Apache Help

I've been trying to set up an apache server on my comp for weeks now. A friend was first helping me out and then i found h3r3tic Tut on phpbb and tried using it for help. ZTO no avail though. I've installed apache 2.0.52 like it said using my ip i got from ipchicken as the domain and and server name. I tried using my browser to look for it then and it times out.
So i go to my router which is a Linksys Wireless G Broadband Router. I look through that and the only way i've found to forward a port range was under Applications and Gaming tab. So i did that forwarding it to the 192 IP i got from Belarc Advisor for my comp. I still time out when I search for my ip in the browser.

Please somebody help this is driving me crazy.

Hi Aden

Since that phpbb tutorial is dealing with WinXP pro I assume you have the same OS.
If I understood your problem correctly, the apache server does not work (sorry,
but English is not my native language and I got a bit confused). I would
try to track down the problem more systematically.

1. reinstall the apache server[1] again (as a service, automatic, make sure it has started,
ie the little apache icon shows a "green light")

2. try to test it (by getting the "installation successfull apache test page") on the same machine
by typing in a browser: http://127.0.0.1.
This might bypass most standard firewall configurations. If this works, at least
you know your apache server is running. This should work by default, without
setting up anything in httpd.conf (as virtual hosting or the like).
By default, the index.html file is taken from the DocumentRoot, e.g.
DocumentRoot "C:/test/apache2/htdocs"


3. try to test it on the same machine and type your "public" ip, given by ipconfig.
If it now does not work, a firewall might be in between.

4. extend the procedure from a computer in the same subnet (without any hops).

5. extend it further from a computer outside your subnet (the router configuration now takes place).

Hope this helps as a start.

Cheers

[1] http://httpd.apache.org/download.cgi

Yes the loopback address 127.0.0.1 works and some files i saved are there ready to be on the server. SO apache works. However i can not get any other cmoputer connected on the network to find it. So i'm thinking firewall i guess. I'm running zonealarm but even when i turn that completly off it stills doesn't work.

Hi

Good. Apache works, and we are at point 4.
If you ping the server-machine from the client-machine, does this work?
If so,
a) as you know, I guess, you need to enable 'outgoing port endpoint 80 on the client machine' on your firewall.
b) on the server machine, you need to enable 'incoming port localmachine 80 from remotepoint "arbitrary port"' on your firewall.

Make sure that you configure any firewall accordingly. Do not forget, that you might
have activated the XP firewall on the LAN connection. You can configure it as needed
by enabling the box at LAN.properties.advanced.settings."Web Server (HTTP)".

Usually, the XP firewall sets in after the 3rd party firewall software.

Cheers

ALright the server machine is hooked striaght into the router. THe host machine is connnected to a hub connected to the router.
They can both ping themselves.
The Server can ping the host.
but the host can not ping the server.

you wouldnt happen to have sp2 installed would you? my apache server didnt work untill i tweaked it alittle bit after i installed SP2....it would help though if you could give us alittle more info on your host and your server


server: os, few specs about pc
other comp on network: os. specs

alright no sp2 here
My server machine is running xp pro the same with the host. Um what else do you need?

hmmm...this is a shot in the dark but do you think the host may be useing something else on what ever port you are useing for apache?....presuming 80...and another maybe...but did you either set your server in the DMZ on your router or set up port fowarding...that my be a conflict aswell

Yes i've been persumeing port 80 i wouldn't know any reason why it wouldn't.
So i went back into my router i had port range forward configured i beleive.
My options were
application-(i didn't put anything here)
Start- 80
End-80
Protocol-both (options of TCP UDP both)
Ip address 192.168.1.(my last three digits)
Enabled-checked

I don't know anything about DMZ
in that page i had the options
enabled or disabled (tried both)
DMZ Host IP Address: (i put my servers IP here)

I really think it has to be something done on the computer i'm making the server because when i try doing run, cmd, and then try the command ipconfig /all the only thing it tells me is
my host name
Primary Dns Suffix....
Node type unknown
IP routing enabled yes
wins proxy enabled yes

Can you get to it from that computer using the 192.168.1.x address? Do you have the ICF turned on? Might want to portscan the machine remotely and see if it is listening on port 80.

win proxys enabled....thats out of my range...but i would sugest turning off your proxys and trying the server again

see Hexadecimal win proxys out of my league too. Normally i'm use to seeing all the IP and MAc stuff when i type ipconfig /all so i'm at a loss on how to turn them off.
zHENGER which computer for the 192? How do i check this ICF I guess i'll try that port scan.

I used GFI LAngaurd and i scanned my router and gives me the result of 80 HTTP so beleave this is set right.

Hi

First three comments:

1. ICF
You really should check settings of the "ICF", the Internet Connection Firewall,
or simply XP firewall. You are doing this by right-clicking on the network neighboorhood
icon, right-click on Local Area Connection, and continue as stated before:

Quote:

---

Do not forget, that you might
have activated the XP firewall on the LAN connection. You can configure it as needed
by enabling the box at LAN.properties.advanced.settings."Web Server (HTTP)".

---

2. WINS

WINS[1] resolves NetBIOS names. We here deal with IP-addresses,
so it doesn't matter. The WINS proxy helps to resolve NetBIOS
names for non-WINS clients. You can turn it on/off - it does not
matter here.

3. DMZ[2]

At the moment, the problem is that not even clients in the same subnet can
connect to the server. So let's forget about DMZ, since they usually deal
with two different subnets: Simplified, Internet <-> DMZ <-> LAN. Leave that
DMZ entry blank for the moment.


Setup

Forget about the router, because we usually do not need to route
if the clients/servers belong to the same physical network and subnet.

I assume the setup:
- server: 192.168.1.10
- client: 192.168.1.100

a) ICMP
Allow for all ICMP traffic. Try to be able to Ping the server from the client
first! If you cannot control this, you won't be able to control the traffic
of the webserver.

b) TCP
Client-firewall:
TCP Outgoing,
Local endpoint: Port/Range ~1024-5000
Remote endpoint: 192.168.1.10, Port 80

Server-firewalls (also ICF: click enable WebServer):
TCP Incoming
Local endpoint: Port 80
Remote endpoint: 192.168.1.100, Port/Range ~1024-5000

Quote:

---

My options were
application-(i didn't put anything here)
Start- 80
End-80
Protocol-both (options of TCP UDP both)
Ip address 192.168.1.(my last three digits)

---

Note, that this setup looks strange (a client does not connect to
a webserver on 80 from Port 80.).

Cheers


[1] http://www.serverwatch.com/tutorials...le.php/2193041
[2] www.giac.org/practical/gsec/Scott_Young_GSEC.pdf

Alright Sec_Ware

1. Taken care of ICF no firewall

2. Leaving WINS alone. It's not like i wouldn've know what to do with it anyways.

3. DMZ- I set the setting to disable.

Setup.

WHen you assume those two IP addresses are you just using them as an example or do they really need to be thouse IPs?

a)

Quote:

---

They can both ping themselves. The Server can ping the host. but the host can not ping the server.

---

I've run outta time but i'll try to finish up your ideas Sec_Ware. Thank you very much!

Hi

The IPs do not need to be like that. I used them
as an example since it is always advantageous to "fix the ideas".

Once you have solved the Ping-Problem (which is a firewall-problem
only, I guess), you will realise what is needed to establish a working
connection. Based on your description, it looks like the server does not
respond to the ping request. So "there is something" :) to be solved.

Quote:

---

Thank you very much!

---

You are very welcome. Keeping things like this actively in mind
is always good.

Cheers.

Your router is configued right to be start 80 end 80. This isn't the source and destination ports, its so you can specify ranges.

I'm going to make an example here and you can apply it to your personal network.
Server 192.168.1.50
Workstation 192.168.1.100

You said you can get to the page from the server using 127.0.0.1. Next step would be to try to get to it from the server using 192.168.1.50. If that works try getting to it via 192.168.1.50 from the workstation. Since both PCs are on the same LAN the router doesn't come into play. The router only matters for connectivity from outside your network. Hopefully this is what you planned.

As far as the portscan goes, from the workstation, portscan the 192.168.1.50 address. This will tell you if the machine itself is listening on that port.

Well i'm still at school and this is killing me that i'm not at home to work on this.
So haven't been able to try the rest of yours stuff Sec_ware but zENGER I've tried (Useing your example) 192.168.1.50 and it doesn't work. There inlies my problem.

This seems to have gotten a little off track my goal in getting this to work is to run a webpage and forum using my computer as a server. I think theres been some confusion since i've been using a "client" computer coneected on my lan to test the server setup.

I would venture to guess that if you portscan the server its not going to be listening on port 80. You have verified that the ICF is off and that you don't have any other firewalls running.

You don't by chance has more than one NIC in your computer? It sounds to me like apache isn't bound to the NIC card. I've never installed apached on a windows box so I don't know how to make this happen but I would assume its somewhere in the config files. Maybe someone here has more experience with apache on windows.

Another thing you might try is from the command prompt of the server type "netstat -a". This will tell you what ports your computer is listening on. If you see apache listening on port 80 then this is correct. If not then that means apache isn't in effect, "turned on".

You might want to look into this idea. You can visit http://www.securityfocus.com/tools/139/scoreit and get a copy of netcat for windows. Use this utility to listen on port 80 on your server and then from the workstation see if you can connect, or even portscan the box and see if port 80 is open then. If this doesn't work then its a firewall issue. If this does work then its an apache issue. Make sure you disable apache before starting netcat.

As far as getting off track, once you get the box servicing the web page locally then you can worry about getting it to service via the internet. Have to take baby steps.

Quote:

---

You don't by chance has more than one NIC in your computer? It sounds to me like apache isn't bound to the NIC card.

---

I'm running Win XP pro and in my network connections i've two connections under LAN or HIGH-SPEED Internet.
One says it's
Local Area Connection
Enabled
NVIDIA nForce MCP Networking Ada...

I beleive this is my internet seeing that if i disable it I lose my connection there is also another one here.

1394 Connection
Enabled
1349 Net Adapter

I have no idea what this one is. It doesn't do anything when i try to disable it.
Kinda confused about this i don't remeber setting it up at all of course it has been a long time.

EDIT: About two minutes after i tried it the 1394 Connection suddenly disabled.

Hi

I continue with zENGER's suggestions and will try to go a bit more
into detail. But try to get under control that pinging problem
(you cannot ping the server from the client). I have the feeling
that this is based on the same "problem" as the apache server, which
does not work, but maybe simpler to analyse.


On a WinXP box, as mentioned, the most useful command in that context
(determine port and listening program) you can use
(on the server, in a command shell) is

> netstat -ano

This gives you information about local ports and their status (listening, established, ...).
Eg.

TCP 0.0.0.0:80 0.0.0.0:0 LISTENING 1952

This means, that the PID 1952 (an identification number of the program. This can be
different on your machine of course) is listening on port 80 locally, for all incoming
connections.

Using

> tasklist /SVC

you get the PIDs versus program names. At PID 1952, this should be your apache.exe
with service Apache2.

Finally, it would be interesting to see the routing table using

> netstat -r
or
> route PRINT

We will, hopefully, see that the "usual" network traffic is sent to the
IP of your NIC (Local Area Connection), where the cable actually is plugged in.
Since on the server itself, localhost and the local test with (eg) 192.168.1.10
did work, I am very positiv that the routing table is fine. However, maybe I didn't
get you right, so I ask:

On your server machine itself, (with IP 192.168.1.10 or 192.168.1.50, depending on your
choice) did typing "http://192.168.1.10" or "http://192.168.1.50" in a browser show
you the apache test page?




Ending, ... :)
- (IEEE) 1394 is essentially the firewire support[1]
- NVIDIA nForce MCP Networking Adapter.
I don't know that one, but using "route PRINT" it will identify itself with
an interface number 0x10004 (depending on your hardware configuration) and
will correspond to some miniport. It hopefully will be routed to at 255.255.255.255.


Good luck.

Cheers




[1] http://english.aopen.com.tw/tech/tec...e/ieee1394.htm

First off you'll have to excuse me guys i'm trying to keep up and i truly thank you for all your help.

zENGER:
I did not find anything on port 80 using "netstat -a"
However

Sec_Ware
netstat -ano i found TCP 0.0.0.0:80 0.0.0.0:0 LISTENING 80 PID=1528
ok then
tasklist /svc PID 1528 Image name is Apache.exe and Service is Apache2
So far so good
netstat -r

EDIT: By request this is my results from the command.
Route Table
===============================================================
Interface List
0x1......................................MS TCP Loopback interface
0x2...00 50 8e 4d 78 3d .....NVIDIA nForce MCP Networking Adapter - Packet Scheduler Miniport
===============================================================
===============================================================
Active Route:
Network Destination Netmask Gateway INterface Metric
192..168.1.10 255.255.255.255 192.168.1.10 192.168.1.10 20


Pretty sure this is right here now. I went into my TCP/IP settings and made myself a static IP instead of automatic.
THis brings me to your next point.

Quote:

---

On your server machine itself, (with IP 192.168.1.10 or 192.168.1.50, depending on your choice) did typing "http://192.168.1.10" or "http://192.168.1.50" in a browser show you the apache test page?

---

Before when i typed in my 192 address nothing happened it timed out. BUt no after setting up the Static IP i am able to do this. So no problems there.

Unfortunatly when i type in my IP the web see that i got from IPCHICKEN.com it still times out.
At least this is a step forward this time. YEAH!

Cheers!


EDIT: Wait a second! desregaurd all of that. I forgot to turn off my ZOnealarm firewall when i stared up this time.
After it was off i tried it and it work!
THANK YOU THANK THANK YOU!

Remind me to get you a drink to go cheers with Sec_Ware and you too zENGER!



Edit: So when i set out on this quest my goal was to get all the way through h3r3tic's tutorial on setting up phpbb. Now with the server problem solved on i'm to more and greater problems i beleave. I think the newer version of the software he mentions are messing some things up.
I beleave i've gotten myslef to set 4 in the tut h3r4tic's tut
unfortunatly it won't bring up the install page for phpbb.
I've only worked on this for a little bit but i need to get some nest seeing that i'm now going on 21 hours being awake.

I'm not sure if anyone saw the last edit i made on my last post but i've made a little more progress now except there seems to be a hoel in the tut.

Quote:

---

go back to the php install page. (by the way if you were never able to see this page php isn't working) and put everything back the same as before except for the database name. Change that to board. now click install. if this didn't work i don't know what to say.

---

I'm following along line by line and it didn't work so i'm wondering if anyone else knows what to say?



Let me back up a little bit i had to mess with a little to get a couple of lines beofre this to work.

Quote:

---

Now click install. If this didn't work we are going to have to make a database. at the command prompt cd into the c:\mysql\bin directory and type mysql -u root -p

---

I could not find that dir but after a little search i found mysql in my program files folder.
Unfotunatly there was no bin. The only folder there was was MySQL Server 4.1 and that is where i found my bin folder.

So i just went to "c:\program files\MySQL Server 4.1\bin then and used the mysql -u root -p command. This worked fine and i went throught the next part.

Quote:

---

when it prompts you for a password type your password chosen earlier.now type create database board; then hit enter and type use board;

---

That brings me to the point i discribed at the beginning of the post.
First i tried just install again and got this.
phpBB : Critical Error

Could not connect to the database

Then i tried what h3r3tic said and changed the database name to board and i got the same error message.

I'm so close but yet so far!


EDIT: FOLLOW UP! I got it all to work although it does seem a little sluggish. SOmetimes pages don't come up on the forum and i have to refresh a half dozon times.

Anyway i'm wondering what file to edit to get rid of that APche your server works screen.