Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Sender: obo@bourse.ch
Message-ID: <3C22F048.A60999C3@bourse.ch>
Date: Fri, 21 Dec 2001 09:18:16 +0100
From: Owen Boyle <obo@bourse.ch>
MIME-Version: 1.0
To: users@httpd.apache.org
Subject: Re: cannot access pages except from my box
References: 
 <02740A3D0809D5118C7C00034707E9F3013EE2A5@ussvlexc10.corp.netapp.com>
 <3C22BFAB.914A4016@d.umn.edu>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Jason Michelizzi wrote:

> One more curious thing:  I tried telling the ssh daemon to listen to
> port 80 on my Linux box.  When I tried logging into my machine from a
> different machine, it hung up forever (or at least for several minutes
> until I hit Ctrl-c).  When I did the same thing to port 79 (as well as
> the usual 22) everything worked fine.  Interesting.

Hanging forever is usually a FW configuration effect - the FW is set to
"drop" the packets. This is the best defence against hackers who try
scanning ports etc. because they don't know how long to wait between
tries. If it were set to "reject" the packets you would get an immediate
"connection refused" and the hacker-prog could try a new port.

So, double-check your FW config. Try changing any "drop" rules to
"reject" and see if the behaviour changes, or add "log" to any drop
rules and then look in the FW log to see if the attempts are logged.

If not that, snoop on the webserver to see if the requests are arriving:

# snoop port 80

should see something...

Rgds,

Owen Boyle.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org