Mailing-List: contact couchdb-user-help@incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: couchdb-user@incubator.apache.org
Received-SPF: pass (nike.apache.org: domain of paul.joseph.davis@gmail.com
 designates 74.125.46.155 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
        b=Asa/Kj4CMOUtqiRxr5yFYBdeCWrPl71BOm8xPIU1QsbDOSrhFxNaMgTd3zhqwRA6RUKVeXPQkfSOvH9hB1hcF5qxougKCN3ALEPX4juj0FnpoozmiOMX6E+aRpElqJrv3NR4sXfXyo6SuzZHaD5KkHSjYSFv/zM3gK4jZkdqMvU=
Message-ID: <e2111bbb0804281505r403c7724q5b8642f4f66fecc2@mail.gmail.com>
Date: Mon, 28 Apr 2008 18:05:17 -0400
From: "Paul Davis" <paul.joseph.davis@gmail.com>
To: couchdb-user@incubator.apache.org
Subject: Re: firewall
In-Reply-To: <E30F5CA3-5D31-472C-A56A-263CAAF6BA5A@uci.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <FC4513C5-7896-4F65-9A8B-4CCB32F2372B@gmail.com>
	 <e2111bbb0804281122s13d52df5v1c508f7f72483ffc@mail.gmail.com>
	 <A17DE0C0-64D6-4D96-94D2-C15CEEB14C93@uci.edu>
	 <e2111bbb0804281138k17d98466k199f57673b2c8315@mail.gmail.com>
	 <3C127D68-D5DA-4D43-914E-23D25F735449@uci.edu>
	 <e2111bbb0804281204g70b2c8a4lfedbde46f63e71bc@mail.gmail.com>
	 <7CA3D19E-8AB1-46A1-93F2-964BF723C9BB@uci.edu>
	 <C150DF56-9ADC-466F-BD36-DA9425F61144@apache.org>
	 <e2111bbb0804281423h53c6bad4r42e7e35f24cbd3c2@mail.gmail.com>
	 <E30F5CA3-5D31-472C-A56A-263CAAF6BA5A@uci.edu>

I'd start by getting a tcpdump of the traffic to port 5984 on the
couchdb machine.

On Mon, Apr 28, 2008 at 5:59 PM, Tommy Chheng <tchheng@uci.edu> wrote:
> Ok, previously I checked out from the google code source.
>  Still can't access from external and all iptables rules are turned off.
>
>  I tried both
>  BindAddress=127.0.0.1
>
>  BindAddress=0.0.0.0
>
>
>  There's no response from the outside.
>  couch 0.7.3a652071 (LogLevel=info)
>  Apache CouchDB is starting.
>  Apache CouchDB has started. Time to relax.
>
>  Only when I access from the same machine do i get info from the couchdb
> output:
>  [info] [<0.54.0>] 127.0.0.1 - - "GET /" 200
>
>
>  Any thoughts in where to start to debug?
>
>  -
>  Tommy
>
>
>
>  On Apr 28, 2008, at 2:23 PM, Paul Davis wrote:
>
>
> > I might also point out that judging from the version number you
> > checked out of SVN before the move to apache. I'd check out a fresh
> > copy from svn.apache.org and see if that fixes things.
> >
> > Paul
> >
> > On Mon, Apr 28, 2008 at 5:18 PM, Jan Lehnardt <jan@apache.org> wrote:
> >
> > > With trunk you don't need the couch_httpd.ini anymore. It
> > > was all merged into couch.ini
> > >
> > > Cheers
> > > Jan
> > > --
> > >
> > >
> > > On Apr 28, 2008, at 22:11, Tommy Chheng wrote:
> > >
> > >
> > > > Apparently the httpd_conf is needed :(
> > > >
> > > > httpd_conf: Error while reading config file: httpd_conf: Cannot open
> > > >
> > > couch_httpd.conf
> > >
> > > >
> > > >
> > > >
> > > > On Apr 28, 2008, at 12:04 PM, Paul Davis wrote:
> > > >
> > > >
> > > >
> > > > > On Mon, Apr 28, 2008 at 2:57 PM, Tommy Chheng <tchheng@uci.edu>
> wrote:
> > > > >
> > > > >
> > > > > > ok,  I added the Port to the couch.ini and changed my
> couch_http.conf
> > > > > >
> > > > >
> > > >
> > > to
> > >
> > > >
> > > > >
> > > > > > match Still no luck:
> > > > > > my couch_http.conf file
> > > > > > http://pastie.caboo.se/188195
> > > > > >
> > > > > > I'm running nginx and mongrel for rails on this server..  I doubt
> > > > > >
> > > > >
> > > >
> > > these can
> > >
> > > >
> > > > >
> > > > > > be an issue since they aren't touching 5984 at all and no firewall
> is
> > > > > >
> > > > >
> > > >
> > > on...
> > >
> > > >
> > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > > > On Apr 28, 2008, at 11:38 AM, Paul Davis wrote:
> > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > > > > On Mon, Apr 28, 2008 at 2:30 PM, Tommy Chheng <tchheng@uci.edu>
> > > > > > >
> > > > > >
> > > > >
> > > >
> > > wrote:
> > >
> > > >
> > > > >
> > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > > > I added BindAddress so my couch.ini file looks like:
> > > > > > > > http://pastie.caboo.se/188174
> > > > > > > >
> > > > > > > > Still same problem.
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > > On Apr 28, 2008, at 11:22 AM, Paul Davis wrote:
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > > > On Mon, Apr 28, 2008 at 2:19 PM, Tommy Chheng
> <tchheng@uci.edu>
> > > > > > > > >
> > > > > > > >
> > > > > > >
> > > > > >
> > > > >
> > > >
> > > wrote:
> > >
> > > >
> > > > >
> > > > > >
> > > > > > >
> > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > > Ok, so i just turned off the firewall temporary
> > > > > > > > > >
> > > > > > > > > > /sbin/iptables -L
> > > > > > > > > > Chain INPUT (policy ACCEPT)
> > > > > > > > > > target     prot opt source               destination
> > > > > > > > > >
> > > > > > > > > > Chain FORWARD (policy ACCEPT)
> > > > > > > > > >
> > > > > > > > > > target     prot opt source               destination
> > > > > > > > > >
> > > > > > > > > > Chain OUTPUT (policy ACCEPT)
> > > > > > > > > >
> > > > > > > > > > target     prot opt source               destination
> > > > > > > > > >
> > > > > > > > > > Chain RH-Firewall-1-INPUT (0 references)
> > > > > > > > > >
> > > > > > > > > > target     prot opt source               destination
> > > > > > > > > >
> > > > > > > > > > Still no response from outside. It's only working via
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > >
> > > > > > >
> > > > > > localhost:5984.
> > > > > >
> > > > > >
> > > > > > >
> > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > >
> > > > > > > > > > Any ideas how to debug this?
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > > On Apr 28, 2008, at 11:12 AM, Paul Davis wrote:
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > > > /sbin/iptables -A OUTPUT -p tcp -m tcp --dport 5984 -j
> > > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > >
> > > > > > > > >
> > > > > > > >
> > > > > > >
> > > > > >
> > > > >
> > > >
> > > ACCEPT
> > >
> > > >
> > > > >
> > > > > >
> > > > > > >
> > > > > > > >
> > > > > > > > >
> > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > >
> > > > > > > > > Ohhhh. Heh.
> > > > > > > > >
> > > > > > > > > /usr/local/etc/couchdb/couch.ini
> > > > > > > > >
> > > > > > > > > Change "BindAddresss=127.0.0.1" to "BindAddress=0.0.0.0"
> > > > > > > > >
> > > > > > > > > Or your local static ip to only listen on that IP.
> > > > > > > > >
> > > > > > > > > Paul
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > >
> > > > > > > I don't see a port specified. I'd assume that's specified in
> > > > > > > /usr/local/etc/couchdb/couch_httpd.conf. You might check if you
> have
> > > > > > >
> > > > > >
> > > > >
> > > >
> > > a
> > >
> > > >
> > > > >
> > > > > >
> > > > > > > conflicting BindAddress in there as well.
> > > > > > >
> > > > > > > For reference, my couch.ini looks like this:
> > > > > > > http://pastie.caboo.se/188178
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > >
> > > > > The other servers are reachable from an external host, right?
> > > > >
> > > > > Try commenting out the HttpConf. I've never used that and don't have
> > > > > much of an idea on what the side effects might be. Could it be that
> > > > > having the BindAddress and Port specified multiple times is causing
> > > > > issues?
> > > > >
> > > > > Paul
> > > > >
> > > > >
> > > > >
> > > >
> > > >
> > > >
> > > >
> > >
> > >
> > >
> >
> >
>
>