Forum OpenACS Q&A: Port 80 blocked by router? Or the software guy blames the hardware guy.

I have a system which has had a very frustrating install, and I'd like to blame it on someone's router but I don't know how to track it down.

It would appear that port 80 is blocked.  The system is running RH 8.0.  I stop iptables and then start a webserver on port 80.  I cannot connect to it from a different machine outside the local network.  I can connect to it if I start on the machine itself.  I don't know what happens if I try from another machine on the same subnet.

If I stick the webserver on ANY OTHER port, everything works fine.

How do I determine where PORT 80 is getting blocked?

I'm blocked on this one myself, can someone offer me a clue purgative?

Thanks,

Is Apache installed?  Is xinetd watching port 80?

Is there anything in the log about not being able to bind port 80?

Ok, here's how I would track this down.  I'd get the permission to do this from all the admins involved, though, as what I'm going to describe will be detected by most IDS's as an intrusion attempt.

I would runt a standard traceroute to see what hosts lie on the path from you to the server in question.  Then, I'd run an nmap idlescan ( see http://www.insecure.org/nmap/idlescan.html ) using each host on the path as the zombie along the way.  This can allow you to find where port 80 is being blocked.

Turns out it was a router serving the entire site.  The network engineer routinely blocks port 80 to keep code red out of his network.

Thanks for the help, Lamar, thanks for the suggestion of nmap's idlescan.