[opensuse] Resolve Hostname not working with firewall on

newer
[opensuse] vim-data was downgraded...

Paul Groves

23 Aug 2017 23 Aug '17

17:00

OK probably a dumb question with an obvious answer. I just set up an apache2 server on the latest version of tumbleweed. When I go to http://10.113.0.23 it loads fine when I go to http://hostname it will not load unless I turn off the firewall then it works fine. which ports do I need to allow? Basically having a blonde moment. :-) -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

Show replies by date

James Knott

23 Aug 23 Aug

17:04

On 08/23/2017 01:00 PM, Paul Groves wrote:

...

OK probably a dumb question with an obvious answer.

I just set up an apache2 server on the latest version of tumbleweed.

When I go to http://10.113.0.23 it loads fine

when I go to http://hostname it will not load unless I turn off the firewall then it works fine.

which ports do I need to allow?

Basically having a blonde moment. :-)

Firewall on which system? Where's the DNS? Generally firewalls allow outgoing DNS requests and corresponding responses. DNS uses port 53, normally UDP, but sometimes TCP too. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

Darin Perusich

17:07

The following will allow http/https through the firewall. yast firewall services add service=service:apache2 zone=EXT yast firewall services add service=service:apache2-ssl zone=EXT -- Later, Darin On Wed, Aug 23, 2017 at 1:00 PM, Paul Groves wrote:

...

OK probably a dumb question with an obvious answer.

I just set up an apache2 server on the latest version of tumbleweed.

When I go to http://10.113.0.23 it loads fine

when I go to http://hostname it will not load unless I turn off the firewall then it works fine.

which ports do I need to allow?

Basically having a blonde moment. :-)

-- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

-- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

James Knott

17:10

Given the problem is host name lookup, it's a DNS issue. On 08/23/2017 01:07 PM, Darin Perusich wrote:

...

The following will allow http/https through the firewall.

yast firewall services add service=service:apache2 zone=EXT yast firewall services add service=service:apache2-ssl zone=EXT

-- Later, Darin

On Wed, Aug 23, 2017 at 1:00 PM, Paul Groves wrote:

...
OK probably a dumb question with an obvious answer.

I just set up an apache2 server on the latest version of tumbleweed.

When I go to http://10.113.0.23 it loads fine

when I go to http://hostname it will not load unless I turn off the firewall then it works fine.

which ports do I need to allow?

Basically having a blonde moment. :-)

-- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

-- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

Paul Groves

17:15

I have already enabled port 53 incoming and outgoing both tcp and udp also I have already enabled port 80 and 443 tcp from the local subnet http://ip works http://hostname does not turn off firewall then http://hostname works fine. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

James Knott

17:19

On 08/23/2017 01:15 PM, Paul Groves wrote:

...

I have already enabled port 53 incoming and outgoing both tcp and udp

also I have already enabled port 80 and 443 tcp from the local subnet

http://ip works http://hostname does not

turn off firewall then http://hostname works fine.

Again, where is the firewall? Where is the DNS? -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

John Andersen

17:38

On 08/23/2017 10:15 AM, Paul Groves wrote:

...

I have already enabled port 53 incoming and outgoing both tcp and udp

also I have already enabled port 80 and 443 tcp from the local subnet

http://ip works http://hostname does not

turn off firewall then http://hostname works fine.

What program do you expect to resolve that host name to that unroutable address? Are you running a dns server on your machine, and or on your lan? (perhaps in a router?) Check the configuration of those. In the absense of that, you could try adding an entry to your /etc/hosts but generally this will only work for your own machine, not others on the lan. -- After all is said and done, more is said than done. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

James Knott

17:53

On 08/23/2017 01:38 PM, John Andersen wrote:

...

On 08/23/2017 10:15 AM, Paul Groves wrote:

...
I have already enabled port 53 incoming and outgoing both tcp and udp

also I have already enabled port 80 and 443 tcp from the local subnet

http://ip works http://hostname does not

turn off firewall then http://hostname works fine.

What program do you expect to resolve that host name to that unroutable address? Are you running a dns server on your machine, and or on your lan? (perhaps in a router?) Check the configuration of those.

RFC1918 addresses are routable, but not onto the Internet. Regardless, it should be possible for DNS or /etc/hosts to map the name to an IP address

...

In the absense of that, you could try adding an entry to your /etc/hosts but generally this will only work for your own machine, not others on the lan.

Also, he said it worked if the firewall was turned off, but didn't say where the firewall is or the DNS server. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

Paul Groves

18:16

On 23/08/17 18:53, James Knott wrote:

...

On 08/23/2017 01:38 PM, John Andersen wrote:

...
On 08/23/2017 10:15 AM, Paul Groves wrote:

...
I have already enabled port 53 incoming and outgoing both tcp and udp

also I have already enabled port 80 and 443 tcp from the local subnet

http://ip works http://hostname does not

turn off firewall then http://hostname works fine.

What program do you expect to resolve that host name to that unroutable address? Are you running a dns server on your machine, and or on your lan? (perhaps in a router?) Check the configuration of those. RFC1918 addresses are routable, but not onto the Internet. Regardless, it should be possible for DNS or /etc/hosts to map the name to an IP address In the absense of that, you could try adding an entry to your /etc/hosts but generally this will only work for your own machine, not others on the lan.

Also, he said it worked if the firewall was turned off, but didn't say where the firewall is or the DNS server. DNS server on same lan.

I am talking about the local firewall on the apache server itself. not my internet firewall. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

David C. Rankin

24 Aug 24 Aug

03:22

On 08/23/2017 01:16 PM, Paul Groves wrote:

...

DNS server on same lan.

I am talking about the local firewall on the apache server itself. not my internet firewall.

Stab in the dark, but are you trying to browse the apache server from a browser on the same machine? If so, how are you handling localhost/hostname resolution? Does your firewall modify /etc/hosts or /etc/nsswitch.conf? Can you browse http://localhost? If you are attempting to browse on the same machine as the apache server, you must be able to resolve localhost, hostname, and hostname-fqdn. I don't know how the firewall effects that resolution, but apache is generally looking for 'incoming' connection from remote hosts. If you are on the same host, then what is local? and what is remote? can required a bit of finesse/ -- David C. Rankin, J.D.,P.E. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

Paul Groves

23 Aug 23 Aug

18:16

On 23/08/17 18:38, John Andersen wrote:

...

On 08/23/2017 10:15 AM, Paul Groves wrote:

...
I have already enabled port 53 incoming and outgoing both tcp and udp

also I have already enabled port 80 and 443 tcp from the local subnet

http://ip works http://hostname does not

turn off firewall then http://hostname works fine.

What program do you expect to resolve that host name to that unroutable address? Firefox / ssh / ping Are you running a dns server on your machine, and or on your lan? (perhaps in a router?) Check the configuration of those. On the lan. All working fine when the apache server's firewall is off. In the absense of that, you could try adding an entry to your /etc/hosts but generally this will only work for your own machine, not others on the lan. Already done so on the DNS. works fire with the apache server's firewall off.

-- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org