Ubuntu – How to un-firewall port 80 on AWS Ubuntu Raring

apache-2.2firewallnetworkingUbuntuufw

I have a web server I'm trying to make accessible, and although from the command line I get a connection by typing telnet localhost 80, it refuses nonlocal connections. The server is an AWS EC2 node, with a security group of quick-start-1 (22 and 80 are open), and the server has UFW installed, and I have already run ufw allow 80. ps wwaux | grep apache2 shows one root and six www-data processes.

What are the other possibilities for firewalls within the AWS Ubuntu Raring node, or between the node and my notebook? How can I disable the ?ghost firewall?, without compromising my system, so that it is available on port 80?

The system is available on port 22 and it has never given me trouble remotely accessing port 22.

The system is also quite new, and I tried to follow the instructions at https://help.ubuntu.com/community/Drupal.

Best Answer

I would say its a problem with the security group. Make sure apache is installed and traffic from 0.0.0.0/0 is allowed to port 80 on the security group.

You can disable the firewall by doing ufw disable. likewise to enable is ufw enable.

Change security group to allow http(80), https(443), ssh(22), ftp(21) Set up ufw on server to allow http(80), https(443), ssh(22), ftp(21)

Probably also assign an elastic ip to make things easier.

Related Solutions

Firewall – How to remotely disable Firewall on Windows XP

Group Policy is the best answer for this. All of the firewall settings can be set and enforced through this method.

Cannot port forward with UFW on Ubuntu

Turns out there are a few more configuration steps that are needed to allow general traffic to flow:

At the top of /etc/ufw/before.rules, before the *filter section

*nat
:PREROUTING ACCEPT [0:0]
-A PREROUTING -i enp0s8 -p tcp --dport 8080 -j DNAT --to 10.0.3.101:80
COMMIT

And near the bottom, before the final COMMIT:

-A FORWARD -o lxcbr0 -j ACCEPT
-A FORWARD -i lxcbr0 -j ACCEPT

-A INPUT -p udp --dport 53 -i enp0s8 -m state --state NEW -j ACCEPT
-A INPUT -p tcp --dport 53 -i enp0s8 -m state --state NEW -j ACCEPT
-A INPUT -p udp --dport 67 -i enp0s8 -m state --state NEW -j ACCEPT
-A INPUT -p tcp --dport 67 -i enp0s8 -m state --state NEW -j ACCEPT

At the top of /etc/ufw/after.rules, before the filter section:

*nat
:POSTROUTING ACCEPT [0:0]
-A POSTROUTING -s 10.0.3.0/24 ! -d 10.0.3.0/24 -j MASQUERADE
COMMIT

That did it for my test environment, as outlined in the problem description.

Best Answer

Related Solutions

Firewall – How to remotely disable Firewall on Windows XP

Cannot port forward with UFW on Ubuntu

Related Topic