1 (edytowany przez dominos96 2015-07-30 03:28:11)

Temat: Gargoyle - lighttpd

Witam,
walczę z tym cały dzień i nie mam pojęcia co jest nie tak, otóż nie mogę połączyć się z zewnątrz na hostowaną stronę.
Stronę konfiguracyjną routera na port 81, serwer na 80, port przekierowany, ale przy próbie połączenia z zewnątrz cisza.
Próbowałem na innych portach (11111 itp), ale za cholerę nie da się połączyć z zewnątrz.
W lanie łączy, z zewnątrz już nie.
FTP, i serwery gier hostowane z komputera działają, a ta stronka nie chce.
Ma ktoś jakiś pomysł co z tym może być nie tak?

Edit:
Tutaj jeszcze config

# lighttpd configuration file
# 
## modules to load
# all other module should only be loaded if really neccesary
# - saves some time
# - saves memory
server.modules = ( 
#    "mod_rewrite", 
#    "mod_redirect", 
#    "mod_alias", 
#    "mod_auth", 
#    "mod_status", 
#    "mod_setenv",
#    "mod_fastcgi",
#    "mod_proxy",
#    "mod_simple_vhost",
    "mod_cgi",
#    "mod_ssi",
#    "mod_usertrack",
#    "mod_expire",
#    "mod_webdav"
)

# force use of the "write" backend (closes: #2401)
server.network-backend = "write"

## a static document-root, for virtual-hosting take look at the 
## server.virtual-* options
server.document-root = "/tmp/usb_mount/0014D89714D890D0/www"

## where to send error-messages to
#server.errorlog = "/var/log/lighttpd/error.log"

## files to check for if .../ is requested
index-file.names = ( "index.php", "index.html", "default.html", "index.htm", "default.htm" )

## mimetype mapping
mimetype.assign = (  
    ".pdf"   => "application/pdf",
    ".class" => "application/octet-stream",
    ".pac"   => "application/x-ns-proxy-autoconfig",
    ".swf"   => "application/x-shockwave-flash",
    ".wav"   => "audio/x-wav",
    ".gif"   => "image/gif",
    ".jpg"   => "image/jpeg",
    ".jpeg"  => "image/jpeg",
    ".png"   => "image/png",
    ".svg"   => "image/svg+xml",
    ".css"   => "text/css",
    ".html"  => "text/html",
    ".htm"   => "text/html",
    ".js"    => "text/javascript",
    ".txt"   => "text/plain",
    ".dtd"   => "text/xml",
    ".xml"   => "text/xml"
 )

## Use the "Content-Type" extended attribute to obtain mime type if possible
#mimetypes.use-xattr = "enable"

## send a different Server: header
## be nice and keep it at lighttpd
#server.tag = "lighttpd"

$HTTP["url"] =~ "\.pdf$" {
    server.range-requests = "disable"
}

##
# which extensions should not be handle via static-file transfer
#
# .php, .pl, .fcgi are most often handled by mod_fastcgi or mod_cgi
static-file.exclude-extensions = ( ".php", ".pl", ".fcgi" )

######### Options that are good to be but not neccesary to be changed #######

## bind to port (default: 80)
server.port = 11111

## bind to localhost (default: all interfaces)
#server.bind = "localhost"

## error-handler for status 404
#server.error-handler-404 = "/error-handler.html"
#server.error-handler-404 = "/error-handler.php"

## to help the rc.scripts
server.pid-file = "/var/run/lighttpd.pid"


###### virtual hosts
##
##   If you want name-based virtual hosting add the next three settings and load
##   mod_simple_vhost
##
## document-root =
##   virtual-server-root + virtual-server-default-host + virtual-server-docroot or
##   virtual-server-root + http-host + virtual-server-docroot
##
#simple-vhost.server-root = "/home/weigon/wwwroot/servers/"
#simple-vhost.default-host = "grisu.home.kneschke.de"
#simple-vhost.document-root = "/pages/"


## 
## Format: <errorfile-prefix><status>.html
## -> ..../status-404.html for 'File not found'
#server.errorfile-prefix = "/www/error-"

## virtual directory listings
#server.dir-listing = "enable"

## send unhandled HTTP-header headers to error-log
#debug.dump-unknown-headers = "enable"

### only root can use these options
#
# chroot() to directory (default: no chroot() )
#server.chroot = "/"

## change uid to <uid> (default: don't care)
#server.username = "nobody"
#
server.upload-dirs = ( "/tmp" )

## change uid to <uid> (default: don't care)
#server.groupname = "nobody"

#### compress module
#compress.cache-dir          = "/dev/null/"
#compress.filetype           = ("text/plain", "text/html")

#### proxy module
## read proxy.txt for more info
#proxy.server = (
#    ".php" => (
#        "localhost" => (
#            "host" => "192.168.0.101",
#            "port" => 80
#        )
#    )
#)

#### fastcgi module
## read fastcgi.txt for more info
#fastcgi.server = (
#    ".php" => (
#        "localhost" => (
#            "socket" => "/tmp/php-fastcgi.socket",
#            "bin-path" => "/usr/local/bin/php"
#        )
#    )
#)

#### CGI module
cgi.assign = ( ".php" => "/usr/bin/php-cgi", ".pl"  => "/usr/bin/perl", ".cgi" => "/usr/bin/perl" )

#### SSL engine
#ssl.engine = "enable"
#ssl.pemfile = "server.pem"

#### status module
#status.status-url = "/server-status"
#status.config-url = "/server-config"

#### auth module
## read authentification.txt for more info
#auth.backend = "plain"
#auth.backend.plain.userfile = "lighttpd.user"
#auth.backend.plain.groupfile = "lighttpd.group"
#auth.require = (
#    "/server-status" => ( 
#        "method"  => "digest",
#        "realm"   => "download archiv",
#        "require" => "group=www|user=jan|host=192.168.2.10"
#    ),
#    "/server-info" => ( 
#        "method"  => "digest",
#        "realm"   => "download archiv",
#        "require" => "group=www|user=jan|host=192.168.2.10"
#    )
#)

#### url handling modules (rewrite, redirect, access)
#url.rewrite = ( "^/$" => "/server-status" )
#url.redirect = ( "^/wishlist/(.+)" => "http://www.123.org/$1" )

#### both rewrite/redirect support back reference to regex conditional using %n
#$HTTP["host"] =~ "^www\.(.*)" {
#    url.redirect = ( "^/(.*)" => "http://%1/$1" )
#}

#### expire module
#expire.url = ( "/buggy/" => "access 2 hours", "/asdhas/" => "access plus 1 seconds 2 minutes")

#### ssi
#ssi.extension = ( ".shtml" )

#### setenv
#setenv.add-request-header  = ( "TRAV_ENV" => "mysql://user@host/db" )
#setenv.add-response-header = ( "X-Secret-Message" => "42" )

#### variable usage:
## variable name without "." is auto prefixed by "var." and becomes "var.bar"
#bar = 1
#var.mystring = "foo"

## integer add
#bar += 1
## string concat, with integer cast as string, result: "www.foo1.com"
#server.name = "www." + mystring + var.bar + ".com"
## array merge
#index-file.names = (foo + ".php") + index-file.names
#index-file.names += (foo + ".php")

#### include
#include /etc/lighttpd/lighttpd-inc.conf
## same as above if you run: "lighttpd -f /etc/lighttpd/lighttpd.conf"
#include "lighttpd-inc.conf"

#### include_shell
#include_shell "echo var.a=1"
## the above is same as:
#var.a=1

#### webdav
#$HTTP["url"] =~ "^/webdav($|/)" {
# webdav.activate = "enable"
# webdav.is-readonly = "enable"
# webdav.sqlite-db-name = "/var/run/lighttpd-webdav-lock.db"
#}

2

Odp: Gargoyle - lighttpd

Tzn uruchomiłeś to na routerze? Bo jakie i po co robiłeś przekierowania 80? Otworzyłeś ten port na wanie w firewallu?

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

3

Odp: Gargoyle - lighttpd

Tak serwer www stoi na routerze. A o przekierowania, to własnie o firewall mi chodziło.
Aktualnie wszystko na port 11111 ustawione, dla pewności że nic nie koliduje, i cały czas cisza.

4

Odp: Gargoyle - lighttpd

1. Odblokowany masz ten port na wan?
2. Kto jest dostawcą internetu? Jaki ISP?

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

5

Odp: Gargoyle - lighttpd

Ad. 1 Port tak jak cały czas mówię odblokowany, nie pierwszy serwer stawiam.
Ad. 2 Leon, ale tak jak mówię, nie ma problemów z innymi serwerami.

Apache postawiony na komputerze wychodzi na zewnątrz, a ten lighttpd na routerze już nie może.

6

Odp: Gargoyle - lighttpd

Pokaż wyniki

ps
netstat -apn
iptables -v -L INPUT

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

7

Odp: Gargoyle - lighttpd

root@WDR3600:~# ps
  PID USER       VSZ STAT COMMAND
    1 root      1508 S    init
    2 root         0 SW   [kthreadd]
    3 root         0 SW   [ksoftirqd/0]
    5 root         0 SW   [kworker/u:0]
    6 root         0 SW<  [khelper]
   69 root         0 SW   [sync_supers]
   71 root         0 SW   [bdi-default]
   73 root         0 SW<  [kblockd]
  104 root         0 SW   [kswapd0]
  152 root         0 SW   [fsnotify_mark]
  182 root         0 SW<  [ath79-spi]
  193 root         0 SW   [mtdblock0]
  198 root         0 SW   [mtdblock1]
  203 root         0 SW   [mtdblock2]
  208 root         0 SW   [mtdblock3]
  213 root         0 SW   [mtdblock4]
  218 root         0 SW   [mtdblock5]
  286 root         0 SW   [kworker/0:1]
  445 root         0 SW   [kworker/0:2]
  519 root         0 SW   [khubd]
  539 root         0 SW   [scsi_eh_0]
  540 root         0 SW   [usb-storage]
  541 root         0 SW   [scsi_eh_1]
  542 root         0 SW   [usb-storage]
  544 root         0 SW   [kworker/u:2]
  571 root         0 SW<  [ext4-dio-unwrit]
  593 root      1508 S    init
  626 root         0 SW<  [cfg80211]
  665 root         0 SW<  [rpciod]
  688 root         0 SW<  [nfsiod]
  888 root      1512 S    /sbin/syslogd -C16
  890 root      1496 S    /sbin/klogd
  892 root       884 S    /sbin/hotplug2 --override --persistent --set-rules-file /etc/hotplug2.rules --set-coldplug-cmd /sbin/udevtrigger --max-children 1
  900 root       876 S    /sbin/ubusd
 1012 nobody    1020 S    /usr/sbin/portmap
 1044 root      1476 S    /sbin/netifd
 1094 root      1512 S    udhcpc -p /var/run/udhcpc-eth0.2.pid -s /lib/netifd/dhcp.script -f -t 0 -i eth0.2
 1362 root      1632 S    hostapd -P /var/run/wifi-phy0.pid -B /var/run/hostapd-phy0.conf
 1536 root      1164 S    /usr/sbin/dropbear -P /var/run/dropbear.1.pid -p 22
 1588 root      1348 S    httpd_gargoyle -c cgi-bin/**|**.sh|**.cgi|**.csv -d /www -u root -p 80 -S -E /etc/httpd_gargoyle.pem -SP 443 -i /var/run/httpd_gargoyle-http
 2029 nobody     972 S    /usr/sbin/dnsmasq -C /var/etc/dnsmasq.conf
 2077 root      1504 S    /sbin/watchdog -t 5 /dev/watchdog
 2743 root      2124 S    ntfs-3g /dev/sda1 /tmp/usb_mount/0014D89714D890D0
 2936 root      1504 S    /usr/sbin/ntpd -n -p 0.europe.pool.ntp.org -p 1.europe.pool.ntp.org -p 2.europe.pool.ntp.org
 3114 root      3664 S    /usr/sbin/lighttpd -f /etc/lighttpd/lighttpd.conf
 3125 root     17204 S    /usr/sbin/minidlnad -f /tmp/minidlna.conf
 3126 root      1020 S    /usr/sbin/vsftpd /tmp/vsftpd/vsftpd.conf
 3136 root      3172 S    /usr/sbin/smbd -D
 3138 root      3208 S    /usr/sbin/nmbd -D
 4659 root         0 SW   [flush-8:0]
 5723 root         0 SW   [flush-8:16]
 5724 root      3840 S    /usr/sbin/smbd -D
 7308 root         0 SW   [kworker/0:0]
 7331 root         0 SW   [kworker/0:3]
 8304 root      1516 S N  /usr/sbin/crond -c /etc/crontabs -l 9
 8307 root      1232 R    /usr/sbin/dropbear -P /var/run/dropbear.1.pid -p 22
 8308 root      1508 S    -ash
 8366 root      1500 R    ps
root@WDR3600:~# netstat -apn
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
tcp        0      0 0.0.0.0:11111           0.0.0.0:*               LISTEN      3114/lighttpd
tcp        0      0 0.0.0.0:8200            0.0.0.0:*               LISTEN      3125/minidlnad
tcp        0      0 0.0.0.0:139             0.0.0.0:*               LISTEN      3136/smbd
tcp        0      0 0.0.0.0:111             0.0.0.0:*               LISTEN      1012/portmap
tcp        0      0 0.0.0.0:21              0.0.0.0:*               LISTEN      3126/vsftpd
tcp        0      0 0.0.0.0:53              0.0.0.0:*               LISTEN      2029/dnsmasq
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      1536/dropbear
tcp        0      0 0.0.0.0:445             0.0.0.0:*               LISTEN      3136/smbd
tcp        0      0 192.168.0.1:445         192.168.0.100:55681     ESTABLISHED 5724/smbd
tcp        0    132 192.168.0.1:22          192.168.0.100:56125     ESTABLISHED 8307/dropbear
tcp        0      0 :::139                  :::*                    LISTEN      3136/smbd
tcp        0      0 :::80                   :::*                    LISTEN      1588/httpd_gargoyle
tcp        0      0 :::53                   :::*                    LISTEN      2029/dnsmasq
tcp        0      0 :::22                   :::*                    LISTEN      1536/dropbear
tcp        0      0 :::443                  :::*                    LISTEN      1588/httpd_gargoyle
tcp        0      0 :::445                  :::*                    LISTEN      3136/smbd
udp        0      0 0.0.0.0:53              0.0.0.0:*                           2029/dnsmasq
udp        0      0 0.0.0.0:67              0.0.0.0:*                           2029/dnsmasq
udp        0      0 192.168.0.1:37720       0.0.0.0:*                           3125/minidlnad
udp        0      0 0.0.0.0:1900            0.0.0.0:*                           3125/minidlnad
udp        0      0 0.0.0.0:111             0.0.0.0:*                           1012/portmap
udp        0      0 192.168.0.255:137       0.0.0.0:*                           3138/nmbd
udp        0      0 192.168.0.1:137         0.0.0.0:*                           3138/nmbd
udp        0      0 0.0.0.0:137             0.0.0.0:*                           3138/nmbd
udp        0      0 192.168.0.255:138       0.0.0.0:*                           3138/nmbd
udp        0      0 192.168.0.1:138         0.0.0.0:*                           3138/nmbd
udp        0      0 0.0.0.0:138             0.0.0.0:*                           3138/nmbd
udp        0      0 :::53                   :::*                                2029/dnsmasq
Active UNIX domain sockets (servers and established)
Proto RefCnt Flags       Type       State         I-Node PID/Program name    Path
unix  10     [ ]         DGRAM                      1311 888/syslogd         /dev/log
unix  2      [ ACC ]     STREAM     LISTENING       1594 900/ubusd           /var/run/ubus.sock
unix  2      [ ]         DGRAM                      2409 1362/hostapd        /var/run/hostapd-phy0/wlan0
unix  2      [ ACC ]     STREAM     LISTENING       4495 3138/nmbd           /var/nmbd/unexpected
unix  2      [ ]         DGRAM                      3900 2743/ntfs-3g
unix  2      [ ]         DGRAM                      3162 2029/dnsmasq
unix  2      [ ]         DGRAM                      2758 1362/hostapd
unix  2      [ ]         DGRAM                      2668 1588/httpd_gargoyle
unix  2      [ ]         DGRAM                      2626 1536/dropbear
unix  2      [ ]         DGRAM                      1914 1044/netifd
unix  2      [ ]         DGRAM                      1897 1044/netifd
unix  3      [ ]         STREAM     CONNECTED       1895 900/ubusd           /var/run/ubus.sock
unix  3      [ ]         STREAM     CONNECTED       1894 1044/netifd
unix  2      [ ]         DGRAM                      1869 890/klogd
unix  2      [ ]         DGRAM                      1826 1012/portmap
root@WDR3600:~# iptables -v -L INPUT
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
   44 12062 bw_ingress  all  --  eth0.2 any     anywhere             anywhere
  211 26542 delegate_input  all  --  any    any     anywhere             anywhere

8

Odp: Gargoyle - lighttpd

całe iptables -v -L pokaż.

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

9

Odp: Gargoyle - lighttpd

root@WDR3600:~#  iptables -v -L
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
  485  127K bw_ingress  all  --  eth0.2 any     anywhere             anywhere
 1803  246K delegate_input  all  --  any    any     anywhere             anywhere

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
 5274 3599K bw_ingress  all  --  eth0.2 any     anywhere             anywhere
 5285 3601K ingress_restrictions  all  --  eth0.2 any     anywhere             anywhere
 5304  913K egress_restrictions  all  --  any    eth0.2  anywhere             anywhere
10589 4514K delegate_forward  all  --  any    any     anywhere             anywhere

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
 5340 1558K delegate_output  all  --  any    any     anywhere             anywhere

Chain MINIUPNPD (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain bw_ingress (2 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0            all  --  any    any     anywhere             anywhere            bandwidth --id total1-download-2-449 --type combined --current_bandwidth 0 --reset_interval 2 --reset_time 2 --intervals_to_save 449
    0     0            all  --  any    any     anywhere             anywhere            match-set local_addr_set dst bandwidth --id bdist1-download-minute-15 --type individual_dst --reset_interval minute --intervals_to_save 15
    0     0            all  --  any    any     anywhere             anywhere            bandwidth --id total2-download-minute-359 --type combined --current_bandwidth 0 --reset_interval minute --intervals_to_save 359
    0     0            all  --  any    any     anywhere             anywhere            match-set local_addr_set dst bandwidth --id bdist2-download-900-24 --type individual_dst --reset_interval 900 --reset_time 900 --intervals_to_save 24
    0     0            all  --  any    any     anywhere             anywhere            bandwidth --id total3-download-180-479 --type combined --current_bandwidth 0 --reset_interval 180 --reset_time 180 --intervals_to_save 479
    0     0            all  --  any    any     anywhere             anywhere            match-set local_addr_set dst bandwidth --id bdist3-download-hour-24 --type individual_dst --reset_interval hour --intervals_to_save 24
    0     0            all  --  any    any     anywhere             anywhere            bandwidth --id total4-download-7200-359 --type combined --current_bandwidth 0 --reset_interval 7200 --reset_time 7200 --intervals_to_save 359
    0     0            all  --  any    any     anywhere             anywhere            match-set local_addr_set dst bandwidth --id bdist4-download-day-31 --type individual_dst --reset_interval day --intervals_to_save 31
    0     0            all  --  any    any     anywhere             anywhere            bandwidth --id total5-download-day-365 --type combined --current_bandwidth 0 --reset_interval day --intervals_to_save 365
    0     0            all  --  any    any     anywhere             anywhere            match-set local_addr_set dst bandwidth --id bdist5-download-month-12 --type individual_dst --reset_interval month --intervals_to_save 12

Chain delegate_forward (1 references)
 pkts bytes target     prot opt in     out     source               destination
10589 4514K forwarding_rule  all  --  any    any     anywhere             anywhere            /* user chain for forwarding */
 9991 4426K ACCEPT     all  --  any    any     anywhere             anywhere            ctstate RELATED,ESTABLISHED
  598 87667 zone_lan_forward  all  --  br-lan any     anywhere             anywhere
    0     0 zone_wan_forward  all  --  eth0.2 any     anywhere             anywhere
    0     0 reject     all  --  any    any     anywhere             anywhere

Chain delegate_input (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 ACCEPT     all  --  lo     any     anywhere             anywhere
 1803  246K input_rule  all  --  any    any     anywhere             anywhere            /* user chain for input */
  966  111K ACCEPT     all  --  any    any     anywhere             anywhere            ctstate RELATED,ESTABLISHED
  239 13692 syn_flood  tcp  --  any    any     anywhere             anywhere            tcp flags:FIN,SYN,RST,ACK/SYN
  496 51629 zone_lan_input  all  --  br-lan any     anywhere             anywhere
  341 83364 zone_wan_input  all  --  eth0.2 any     anywhere             anywhere

Chain delegate_output (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 ACCEPT     all  --  any    lo      anywhere             anywhere
 5340 1558K output_rule  all  --  any    any     anywhere             anywhere            /* user chain for output */
 1012  127K ACCEPT     all  --  any    any     anywhere             anywhere            ctstate RELATED,ESTABLISHED
 4165 1419K zone_lan_output  all  --  any    br-lan  anywhere             anywhere
  163 11727 zone_wan_output  all  --  any    eth0.2  anywhere             anywhere

Chain egress_restrictions (1 references)
 pkts bytes target     prot opt in     out     source               destination
 5304  913K egress_whitelist  all  --  any    any     anywhere             anywhere

Chain egress_whitelist (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain forwarding_lan_rule (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain forwarding_rule (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain forwarding_wan_rule (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain ingress_restrictions (1 references)
 pkts bytes target     prot opt in     out     source               destination
 5285 3601K ingress_whitelist  all  --  any    any     anywhere             anywhere

Chain ingress_whitelist (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain input_lan_rule (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain input_rule (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain input_wan_rule (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 ACCEPT     tcp  --  any    any     anywhere             anywhere            tcp dpt:ftp
    0     0 ACCEPT     tcp  --  any    any     anywhere             anywhere            tcp dpts:50990:50999

Chain output_lan_rule (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain output_rule (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain output_wan_rule (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain pf_loopback_B (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 ACCEPT     tcp  --  any    any     anywhere             Serwer_ASUS         tcp dpt:12345
    0     0 ACCEPT     udp  --  any    any     anywhere             Serwer_ASUS         udp dpt:12345
    0     0 ACCEPT     tcp  --  any    any     anywhere             Serwer_ASUS         tcp dpt:26900
    0     0 ACCEPT     udp  --  any    any     anywhere             Serwer_ASUS         udp dpt:26900
    0     0 ACCEPT     tcp  --  any    any     anywhere             WDR3600             tcp dpt:11111
    0     0 ACCEPT     udp  --  any    any     anywhere             WDR3600             udp dpt:11111
    0     0 ACCEPT     tcp  --  any    any     anywhere             Serwer_ASUS         tcp dpts:25000:25003
    0     0 ACCEPT     udp  --  any    any     anywhere             Serwer_ASUS         udp dpts:25000:25003

Chain reject (3 references)
 pkts bytes target     prot opt in     out     source               destination
   76  4939 REJECT     tcp  --  any    any     anywhere             anywhere            reject-with tcp-reset
  114 28999 REJECT     all  --  any    any     anywhere             anywhere            reject-with icmp-port-unreachable

Chain syn_flood (1 references)
 pkts bytes target     prot opt in     out     source               destination
  239 13692 RETURN     tcp  --  any    any     anywhere             anywhere            tcp flags:FIN,SYN,RST,ACK/SYN limit: avg 25/sec burst 50
    0     0 DROP       all  --  any    any     anywhere             anywhere

Chain zone_lan_dest_ACCEPT (9 references)
 pkts bytes target     prot opt in     out     source               destination
 4165 1419K ACCEPT     all  --  any    br-lan  anywhere             anywhere

Chain zone_lan_forward (1 references)
 pkts bytes target     prot opt in     out     source               destination
  590 85378 pf_loopback_B  all  --  any    any     anywhere             anywhere
    0     0 ACCEPT     all  --  br-lan br-lan  anywhere             anywhere
  598 87667 forwarding_lan_rule  all  --  any    any     anywhere             anywhere            /* user chain for forwarding */
    0     0 zone_lan_dest_ACCEPT  tcp  --  any    any     192.168.0.0/24       Serwer_ASUS         tcp dpt:12345 /* MC (reflection) */
    0     0 zone_lan_dest_ACCEPT  udp  --  any    any     192.168.0.0/24       Serwer_ASUS         udp dpt:12345 /* MC (reflection) */
    0     0 zone_lan_dest_ACCEPT  tcp  --  any    any     192.168.0.0/24       Serwer_ASUS         tcp dpt:26900 /* 7DTD (reflection) */
    0     0 zone_lan_dest_ACCEPT  udp  --  any    any     192.168.0.0/24       Serwer_ASUS         udp dpt:26900 /* 7DTD (reflection) */
    0     0 zone_lan_dest_ACCEPT  tcp  --  any    any     192.168.0.0/24       WDR3600             tcp dpt:11111 /* www (reflection) */
    0     0 zone_lan_dest_ACCEPT  udp  --  any    any     192.168.0.0/24       WDR3600             udp dpt:11111 /* www (reflection) */
    0     0 zone_lan_dest_ACCEPT  tcp  --  any    any     192.168.0.0/24       Serwer_ASUS         tcp dpts:25000:25003 /* 7DTD (reflection) */
    0     0 zone_lan_dest_ACCEPT  udp  --  any    any     192.168.0.0/24       Serwer_ASUS         udp dpts:25000:25003 /* 7DTD (reflection) */
  598 87667 zone_wan_dest_ACCEPT  all  --  any    any     anywhere             anywhere            /* forwarding lan -> wan */
    0     0 zone_lan_src_REJECT  all  --  any    any     anywhere             anywhere

Chain zone_lan_input (1 references)
 pkts bytes target     prot opt in     out     source               destination
  496 51629 input_lan_rule  all  --  any    any     anywhere             anywhere            /* user chain for input */
  496 51629 zone_lan_src_ACCEPT  all  --  any    any     anywhere             anywhere

Chain zone_lan_output (1 references)
 pkts bytes target     prot opt in     out     source               destination
 4165 1419K output_lan_rule  all  --  any    any     anywhere             anywhere            /* user chain for output */
 4165 1419K zone_lan_dest_ACCEPT  all  --  any    any     anywhere             anywhere

Chain zone_lan_src_ACCEPT (1 references)
 pkts bytes target     prot opt in     out     source               destination
  496 51629 ACCEPT     all  --  br-lan any     anywhere             anywhere

Chain zone_lan_src_REJECT (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 reject     all  --  br-lan any     anywhere             anywhere

Chain zone_wan_dest_ACCEPT (2 references)
 pkts bytes target     prot opt in     out     source               destination
  761 99394 ACCEPT     all  --  any    eth0.2  anywhere             anywhere

Chain zone_wan_forward (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 MINIUPNPD  all  --  any    any     anywhere             anywhere
    0     0 forwarding_wan_rule  all  --  any    any     anywhere             anywhere            /* user chain for forwarding */
    0     0 ACCEPT     tcp  --  any    any     anywhere             Serwer_ASUS         tcp dpt:12345 /* MC */
    0     0 ACCEPT     udp  --  any    any     anywhere             Serwer_ASUS         udp dpt:12345 /* MC */
    0     0 ACCEPT     tcp  --  any    any     anywhere             Serwer_ASUS         tcp dpt:26900 /* 7DTD */
    0     0 ACCEPT     udp  --  any    any     anywhere             Serwer_ASUS         udp dpt:26900 /* 7DTD */
    0     0 ACCEPT     tcp  --  any    any     anywhere             WDR3600             tcp dpt:11111 /* www */
    0     0 ACCEPT     udp  --  any    any     anywhere             WDR3600             udp dpt:11111 /* www */
    0     0 ACCEPT     tcp  --  any    any     anywhere             Serwer_ASUS         tcp dpts:25000:25003 /* 7DTD */
    0     0 ACCEPT     udp  --  any    any     anywhere             Serwer_ASUS         udp dpts:25000:25003 /* 7DTD */
    0     0 zone_wan_src_REJECT  all  --  any    any     anywhere             anywhere

Chain zone_wan_input (1 references)
 pkts bytes target     prot opt in     out     source               destination
  341 83364 input_wan_rule  all  --  any    any     anywhere             anywhere            /* user chain for input */
  151 49426 ACCEPT     udp  --  any    any     anywhere             anywhere            udp dpt:bootpc /* Allow-DHCP-Renew */
    0     0 ACCEPT     icmp --  any    any     anywhere             anywhere            icmp echo-request /* Allow-Ping */
  190 33938 zone_wan_src_REJECT  all  --  any    any     anywhere             anywhere

Chain zone_wan_output (1 references)
 pkts bytes target     prot opt in     out     source               destination
  163 11727 output_wan_rule  all  --  any    any     anywhere             anywhere            /* user chain for output */
  163 11727 zone_wan_dest_ACCEPT  all  --  any    any     anywhere             anywhere

Chain zone_wan_src_REJECT (2 references)
 pkts bytes target     prot opt in     out     source               destination
  190 33938 reject     all  --  eth0.2 any     anywhere             anywhere

10

Odp: Gargoyle - lighttpd

Wywal te przekierowania w firewallu które masz i po prostu otwórz port na wanie.

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

11

Odp: Gargoyle - lighttpd

Dopiero co zaczynam zabawę z linuxowymi routerami.
W GUI jak widzę nie ma, a internet zbyt dużo różnych wersji podpowiada.
Więc jak ten port otworzyć?

12

Odp: Gargoyle - lighttpd

http://eko.one.pl/?p=openwrt-konfigurac … estronywan

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

13

Odp: Gargoyle - lighttpd

Wbiłem i niby działa, ale zastanawia mnie to:

    0     0 ACCEPT     tcp  --  any    any     anywhere             anywhere            tcp dpt:www /* www */
    0     0 ACCEPT     udp  --  any    any     anywhere             anywhere            udp dpt:80 /* www */

zamiast portu może tam widnieć to "www"?

14

Odp: Gargoyle - lighttpd

W drugim poście spytałem czy otworzyłeś port na firewallu, co później ładnie skomentowałeś "Ad. 1 Port tak jak cały czas mówię odblokowany, nie pierwszy serwer stawiam." Więc jednak nie był.

80/tcp to przecież www. skoro nie zrobiłeś -n żeby nie tłumaczył nazw to wyświetla www zamiast numeru. To jest nazwa znanej usługi definiowana w /etc/services

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

15

Odp: Gargoyle - lighttpd

No tak jak mówiłem nie miałem okazji wcześniej używać routera z takimi możliwościami, i myślałem że wystarczy port przekierować jak dla każdego innego urządzenia w sieci.

A i jeszcze jedno.
Nawet jak mam zablokowany jakiś port, i próbuję wejść przez ip zewnętrzne z urządzenia w tej sieci to się to udaje. Czy można to jakoś zablokować?
Bo trochę irytuje że aby sprawdzić czy coś działa muszę robić to z internetu na telefonie, proxy, albo kogoś pytać.

16

Odp: Gargoyle - lighttpd

W openwrt domyślnie wszystko na wan jest zablokowane. Jeżeli masz dostęp to sam to otworzyłeś świadomie lub klikając jakiś "zdalny dostęp".  Albo przystawiłeś firewala.

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

17

Odp: Gargoyle - lighttpd

Chodzi mi o to że powiedzmy port jest zablokowany, nikt z zewnątrz nie może się połączyć.
Ale ja w mojej sieci, daję rade połączyć się przez zewnętrzne ip.
Np. Pod tym adresem oczywiście nic nie ma dominos96.tk:81, ale przy próbie wejścia z mojej sieci przekieruje mnie już na stronę konfiguracyjną routera.

18

Odp: Gargoyle - lighttpd

Tak, firewall cię odbija. Z wewnętrznej sieci się połączysz.

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.