Can't access machine from WAN

[aetolus]

Hi there,

Hope this is the appropriate forum, and hopefully someone here can help me =)

I'm currently running a webserver on Ubuntu linux, behind a Thomson Speedtouch 510. I have a registered domain which is zps-technologies.com pointing to my static IP (203.173.160.41) using Zoneedit nameservers. The problem I'm having is that recently I can't access my machine whatsoever outside of my LAN.

Pinging it from here times out. Tracing it comes up with the result

203.173.160.41 is from New Zealand(NZ) in region Oceana
 
 
TraceRoute to 203.173.160.41 [203-173-160-41.static.ihug.co.nz]
Hop    (ms)    (ms)    (ms)        IP Address    Host name
1    20    14    10        72.249.134.177    -
2    48    63    23        8.9.232.73    xe-5-3-0.edge3.dallas1.level3.net
3    15    18    18        4.68.19.126    vlan79.csw2.dallas1.level3.net
4    21    24    15        4.69.136.157    ae-73-73.ebr3.dallas1.level3.net
5    42    38    50        4.69.132.77    ae-3.ebr2.losangeles1.level3.net
6    41    52    40        4.69.137.22    ae-72-72.csw2.losangeles1.level3.net
7    41    52    62        4.69.137.37    ae-73-73.ebr3.losangeles1.level3.net
8    55    55    53        4.69.132.9    ae-2.ebr3.sanjose1.level3.net
9    57    56    57        4.69.134.234    ae-83-83.csw3.sanjose1.level3.net
10    59    49    63        4.68.18.131    ae-31-89.car1.sanjose1.level3.net
11    66    64    57        4.53.16.34    vocus-conne.car1.sanjose1.level3.net
12    190    186    181        114.31.199.37    -
13    200    186    190        114.31.203.37    -
14    187    177    187        203.109.130.133    -
15    179    178    182        203.109.130.134    gi5-1-0.akl-grafton-edge1.ihug.net
16    202    241    246        203.109.143.102    gi6-0-0.akl-grafton-bras1.ihug.net
17    Timed out    Timed out    Timed out            -
18    Timed out    Timed out    Timed out            -
19    Timed out    Timed out    Timed out            -
20    Timed out    Timed out    Timed out            -
 
Trace aborted.

I've had port forwarding set up, and also tried (although not recommended) switching off the firewall in my router completely just to see if the latest firmware changed something.

Any help would be much appreciated!

[wimiadmin]

Do you have firewall settings turned on in Ubuntu?

Do you have a browser in Ubuntu? If you do have a browser, can you get to http://localhost/

[aetolus]

Hey there,

Firewall settings are off. and yes I can access it using http://localhost

It was working before, then all of a sudden stopped working. If it helps anything, it stopped working right after I changed my account with my ISP to having a static IP instead of dynamic. However their tech support was no help =)

[wimiadmin]

Did you forward port 80 on the router to your Ubuntu web server?

If I do an nslookup on zps-technologies.com, I get your static IP returned to me....which means DNS is set up correctly. I did a tracert as well and my tracert stops at exactly the same place your tracert does after 203.109.143.102.

With your firewall off and you being able to access the site via localhost, that tells me your web server is configured correctly...along with the fact that you said it was working before.

You said you did a firmware update on the Speedtouch. Instead of disabling the firewall see if you can put the Ubuntu server in the DMZ or just forward port 80 to that server. Another idea would be to setup an ftp on the Ubuntu and see if you can access the server from outside then. try it on the standard port 21 and if you can't connect, try it on an odd ball port like 10000 and see if you can connect. If you can to the ftp using either port, then the ISP has blocked port 80....for whatever reason.

Basically, we need to exhaust all means of being able to connect to the Ubuntu server to help narrow down this problem. Trying the various connection methods will tell us if it's a problem at the ISP or at the Speedtouch.

[AboveTheLogic]

yeah I don't see anything open at that host:

$ nmap 203.173.160.41

Starting Nmap 4.62 ( http://nmap.org ) at 2009-05-30 10:05 PDT
Note: Host seems down. If it is really up, but blocking our ping probes, try -PN
Nmap done: 1 IP address (0 hosts up) scanned in 2.083 seconds
$ nmap -PN 203.173.160.41

Starting Nmap 4.62 ( http://nmap.org ) at 2009-05-30 10:05 PDT
All 1715 scanned ports on 203-173-160-41.static.ihug.co.nz (203.173.160.41) are filtered

Nmap done: 1 IP address (1 host up) scanned in 345.392 seconds