache. This is probably a virtual host.

Have a look in /etc/apache2/sites-available and there should be a file with a similar name to your site. You will be be looking for Allow / Deny. It sounds like it is denying all but localhost

[bartockbat]

NameVirtualHost *
<VirtualHost *>
ServerAdmin webmaster@localhost

DocumentRoot /var/www/
<Directory />
Options FollowSymLinks
AllowOverride None
</Directory>
<Directory /var/www/>
Options Indexes FollowSymLinks MultiViews
AllowOverride None
Order allow,deny
Allow from all
</Directory>

ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
<Directory "/usr/lib/cgi-bin">
AllowOverride None
Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
Order allow,deny
Allow from all
</Directory>

ErrorLog /var/log/apache2/error.log

# Possible values include: debug, info, notice, warn, error, crit,
# alert, emerg.
LogLevel debug

CustomLog /var/log/apache2/access.log combined
ServerSignature On

Alias /doc/ "/usr/share/doc/"
<Directory "/usr/share/doc/">
Options Indexes MultiViews FollowSymLinks
AllowOverride None
Order deny,allow
Deny from all
Allow from 127.0.0.0/255.0.0.0 ::1/128
</Directory>

</VirtualHost>

Hi - thank you for responding!

Above is the contents of the only file in the sites-available directory. I don't see anything that would indicate any IP denial.
Any other words of wisdom for me?

Thanks

Glen

[kavalakala]

Your config looks just fine to me. Have you checked that the other applicable config files (from /etc/apache2) don't interfere with these settings?

As far as I understood, the web server machine is receiving the packets. Does it reset the connection or just drop the packets?
Have you checked every apache logfile?

Perhaps, as an easy test, you could try to bind apache on a different port.

[Hb_Kai]

How are the external connections coming through? Via external IP or website name?

[elija]

Looks OK to me too.

Are there any clues in your error log?

[ccolumbu]

What does your "Listen" line in httpd.conf say?
Are you listening on port 80?
I think you want:
<VirtualHost *:80>
NOT
<VirtualHost *>

Last what does your "Bind" line look like? are you binding to all IPs on your machine?