Successful install on FC5 but no web admin available

[codesmith]

Hi,

Just installed ISPConfig on a remote Fedora Core 5 server that was just set up by our web provider. (They installed FC5). ISPConfig install was successful and can restart just fine using:
/etc/init.d/ispconfig_server restart

I set it up for ip address (first of 4 on the machine) access (no entry for host name during install, ip address for domain). I go to http://ipaddress:81 and nothing happens. I don't think there's a firewall installed. I see folks want to see the output of netstat -tap so here's that:

[ ~]# netstat -tap
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address               Foreign Address             State       PID/Program name   
tcp        0      0 *:mysql                     *:*                         LISTEN      30835/mysqld        
tcp        0      0 *:sunrpc                    *:*                         LISTEN      1700/portmap        
tcp        0      0 *:hosts2-ns                 *:*                         LISTEN      29819/ispconfig_htt 
tcp        0      0 customer-reverse-ent:domain *:*                         LISTEN      29929/named         
tcp        0      0 customer-reverse-ent:domain *:*                         LISTEN      29929/named         
tcp        0      0 customer-reverse-ent:domain *:*                         LISTEN      29929/named         
tcp        0      0 customer-reverse-ent:domain *:*                         LISTEN      29929/named         
tcp        0      0 145008-29200.your-do:domain *:*                         LISTEN      29929/named         
tcp        0      0 localhost.localdomai:domain *:*                         LISTEN      29929/named         
tcp        0      0 *:34422                     *:*                         LISTEN      1718/rpc.statd      
tcp        0      0 localhost.localdomain:ipp   *:*                         LISTEN      4439/cupsd          
tcp        0      0 localhost.localdomain:rndc  *:*                         LISTEN      29929/named         
tcp        0      0 localhost.localdomain:smtp  *:*                         LISTEN      29880/sendmail: acc 
tcp        0      0 *:http                      *:*                         LISTEN      29842/httpd         
tcp        0      0 *:ssh                       *:*                         LISTEN      1962/sshd           
tcp        0      0 *:https                     *:*                         LISTEN      29842/httpd         
tcp        0   1872 145008-29200.your-domai:ssh adsl-69-109-111-111.d:56219 ESTABLISHED 25884/0

[mphayesuk]

One small thing which might be a typo, the control panel is accessed by https://ipadd:81 and not http://ipadd:81 (use the secure http)

Hope this helps

[codesmith]

Sorry - mistype on my part. I am trying to go to https://xxx.xxx.xxx.xxx:81/

Any other ideas?

[falko]

Are you using a public IP address?
Also, what's the output of

iptables -L

? Is SELinux disabled?

[codesmith]

Thanks for the reply.

1) Yes, using a public accessible IP address. I can go to port 80 of the IP address and see the Fedora Test page

2)

[ ~]# iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         
DROP       all  --  anywhere             anywhere            state INVALID 
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTABLISHED 
ACCEPT     all  --  anywhere             anywhere            
ACCEPT     icmp --  anywhere             anywhere            
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:http 
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:https 
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:ssh 
DROP       tcp  --  anywhere             anywhere            tcp dpts:tcpmux:65535 
DROP       udp  --  anywhere             anywhere            udp dpts:tcpmux:65535 

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

3) SeLinux looks like it's disabled:

[ ~]#  /usr/sbin/sestatus -v
SELinux status:                 disabled

[till]

You have the fedora firewall enabled and this firewall blocks port 81. Please disable or customize the firewall as described in the perfect setup.

http://www.howtoforge.com/perfect_se...dora_core_5_p3

ISPConfig has its own firewall that can be enabled in the ISPConfig interface under management.

[codesmith]

Disabling Fedora's built-in firewall was the ticket. Just FYI this was done by:

service iptables stop

Thanks!