Problem configuring router for web server use

[raleighl]

I have been working on this for several days now and have run out of options - hope you csan help

My ISP is Verizon using FIOS. I have an actiontec M424-WR rev D router.

Verizon blocks the following ports (maybe more): 80, 8080, 23, 443, 8443.

My web server is Abyss X1, configured to use port 2555 which Verizon does not block.

I have set a static IP address (outside the DHCP range) for the system where the web server resides and have port forwarded port 80 to port 2555 for that IP address. the router firewall security level is set to "medium".

If I point to port 2555 at that IP address from behind the router everything is fine - the web page I created displays OK.

If I take my laptop outside the router and try to connect to the web server through the same IP and port I get a time out error while trying to connect. If I try to connect with default port (80) I get a no connect error.

What am I doing wrong?

[johnwill]

What do you get if you do a port scan of that port from the ShieldsUp site?

[raleighl]

Thanks for replying.

When I do a port scan of 2555 to the WAN IP of the router it is "open".

When I do a port scan of 2555 to the static LAN IP of the web server system it times out as if it were blocked.

[raleighl]

This is what I get when I use the shieldsup tester pointing to the WAN IP of the router:


GRC Port Authority Report created on UTC: 2008-06-01 at 00:15:59

Results from scan of ports: 0-1055

0 Ports Open
1051 Ports Closed
5 Ports Stealth
---------------------
1056 Ports Tested

NO PORTS were found to be OPEN.

Ports found to be STEALTH were: 23, 80, 135, 443, 992

Other than what is listed above, all ports are CLOSED.

TruStealth: FAILED - NOT all tested ports were STEALTH,
- NO unsolicited packets were received,
- A PING REPLY (ICMP Echo) WAS RECEIVED.

[raleighl]

Shieldsup for port 2555 results below:

Port 2555
Status OPEN! compaq-wcp

[raleighl]

Can't anyone help me with this issue? I desperately need some assistance with this. Either tell me I can't do it or tell me how I can or refer me to a forum where someone else can, please.

[johnwill]

If you're translating port 80 to port 2555, you're expecting Verizon to allow port 80 through on the WAN side, they're not going to do that as you've already found out.

[raleighl]

OK, so what do I need to do?

[rbraitz]

if you are outside your network, look up your public ip (WAN) and try this in the url...assume your ip is 70.70.70.1

http://70.70.70.1:2555 this should work.....assuming you have your port forwarding set up properly...I just posted a thing about Actiontec support telling me to create a dmz. Let me know if this works....

[raleighl]

Some progress has been made.

I changed my port forwarding so that port 2047 was forwarded from the WAN IP of the router. I also set the active port of the web server (I use Abyss X1) to 2047 as well.

Had a friend try connecting to that IP and port and they got a 403 Forbidden response from the web server. I think that means she got through but I'm still unclear why my web page didn't display for her. Any thoughts? Thanks very much for your help so far.

[raleighl]

Thank you for your help. The 403 error was because I had not changed a configuration of the web server from a port that I had it pointing to previously. Re-pointed it to the correct port and now it works.