Successful install on FC5 but no web admin available

[codesmith]

Hi,

Just installed ISPConfig on a remote Fedora Core 5 server that was just set up by our web provider. (They installed FC5). ISPConfig install was successful and can restart just fine using:
/etc/init.d/ispconfig_server restart

I set it up for ip address (first of 4 on the machine) access (no entry for host name during install, ip address for domain). I go to http://ipaddress:81 and nothing happens. I don't think there's a firewall installed. I see folks want to see the output of netstat -tap so here's that:

[ ~]# netstat -tap
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 *:mysql *:* LISTEN 30835/mysqld
tcp 0 0 *:sunrpc *:* LISTEN 1700/portmap
tcp 0 0 *:hosts2-ns *:* LISTEN 29819/ispconfig_htt
tcp 0 0 customer-reverse-ent:domain *:* LISTEN 29929/named
tcp 0 0 customer-reverse-ent:domain *:* LISTEN 29929/named
tcp 0 0 customer-reverse-ent:domain *:* LISTEN 29929/named
tcp 0 0 customer-reverse-ent:domain *:* LISTEN 29929/named
tcp 0 0 145008-29200.your-do:domain *:* LISTEN 29929/named
tcp 0 0 localhost.localdomai:domain *:* LISTEN 29929/named
tcp 0 0 *:34422 *:* LISTEN 1718/rpc.statd
tcp 0 0 localhost.localdomain:ipp *:* LISTEN 4439/cupsd
tcp 0 0 localhost.localdomain:rndc *:* LISTEN 29929/named
tcp 0 0 localhost.localdomain:smtp *:* LISTEN 29880/sendmail: acc
tcp 0 0 *:http *:* LISTEN 29842/httpd
tcp 0 0 *:ssh *:* LISTEN 1962/sshd
tcp 0 0 *:https *:* LISTEN 29842/httpd
tcp 0 1872 145008-29200.your-domai:ssh adsl-69-109-111-111.d:56219 ESTABLISHED 25884/0

[mphayesuk]

One small thing which might be a typo, the control panel is accessed by https://ipadd:81 and not http://ipadd:81 (use the secure http)

Hope this helps

[codesmith]

Sorry - mistype on my part. I am trying to go to https://xxx.xxx.xxx.xxx:81/

Any other ideas?

[falko]

Are you using a public IP address?
Also, what's the output of iptables -L? Is SELinux disabled?

[codesmith]

Thanks for the reply.

1) Yes, using a public accessible IP address. I can go to port 80 of the IP address and see the Fedora Test page

2)

[ ~]# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
DROP all -- anywhere anywhere state INVALID
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
ACCEPT all -- anywhere anywhere
ACCEPT icmp -- anywhere anywhere
ACCEPT tcp -- anywhere anywhere tcp dpt:http
ACCEPT tcp -- anywhere anywhere tcp dpt:https
ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
DROP tcp -- anywhere anywhere tcp dpts:tcpmux:65535
DROP udp -- anywhere anywhere udp dpts:tcpmux:65535

Chain FORWARD (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination


3) SeLinux looks like it's disabled:
[ ~]# /usr/sbin/sestatus -v
SELinux status: disabled

[till]

You have the fedora firewall enabled and this firewall blocks port 81. Please disable or customize the firewall as described in the perfect setup.

http://www.howtoforge.com/perfect_setup_fedora_core_5_p3

ISPConfig has its own firewall that can be enabled in the ISPConfig interface under management.

[codesmith]

Disabling Fedora's built-in firewall was the ticket. Just FYI this was done by:

service iptables stop

Thanks!