Ports needed for web serving?

[Titan386]

I have a router with a NAT firewall. One of the machines on my network is running a web server, which I would like to be available for viewing on the Internet. If I direct my browser to the LAN IP of that system, I can see the Apache test page. However, when using the WAN IP, I get a 'cannot find server or DNS error'. I am currently forwarind port 80 to the web server, is there anything I'm missing here?

[TC]

Port 80 is the default for an http server. If not that try 8080. My guess is the port forwarding is not actually working. What router are you using?

[Titan386]

I tried 8080, with the same results. The port forwarding works fine in other cases. For example, I'm running a ftp and game server with no problems. I'm using a SMC Barricade. Thanks for the response.

EDIT: When I setup my ftp server, I knew that port 21 was the standard ftp port, so I forwarded it. However, my server did not work. It apparently needed a second port on which to conduct the actual file transfers. Intially, my server was trying to use passive mode, which picked a random port (I think) on which to transfer. The router interferred with this. So I had to switch to active mode, which makes port 20 the port to tranfer files on. Once both port 21 and 20 were forwarded, the server worked. Does something similar have to be done for HTTP?

Also, I had my friend to telnet to me on port 80, and he said he got an error along the lines of "The connected system failed to properly respond."

[bubba gump]

well if you are using a apache server, it should say somewhere either in little notepad doc's r like somewere on say google if u looked, but ive also seen people use port 81, well heres soemthing i found on how u can change the port in case u didnt already know

here it is! (http://www.sparklist.com/resources/help/ApachePort.html)

but then again, if u arent using appache i hope u find a way to fix problem coz thats all i know about.

[Huckleberry]

Does the firewall allow the web server to open ports to the outside world? The Web server will need to open a port back to your client machine. Ensure that the firewall has a provision for this. You can easily test if this is the problem by creating a rule that allows your web server all outgoing access to any port on any Internet IP. If this works, then you can fine tune the rule to be a bit more restrictive.

As another thought, most firewall rules are considered on a priority basis. If you have a higher priority rule that denies access to your web server, the firewall will likely deny access without considering your lower priority rule that allows access. Make sure your port 80/allow rule is at the top of the priority list. If this works, then you can more appropriatly adjust the priority downward.

[Titan386]

I've checked that it is serving on port 80, it is. I'm going to change some firewall settings as Huckleberry suggested and see if I get some success. I'll report any progress back here. Thanks for all the replies. (I am using Apache BTW)

Edit: I messed with some firewall settings, ensuring that allow outgoing traffic on all ports is being allowed, as well as placing the port 80 forward setting on the top of the list. Now, when I access the server via my WAN IP, it works (this is from a machine on the LAN). However, I've asked several people outside my network to attempt to connect, all of which have failed. Tomorrow I am going to work with a friend's computer, and try some more changes.

[Titan386]

Alright, I figured out the problem. Apparnetly my ISP blocks both ports 80 and 8080. I'm using a different port now, and everythings fine. Thanks to all who responded.

[AMD'er]

here is a link to all the ports: http://www.iss.net/security_center/advice/Exploits/Ports/

[Titan386]

Wow thanks, that a great link. I'll be bookmarking that...

[Vfrjim1]

If it doesn't work, it could be that your ISP is blocking port 80, like mine does :(

Jim

[Titan386]

Yes, that was the problem, which I discoverd after much frusteration. I wish they would document those things, and the FAQ on there website goes about as far as "What is a cable modem?".

[AMD'er]

if I were you i would choose a gamming port liek 27015 and operate the server from there...that way your ISP thinks you are playing a game...i can't remember which port that is (half life) i think but check that link i gave you