PDA

View Full Version : need help!!! can't reach websites but locally (using router)


razvan_vlad
23rd May 2007, 17:15
hello guys, i really need some hlep.. because i gotta get my server configured before i leave the country for 2 months.
I can't get my websites to work but locally..
below i wrote my settings:
ok.. so... using ISPConfig with a router i have made those settings:
the server's ip is 192.168.1.30
the router (getway) is 192.168.1.1
the modem's ip (from ISP) is 24.211.xxx.xxx
under ISPConfig - Server - Settings i have the server's ip address (192.168.1.30) ; and under DNS i have provided the Default NS1 with www.myserver1.com and Default NS2 with www.myserver2.com

now.. i bought a domain.. let's say.. www.website1.com and on their website , i made it to point towards my modem's ip (24.211.xxx.xxx)

on my router, i forwarded port 80 towards my server's ip (192.168.1.30) ( this ip is within the range of router's DHCP)

then.. creating a new website with ISPConfig, called www.website1.com , i have choosen it's ip , the same with the server's ip.
then.. under DNS Manager:
"Domain section:" the website's Domain(SOA) is website1.com and IP Address is the address of my modem (the one i had specified when i bought the domain)
"Options section" Nameserver1 is the primary name server from the website i bought the domain .. and Nameserver2 is the 2nd one from that website.


do those settings seem oke ?? i really need help with this.

and just for the curiosity.. on fedora 6 .. when i go to System - Administration - Network .. the eth0 DNSes .. are the DNSes provided from my ISP (the ones that show up on the routher) .
is this correct??


PLEASE PLEASE help me

falko
24th May 2007, 19:02
on my router, i forwarded port 80 towards my server's ip (192.168.1.30) ( this ip is within the range of router's DHCP)You should use an IP address that's outside the DHCP range, or you might get conflicting IP addresses.

then.. creating a new website with ISPConfig, called www.website1.com , i have choosen it's ip , the same with the server's ip. What IP? 192.168.1.30?

then.. under DNS Manager:
"Domain section:" the website's Domain(SOA) is website1.com and IP Address is the address of my modem (the one i had specified when i bought the domain)
"Options section" Nameserver1 is the primary name server from the website i bought the domain .. and Nameserver2 is the 2nd one from that website. From what you told above, your registrar's nameservers are responsible for your domain, so there's no need to create DNS records for it on your own server.


just for the curiosity.. on fedora 6 .. when i go to System - Administration - Network .. the eth0 DNSes .. are the DNSes provided from my ISP (the ones that show up on the routher) .
is this correct??
If you mean the nameservers from /etc/resolv.conf - yes.

If you can't reach your web site, it's possible that your router doesn't support loopbacks.
Can you try to access it from outside your network? Does it work then?

razvan_vlad
24th May 2007, 19:16
hey Falko, thanks for the reply ..

so..
What IP? 192.168.1.30? yes..i mean.. websites created in ISPConfig(under ISP Manager) have the server's ip 192.168.1.30.

From what you told above, your registrar's nameservers are responsible for your domain, so there's no need to create DNS records for it on your own server.
so.. you mean, when i create a website under ISPConfig, i am not supposed to check "Create DNS" for the website? so.. all i do is.. when i buy a domain online.. i point it towards my external ip (modem ip's from my ISP) , then forward port 80 on the router (it's a netgear router) towards the server's ip address , then.. ISPConfig's settings.. under the DNS section.. where i have to specify the "Default NS1" and "Default NS2" should i put the same DNSes as from my ISP? or just give random dns names .. which will represent my server's dns?


If you mean the nameservers from /etc/resolv.conf - yes.

If you can't reach your web site, it's possible that your router doesn't support loopbacks.
Can you try to access it from outside your network? Does it work then? yes.. the router does work if im trying to access it outside my network..
and im quite not sure right now.. but what i mean.. i used the GUI Network interface in fedora.. ( i went to the toolbar menu, .. and under Administration i have Network.. and it pops up the gui for network. then.. i selected the eth0 and press DNS and it's asking me for the "primary dns" and "secondary dns". so i guess those are the dns'es frm my ISP right?

and thanks alot for help

falko
25th May 2007, 16:30
yes..i mean.. websites created in ISPConfig(under ISP Manager) have the server's ip 192.168.1.30. That's the right setting.

so.. you mean, when i create a website under ISPConfig, i am not supposed to check "Create DNS" for the website?Yes.
so.. all i do is.. when i buy a domain online.. i point it towards my external ip (modem ip's from my ISP) , then forward port 80 on the router (it's a netgear router) towards the server's ip addressYes. But make sure your domain registrar creates real A or CNAME records for your domain, not just some kind of forward. You can check this with dig yourdomain.com
then.. ISPConfig's settings.. under the DNS section.. where i have to specify the "Default NS1" and "Default NS2" should i put the same DNSes as from my ISP? or just give random dns names .. which will represent my server's dns? You don't need that setting at all if all DNS records of your domains are managed by your registrar or someone else.

and it's asking me for the "primary dns" and "secondary dns". so i guess those are the dns'es frm my ISP right?

Yes, as long as these are working DNS servers.

razvan_vlad
25th May 2007, 18:20
ok. so.. i unchecked the "Create DNS" and " Create DNS-MX" options for each website. i went to DNS Record and deleted all the records for each website.
I went to Management - Server Settings - DNS and deleted the "Default Ns1:" and "Default Ns2:" so now they are empty.
i went to up on the menu bar on fedora.. at System - Administration - Network -, i selected the eth0 and press DNS. there i have the primary and secondary dns which are the dnses provided by my ISP.
now.. i "dig mydomain.com" and here's what i got
dig abcd.selfip.com

; <<>> DiG 9.3.4 <<>> abcd.selfip.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 39040
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 5, ADDITIONAL: 5

;; QUESTION SECTION:
;abcd.selfip.com. IN A

;; ANSWER SECTION:
abcd.selfip.com. 14400 IN A 24.211.xxx.xxx

;; AUTHORITY SECTION:
selfip.com. 11637 IN NS ns2.dyndns.org.
selfip.com. 11637 IN NS ns3.dyndns.org.
selfip.com. 11637 IN NS ns4.dyndns.org.
selfip.com. 11637 IN NS ns5.dyndns.org.
selfip.com. 11637 IN NS ns1.dyndns.org.

;; ADDITIONAL SECTION:
ns1.dyndns.org. 3215 IN A 63.208.196.90
ns2.dyndns.org. 7425 IN A 204.13.249.81
ns3.dyndns.org. 7439 IN A 204.13.250.81
ns4.dyndns.org. 7439 IN A 213.155.150.205
ns5.dyndns.org. 7424 IN A 63.170.10.81

;; Query time: 41 msec
;; SERVER: 24.25.xxx.xxx#53(24.25.xxx.xxx)
;; WHEN: Fri May 25 11:07:11 2007
;; MSG SIZE rcvd: 229


where xxx.xxx i just substitute them.

and 2nd website that i have created without using ISPConfig (just made out the virtual host in httpd.conf):
dig abcde.selfip.com

; <<>> DiG 9.3.4 <<>> abcde.selfip.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 54847
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 5, ADDITIONAL: 5

;; QUESTION SECTION:
;abcde.selfip.com. IN A

;; ANSWER SECTION:
abcde.selfip.com. 14400 IN A 24.211.xxx.xxx

;; AUTHORITY SECTION:
selfip.com. 69368 IN NS ns4.dyndns.org.
selfip.com. 69368 IN NS ns5.dyndns.org.
selfip.com. 69368 IN NS ns1.dyndns.org.
selfip.com. 69368 IN NS ns2.dyndns.org.
selfip.com. 69368 IN NS ns3.dyndns.org.

;; ADDITIONAL SECTION:
ns1.dyndns.org. 58990 IN A 63.208.196.90
ns2.dyndns.org. 64457 IN A 204.13.249.81
ns3.dyndns.org. 67859 IN A 204.13.250.81
ns4.dyndns.org. 64175 IN A 213.155.150.205
ns5.dyndns.org. 64175 IN A 63.170.10.81

;; Query time: 40 msec
;; SERVER: 24.25.xxx.xxx#53(24.25.xxx.xxx)
;; WHEN: Fri May 25 11:09:19 2007
;; MSG SIZE rcvd: 230


they still time out.
here is my error_log under /var/log/httpd/
[Fri May 25 11:17:32 2007] [notice] core dump file size limit raised to 4294967295 bytes
[Fri May 25 11:17:32 2007] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Fri May 25 11:17:32 2007] [notice] Digest: generating secret for digest authentication ...
[Fri May 25 11:17:32 2007] [notice] Digest: done
[Fri May 25 11:17:33 2007] [notice] mod_python: Creating 4 session mutexes based on 150 max processes and 0 max threads.
[Fri May 25 11:17:34 2007] [notice] Apache/2.2.4 (Unix) DAV/2 PHP/5.1.6 mod_python/3.2.8 Python/2.4.4 mod_ssl/2.2.4 OpenSSL/0.9.8b mod_perl/2.0.2 Perl/v5.8.8 configured -- resuming normal operations

and my ssl_error under the same folder :
[Fri May 25 11:17:32 2007] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 25 11:17:32 2007] [warn] RSA server certificate CommonName (CN) `localhost.localdomain' does NOT match server name!?
[Fri May 25 11:17:34 2007] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 25 11:17:34 2007] [warn] RSA server certificate CommonName (CN) `localhost.localdomain' does NOT match server name!?

the access log files are empty.
and under /root/ispconfig/httpd/logs i still have no error logs


any help? :(

falko
26th May 2007, 20:42
Is 24.211.xxx.xxx your public IP address?