Topic: Websites not working from public

[ReetP]

Oh sorry, when I wrote that I had them switched to see if that would help. I now remade that.

Please be REALLY careful doing this sort of thing - it can totally confuse a situation and just wastes so much time, and then you end up getting ignored.

ping tolot.net
PING tolot.net (178.85.119.237): 56 data bytes
64 bytes from 178.85.119.237: icmp_seq=0 ttl=52 time=65.574 ms

ping babshop.nl
PING babshop.nl (178.85.119.237): 56 data bytes
64 bytes from 178.85.119.237: icmp_seq=0 ttl=52 time=75.899 ms

ping groenzwartereigers.nl
PING groenzwartereigers.nl (213.93.205.219): 56 data bytes
Request timeout for icmp_seq 0

So 178.85.119.237 responds but the the other doesn't.

So is your IP static or dynamic (from the looks of your login it is dynamic.....)? So I guess you are using this dynamic IP to login here.

You say you tried bridged mode. What instructions does your ISP give you to set it up? At least we can then work out what to do. What sort of router or modem is it? You said you had it in bridge mode on v9 so where are the settings for that?

A look at this might help once you have figured out what modem mode you should be in.

https://wiki.koozali.org/SME_Server:Documentation:Administration_Manual:Chapter5#Server_and_Gateway_Mode_-_Dedicated

If you have a dynamic IP you will need also need another contrib to fix the DNS as well.

Lots of questions with no real answers.

Please, go back, start again, and just do it one step at a time. You are just thrashing around trying different things and not being methodical here.


I strongly suggest having a read through this - ignore the Rocket specific bits, but read the generic stuff on reporting bugs effectively.

https://gist.github.com/reetp/a66149d5f060f260643a353ca7067a98#how-to-ask-for-help

Specifically use these to try and organise yourself to help us.

https://www.chiark.greenend.org.uk/~sgtatham/bugs.html
http://www.catb.org/esr/faqs/smart-questions.html

[Jean-Philippe Pialasse]

you got back again this new ip 178.85.119.237
and looking at ReetP test just up to this post, you only got part of your domains updated to the new ip

take ti,e to answer and follow ReetP suggestions

also I would add, you can check SME logs when trying to connect

tail -f /var/log/iptables/denylog.log

you have certainly a phone with LTE, this is your best friend to test you connection from "outside world"

[rmoria]

I am seeing almost everything being denied:

Aug 31 16:15:50 nathan denylog: IN=enp3s0 OUT= MAC=3c:49:37:17:cd:8a:54:67:51:55:f3:37:08:00 SRC=109.38.153.152 DST=178.85.119.237 LEN=60 TOS=00 PREC=0x00 TTL=54 ID=31029 DF PROTO=TCP SPT=19666 DPT=80 SEQ=4235366483 ACK=0 WINDOW=65535 SYN URGP=0 MARK=0


Aug 31 16:17:19 nathan denylog: IN=enp3s0 OUT= MAC=3c:49:37:17:cd:8a:54:67:51:55:f3:37:08:00 SRC=109.38.153.152 DST=178.85.119.237 LEN=88 TOS=00 PREC=0x00 TTL=249 ID=17589 DF PROTO=TCP SPT=18060 DPT=8181 SEQ=3235150611 ACK=0 WINDOW=0 ACK RST URGP=0 MARK=0
(port 8181 is a connection to another machine)

[Jean-Philippe Pialasse]

i know you told you did not restored custom-templates but please give us output of

Code: [Select]

/sbin/e-smith/audittools/templates

also denylog.log as it states will output denied connection
it is not normal that your server will deny port 80 unless a custom template or a contribs has asked so or you changed httpd-e-smith access to private.

also while ifconfig is showing your external ip, it is not shown in config db and it should be seen in two places

Code: [Select]

config get ExternalIP
config getprop ExternalInterface IPAddress

[rmoria]

sbin/e-smith/audittools/templates gives no response (fresh install)

Code: [Select]

config get ExternalIP
config getprop ExternalInterface IPAddressAlso gives no output

[ReetP]

This is turning into a XY problem.

https://xyproblem.info/

sbin/e-smith/audittools/templates gives no response (fresh install)

You are missing a '/'

Code: [Select]

/sbin/e-smith/audittools/templates
Then:

Also gives no output

So what have you done differently?

Please, go back, read again the pages on how to report issues correctly, and then document each step and paste it somewhere like pastebin so we can see what you are doing. Remember - we are effectively blind here. We are not mind readers either.

At the minute you are still racing round in a desperate attempt to make something work and getting nowhere, and wasting lots of everyones time.

You have done a clean install. And? Then what? Exactly what did you do during set up? What options? Every little step.

If you can't be methodical and accurate and provide clear information we can't help you.

[Jean-Philippe Pialasse]

John we are getting there.

please can you post the output of

config show wan

/sbin/e-smith/audittools/events


also
grep ip-change /var/log/message*

[rmoria]

Code: [Select]

config show wan
wan=service
    status=enabled

Code: [Select]

/sbin/e-smith/audittools/events
First the next command gave no output.I did signal-event IP-Change and this came:

Code: [Select]

grep ip-change /var/log/message*
/var/log/messages:Sep  2 20:01:53 nathan esmith::event[4821]: Processing event: ip-change
/var/log/messages:Sep  2 20:01:53 nathan esmith::event[4821]: Running event handler: /etc/e-smith/events/ip-change/S03set-external-ip
/var/log/messages:Sep  2 20:01:53 nathan esmith::event[4821]: S03set-external-ip=action|Event|ip-change|Action|S03set-external-ip|Start|1630605713 751506|End|1630605713 835274|Elapsed|0.083768|Status|65280
/var/log/messages:Sep  2 20:01:55 nathan esmith::event[4821]: generic_template_expand=action|Event|ip-change|Action|generic_template_expand|Start|1630605713 835553|End|1630605715 870966|Elapsed|2.035413
/var/log/messages:Sep  2 22:02:13 nathan esmith::event[4821]: adjust-services=action|Event|ip-change|Action|adjust-services|Start|1630605715 871293|End|1630612933 614584|Elapsed|7217.743291
/var/log/messages.20210902194842:Sep  2 20:01:53 nathan esmith::event[4821]: Processing event: ip-change
/var/log/messages.20210902194842:Sep  2 20:01:53 nathan esmith::event[4821]: Running event handler: /etc/e-smith/events/ip-change/S03set-external-ip
/var/log/messages.20210902194842:Sep  2 20:01:53 nathan esmith::event[4821]: S03set-external-ip=action|Event|ip-change|Action|S03set-external-ip|Start|1630605713 751506|End|1630605713 835274|Elapsed|0.083768|Status|65280
/var/log/messages.20210902194842:Sep  2 20:01:55 nathan esmith::event[4821]: generic_template_expand=action|Event|ip-change|Action|generic_template_expand|Start|1630605713 835553|End|1630605715 870966|Elapsed|2.035413
/var/log/messages.20210902194842:Sep  2 22:02:13 nathan esmith::event[4821]: adjust-services=action|Event|ip-change|Action|adjust-services|Start|1630605715 871293|End|1630612933 614584|Elapsed|7217.743291
To rule out a hardware failure,i am going to switch a network card tomorrow.
I also tried stuff on the modem, like remove the bridgemode and forwarding all ports. Just to be sure it is not blocked there. It didnt help denylog still filling up.
Switched around the networkcables again.External IP 213.93.205.219 (and changed DNS redirect to current IP)

[Jean-Philippe Pialasse]

issue seems that ip is not propagated to the config database.

the result is that the firewall filtering on the wan ip is mot aware of what is the wan ip will simply refuse any http connexions.

try
signal-event ip-change yourcurrentip

then we will need to investigate what is causing that.

[rmoria]

signal-event ip-change yourcurrentip
That has worked. I am getting in. Sites are reachable, port forwarding is working.

Now that I have a monitor hooked up to the server again, I see errors coming from the enp0s25 networkcard (Hardware unit hang). This is the card for the local network. But maybe it is not detected correctly and it puts the server in this weird state. That would explain why the problem happened after the fresh install. The external IP db entry was good in SME9 when I changed to this card (a few month ago) and it stayed that way.

[bunkobugsy]

5:

Code: [Select]

lspci |grep -i Eth
03:00.0 Ethernet controller: Realtek Semiconductor Co., Ltd. RTL8169 PCI Gigabit Ethernet Controller (rev 10)


Try this:

wget http://elrepo.reloumirrors.net/elrepo/el7/x86_64/RPMS/kmod-r8168-8.049.02-1.el7_9.elrepo.x86_64.rpm
yum localinstall kmod-r8168-8.049.02-1.el7_9.elrepo.x86_64.rpm

and reboot