Can't host my website on my linux server with my public ip only.Can't even ssh through it.lakshay.icu

Lakshay99 · 12-06-2022, 12:48 PM

i have enabled port forwarding for port 22 and 80,disabled firewall,nginx is working properly.My website name is lakshay.icu. I have tried everything.What am i doing wrong

jmgibson1981 · 12-06-2022, 02:11 PM

Do you have a business class plan? I know here in the states the average ISP doesn't like us running servers on home connections. Most ports are blocked in their stuff, doesn't matter what ports you open on your own router.

kermitdafrog8 · 12-07-2022, 02:28 AM

Do you have the option for DMZ in your router's configuration? Try putting your servers IP there. Maybe your port forwarding isn't set up correctly.

Lakshay99 · 12-07-2022, 03:35 AM

Quote:

Originally Posted by kermitdafrog8

Do you have the option for DMZ in your router's configuration? Try putting your servers IP there. Maybe your port forwarding isn't set up correctly.

i got that option thanks let me try to do it, what ip should i use internal or external?

Lakshay99 · 12-07-2022, 03:37 AM

Quote:

Originally Posted by jmgibson1981

Do you have a business class plan? I know here in the states the average ISP doesn't like us running servers on home connections. Most ports are blocked in their stuff, doesn't matter what ports you open on your own router.

it allows every port to be accessed locally and there is not business plan

Turbocapitalist · 12-07-2022, 07:16 AM

Quote:

Originally Posted by Lakshay99

it allows every port to be accessed locally and there is not business plan

Try checking to see if the ISP has blocked port 22:

https://canyouseeme.org/

Or try using ssh or nc from any remote system you might have access to.

elgrandeperro · 12-07-2022, 08:31 AM

As far as your website, your DNS points to your internal IP, not external. It is RFC1918 private range.

Lakshay99 · 12-07-2022, 09:25 AM

Quote:

Originally Posted by elgrandeperro

As far as your website, your DNS points to your internal IP, not external. It is RFC1918 private range.

How do i change that i am using namecheap for domain and noip.com for static ip

Lakshay99 · 12-07-2022, 09:48 AM

Quote:

Originally Posted by Turbocapitalist

Try checking to see if the ISP has blocked port 22:

https://canyouseeme.org/

Or try using ssh or nc from any remote system you might have access to.

Error:*I could not see your service on 103.206.100.251 on port (22)
Reason:*Connection timed out

TenTenths · 12-07-2022, 10:08 AM

Quote:

Originally Posted by Lakshay99

it allows every port to be accessed locally

which is meaningless, there's nothing in a generic ISP router that would block ports internally via wired connections.

Quote:

Originally Posted by Lakshay99

and there is not business plan

Ok, so you may find that all inbound "fun" ports like 22,80,443 are blocked by your ISP to stop people hosting public facing systems on their residential service (this would also be backed up by the fact that it looks like you're within a DHCP range).

Your external DNS is definitely screwed up as it's resolving from 8.8.8.8 as a 172.16.X.Y address.

The other address you mention 103.206.100.251 doesn't respond to ICMP ping, that may be intentional by you if you've disabled ICMP, although I doubt you set that up. So may be your ISP blocking at least that type of traffic.

You don't mention what your router is, if it's an ISP supplied one or your own.

One thing to be aware of is that if your IP shows up in a "residential" block then it's possible that many mail servers will reject e-mail you're trying to send. Especially if you're in a "known spam" country like India (sorry, blame the many, many spammers and 'Amazon Prime' scumbags that operate there).

Lakshay99 · 12-07-2022, 10:38 AM

Quote:

Originally Posted by TenTenths

which is meaningless, there's nothing in a generic ISP router that would block ports internally via wired connections.

Ok, so you may find that all inbound "fun" ports like 22,80,443 are blocked by your ISP to stop people hosting public facing systems on their residential service (this would also be backed up by the fact that it looks like you're within a DHCP range).

Your external DNS is definitely screwed up as it's resolving from 8.8.8.8 as a 172.16.X.Y address.And also can you tell me what changes do i need to make in order to successfully host my website
The other address you mention 103.206.100.251 doesn't respond to ICMP ping, that may be intentional by you if you've disabled ICMP, although I doubt you set that up. So may be your ISP blocking at least that type of traffic.

You don't mention what your router is, if it's an ISP supplied one or your own.

One thing to be aware of is that if your IP shows up in a "residential" block then it's possible that many mail servers will reject e-mail you're trying to send. Especially if you're in a "known spam" country like India (sorry, blame the many, many spammers and 'Amazon Prime' scumbags that operate there).

my router is default one my isp supplied of tenda

Turbocapitalist · 12-07-2022, 10:42 AM

Quote:

Originally Posted by Lakshay99

my router is default one my isp supplied of tenda

After you've fixed the DNS entry to point to the your external address, double check that the router is forwarding port 22 to the right system on your internal network.

Then if your ISP, Tenda, is using DHCP then you might have to also look into using a dynamic DNS service, either from your registrar Namecheap or somewhere else, to point to but that would come after figuring out basic connectivity.

Lakshay99 · 12-07-2022, 10:56 AM

Quote:

Originally Posted by Turbocapitalist

After you've fixed the DNS entry to point to the your external address, double check that the router is forwarding port 22 to the right system on your internal network.

Then if your ISP, Tenda, is using DHCP then you might have to also look into using a dynamic DNS service, either from your registrar Namecheap or somewhere else, to point to but that would come after figuring out basic connectivity.

I have done everything you said but i don't think it is working

Turbocapitalist · 12-07-2022, 02:35 PM

Your DNS entry seems to point to an IPv4 address in a netblock managed by NetMan Data Services:

Code:

$ dig lakshay.icu | grep -A1 'ANSWER SECTION'
;; ANSWER SECTION:
lakshay.icu.		1772	IN	A	103.206.100.251

So that step is completed.

However, is that the actual external address of your router or are you behind several layers of carrier grade NAT? Please log into the admin interface of your router from on your LAN and check what it says it has for an external address. If it does not match the above DNS entry but instead has something in either 10/8, 172.16/12, or 192.168/16 then you can't get there from here and will have to negotiate something with your ISP or else set up an Onion service.