I am unsure whether this is virtualmin or webmin. I have been at university (living in halls), managing a server at the university (although several miles away), which I guess is on the same network so it doesn't go via the internet (based on a ping of <5ms).
I have just got home and am unable to access my server using http or https from this network, however if I SHH into the server and run google-chrome and then visit 127.0.0.1:10000 everything works fine. I can access other services on the server such as :80 or vent but not virtual/webmin.
Have I done something wrong? Do I need to turn on external access or something?
My disallowed file is empty as far I am can tell.
Many thanks for your time,
Howdy,
Well, try restarting Webmin, using: /etc/init.d/webmin restart
Does that help?
If not, what kind of error are you seeing?
There's a variety of things that could be contributing to the problem -- firewalls, NAT routers, and other related issues. Let us know what error/symptoms you're seeing and we can work from there :-)
-Eric
Provided that Webmin is listening on all interfaces, this sounds to me like an external firewall is blocking port 10000.
You can use the command
netstat -ltnpto check what Webmin is listening to. You should see a line with the port number :10000, if the IP is 0.0.0.0, then it's okay; if it's 127.0.0.1, then Webmin is only listening on localhost.You can also try
iptables -L -vto make sure there's no local firewall blocking stuffs.Many thanks for you time,
Restarting rebooted as I expect it should do (see bottom of post).
Trying to access the ip (which I guess is safe to post here) - https://130.88.149.86:10000/ - Results in 'Sending request...'s' and then fails with could not connect, in Chrome 'Oops! Google Chrome could not connect to 130.88.149.86:10000'.
However loading :80 is pretty instant.
As far am I am aware the server is corrected directly to the internet (in the university DMZ) so I don't think a firewall could be getting in the way.
What else do you suggest?
Thanks again,
"pez@brave:~$ sudo -i [sudo] password for pez: root@brave:~# /etc/init.d/webmin restart Stopping Webmin server in /usr/share/webmin Starting Webmin server in /usr/share/webmin Pre-loaded virtual-server/virtual-server-lib-funcs.pl in virtual_server Pre-loaded virtual-server/feature-unix.pl in virtual_server Pre-loaded virtual-server/feature-dir.pl in virtual_server Pre-loaded virtual-server/feature-dns.pl in virtual_server Pre-loaded virtual-server/feature-mail.pl in virtual_server Pre-loaded virtual-server/feature-web.pl in virtual_server Pre-loaded virtual-server/feature-webalizer.pl in virtual_server Pre-loaded virtual-server/feature-ssl.pl in virtual_server Pre-loaded virtual-server/feature-logrotate.pl in virtual_server Pre-loaded virtual-server/feature-mysql.pl in virtual_server Pre-loaded virtual-server/feature-postgres.pl in virtual_server Pre-loaded virtual-server/feature-ftp.pl in virtual_server Pre-loaded virtual-server/feature-spam.pl in virtual_server Pre-loaded virtual-server/feature-virus.pl in virtual_server Pre-loaded virtual-server/feature-webmin.pl in virtual_server Pre-loaded virtual-server/feature-virt.pl in virtual_server Pre-loaded virtual-server/feature-virt6.pl in virtual_server Pre-loaded WebminCore root@brave:~# "
My suggestions I listed in my first post. :)
I tested connecting to the IP you mentioned. As you said, port 80 and 22 are open, and 10000 times out. That means it's not due to "no service is listening" (in that case, the connection failure message would occur immediately), but packets to that port are actively dropped.
My assumption is still a local or external firewall/packet filter.
Trying your suggestions "tcp 0 0 0.0.0.0:10000 0.0.0.0:* LISTEN - "
and
"Chain INPUT (policy ACCEPT 54M packets, 20G bytes) pkts bytes target prot opt in out source destination
0 0 ACCEPT udp -- virbr0 any anywhere anywhere udp dpt:domain 0 0 ACCEPT tcp -- virbr0 any anywhere anywhere tcp dpt:domain 0 0 ACCEPT udp -- virbr0 any anywhere anywhere udp dpt:bootps 0 0 ACCEPT tcp -- virbr0 any anywhere anywhere tcp dpt:bootps"
======
I would be very surprised if there is a firewall as I seem to be able to use any port I wish, is there a way I can forward a port to virtualmin?
Yeah, something, somewhere, is blocking port 10000. I'm not sure where yet :-)
Is your server behind a NAT router?
If so, you'd want to make sure that router is forwarding port 10000 into your Virtualmin server.
-Eric
I'm not to sure... how do I find out?
My traceroute from the server to Google
"Traceroute to google.com"? What does that have to do with the problem at hand? :)
If anything, then a traceroute to the server in question would be useful. And, please put screen outputs in
If you don't know yourself about how the network at the university that connects the server is set up, you should ask the administrators of the systems in question if there is a firewall or router that needs to be configured. My assumption is that some firewall is set up to allow only certain ports in. I know that we have such a setup at my university (and I also know whom I must email when I need a port for one of our systems opened :) ).
The previous was from the server to google xD
Guessing based on the names of servers it goes though it has [codeManchester Network Node Manager Gateway for the Uni Gateway for "RH" Gateway for KB (building server is in)[/code]
I didn't know that this forum supported code will use from now on! If there is a firewall I am very surprised but I have no idea who to email, maybe i'll have to follow the fiber cable!
Is there a way I can map another port to https://127.0.0.1:10000 so when external I can use a different port?
I'm quite sure there is some kind of IT department at your university where you can ask about the network setup and possible firewalls that are "in the way" to your server? :) If in doubt, query your NIC or Whois or ARIN for contact information of who's responsible for the domain names / IP ranges involved.
As for port number, you can certainly configure Webmin to listen to a port other than 10000. Though if only certain ports are open from the outside, that won't help, except you set it to port 80 (or another open one that is not yet in use). :)