Hi,
We have an application that needs ports listening to 80/443 to requests a ceritificate, we thought that the issue is on the external facing since the public IP is NAT'ed to this local server. On the external side we set to allow any just for troubleshooting purposes. So on the internal side I did a command sudo netstat -tulpn | grep LISTEN to check for listening ports and it showed the output below
tcp 0 0 127.0.0.53:53 0.0.0.0:* LISTEN 753/systemd-resolve
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1198/sshd
tcp6 0 0 :::80 :::* LISTEN 1803/docker-proxy
tcp6 0 0 :::22 :::* LISTEN 1198/sshd
tcp6 0 0 :::443 :::* LISTEN 1790/docker-proxy
port 22(SSH) is working internal or external, so I can see that ports 80 and 443 listens to ipv6, I tried disabling IPv6 by putting the following commands
net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1
net.ipv6.conf.lo.disable_ipv6 = 1
reboot the server but still the same issue. I need ports 80 and ports 443 to listen to ipv4, tried researching but can't find one.
Appreciate any help
Thanks
tech-jeff
We have an application that needs ports listening to 80/443 to requests a ceritificate, we thought that the issue is on the external facing since the public IP is NAT'ed to this local server. On the external side we set to allow any just for troubleshooting purposes. So on the internal side I did a command sudo netstat -tulpn | grep LISTEN to check for listening ports and it showed the output below
tcp 0 0 127.0.0.53:53 0.0.0.0:* LISTEN 753/systemd-resolve
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1198/sshd
tcp6 0 0 :::80 :::* LISTEN 1803/docker-proxy
tcp6 0 0 :::22 :::* LISTEN 1198/sshd
tcp6 0 0 :::443 :::* LISTEN 1790/docker-proxy
port 22(SSH) is working internal or external, so I can see that ports 80 and 443 listens to ipv6, I tried disabling IPv6 by putting the following commands
net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1
net.ipv6.conf.lo.disable_ipv6 = 1
reboot the server but still the same issue. I need ports 80 and ports 443 to listen to ipv4, tried researching but can't find one.
Appreciate any help
Thanks
tech-jeff