3BB closed my port 80? Looking for confirmation and options

[Lopburi99]

Greetings. For a year now I've been doing Raspberry Pi development, specifically webserver activities. Six months ago I was hosting a few little websites using Lighttpd or Apache2 virtual hosting on my Pi. Then upon returning from the U.S., I recently I tried to install the WordPress Jetpack plugin and found it would not be complete because "site must be public accessible". Port check tools confirmed port 80 is not open. 8080 is but I am to expect public users learn to append :8080 after my domain name? I don't think so.

I am looking forward to a confirmation that yes, 3BB does this things and secondly, what are my options? I would be willing to pay more for an opened port 80 but not a lot. Thanks

[2008bangkok]

Port 80 is normal http traffic so you cannot do normal browsing?

[Lopburi99]

My server "listens" to port 80 for incoming requests to open my website. Outgoing is fine. Sorry for not clarifying.

[manarak]

the ports are open within Thailand, somehow international incoming connections are refused

[Lopburi99]

All of my future users will be in the U.S. unfortunately so unless I/we come up with a workaround I'd be forced to use commercial hosting. That defeats everything I've been trying to do.

[Lopburi99]

I guess I should contact 3BB and see what they recommend I do. Why am I not optimistic?

[2008bangkok]

Is the site publicly accessible? Do our have a public ip and the machine is configured with that ip or do you port forward from the router to a internal ip through your firewall??

[Lopburi99]

I disabled my Windows 7 firewall, problem remained. I have public IPs registered through GoDaddy. My router, a Huawei 521c (another headache to talk about another time) forwards incoming HTTP traffic to my local area network's static port 99.

[manarak]

All of my future users will be in the U.S. unfortunately so unless I/we come up with a workaround I'd be forced to use commercial hosting. That defeats everything I've been trying to do.

I'll be interested to hear the answer from 3BB, but if you are trying to host a public website, I don't think this should be allowed.

Incoming international traffic is the most expensive for providers.

[manarak]

I disabled my Windows 7 firewall, problem remained. I have public IPs registered through GoDaddy. My router, a Huawei 521c (another headache to talk about another time) forwards incoming HTTP traffic to my local area network's static port 99.

Incoming international connections are blocked at 3BB network level.

There is nothing you can do, except maybe setup a permanent VPN network bridge, but this requires network components abroad...

[2008bangkok]

I disabled my Windows 7 firewall, problem remained. I have public IPs registered through GoDaddy. My router, a Huawei 521c (another headache to talk about another time) forwards incoming HTTP traffic to my local area network's static port 99.

Incoming international connections are blocked at 3BB network level.

There is nothing you can do, except maybe setup a permanent VPN network bridge, but this requires network components abroad...

That's bad of them, next option switch to true

[KittenKong]

I dont see why an ISP should provide bandwidth for people to do webhosting if they are only paying for a regular domestic package.

If people want to do webhosting there is probably a more expensive business package that allows this.

Or they can do their hosting on a server, which after all is what they are for.

[2008bangkok]

I dont see why an ISP should provide bandwidth for people to do webhosting if they are only paying for a regular domestic package.

If people want to do webhosting there is probably a more expensive business package that allows this.

Or they can do their hosting on a server, which after all is what they are for.

Well we lucky your not his ISP,

Do they also block port 443? Maybe the op could use that instead ad tell his customers he only user secure connection

[manarak]

Well, OP could use a foreign box and run Nmap on the domain and see the results.

[IMHO]

Most domestic plans I've had explicitly forbid hosting content, so probably just an enforcement of that type of policy.

It is possible with a business ISP plan though - talk to 3BB and whoever else has cables/towers nearby.

[IMHO]

Port 80 is normal http traffic so you cannot do normal browsing?

When you connect to server using port 80, it's only port 80 at the receiving end - your PC will pick a random port for receiving data back on.

[Lopburi99]

It is annoying but not the end of the world. I'll buy a Pi for my daughter in Michigan and send an imaged SD to her. I can SSH or Remote Desktop into it from here for further development or maintenance. Switching to True isn't worth trying to explain to the family why. Thanks guys. Now I understand all I need to know. Note to self: send 2 SDs in case overclocking eats one. And also teach her how to backup and restore images. Too bad there isn't a fast way to transmit about 7Gb. Or is there? Maybe Raspbian image files can be compressed. Plus, aren't there ways to FTP with multiple streams? Maybe there is a way to transmit an image in an acceptable time period, like overnight, after all. Comments welcome.

[Lopburi99]

Do they also block port 443? Maybe the op could use that instead ad tell his customers he only user secure connection

Unfortunately 443 is also blocked 2008bangkok. That would have been a good solution.

[Lopburi99]

Jeez, I just tested the SSH port 22. It is blocked too! BB3 doesn't allow SSH? FTP port 21 is open at least.

[innerspace]

I use 3bb and can access port 80 remotely from within Thailand, not tried from overseas.

Can also access port 80 on cat and tot lines. You may be blocked but I cant yet confirm it is all of 3bb, will need to investigate. Could be a local router or firewall.

[Turkleton]

Hmm, sounds more like a mis-configured router or missing/wrong Portforwarding...

Otherwise, all secured (and standard) websites in TH would not be accessible from the rest of the world.

When I had 3BB some time ago, I had never any issues, to access the Apache on 443 or 80 from overseas, or sshing into the machine on port 22.

I now use TOT, but just for fun, I checked these ports from a machine in EU a few min. ago and everything is fine.

[Lopburi99]

Turkleton, everything worked fine for me for almost a year starting last fall. I just made an attempt to call 3BB technical support but was unsuccessful in communicating with the support desk, so I sent an explanatory email. I received a prompt reply stating my problem was referred to technical support.

[Tywais]

I went through this recently with 3BB when I setup a private cloud at home. Spent a lot of time investigating it and 3BB indeed blocks incoming 80 but 443 (SSL) was open and since I wanted my cloud access secure anyway it worked out for me. But, as mentioned, many ISPs will block incoming port 80 to prevent home users setting up a website as they are suspicious it may be commercial and cut into the traffic. Since I do not have a static IP, I use No-Ip and port forwarded on my router port 443 to my apache server. Port 80 (3BB) shows closed on all websites that have port scanners to test for open ports but 443 ok.

[Turkleton]

But, as mentioned, many ISPs will block incoming port 80 to prevent home users setting up a website as they are suspicious it may be commercial and cut into the traffic......

Well, never heard about this before, not here and not in my Home country (Germany) or elsewhere.

However, who want's to setup a "home server" with these crappy Upload speeds?

5-10 concurrent connections and everything is down...

I've rented a VPS in Singapore for just 5$/month and even if you don't want to set up a web server on it, you can at least install a redirect to your home servers non-blocked ports.

Useful or not, hmm....

EDIT: If you have a "no-ip.com" Dyndns account, they can establish a redirect too.

[Tywais]

But, as mentioned, many ISPs will block incoming port 80 to prevent home users setting up a website as they are suspicious it may be commercial and cut into the traffic......

Well, never heard about this before, not here and not in my Home country (Germany) or elsewhere.

Just type into a search engine, ISP blocking incoming port 80, and you will see it is wide spread. And yes, no-ip has the redirect option but in my case I want my private cloud running under SSL so didn't need the 80 after all.

[manarak]

I went through this recently with 3BB when I setup a private cloud at home. Spent a lot of time investigating it and 3BB indeed blocks incoming 80 but 443 (SSL) was open and since I wanted my cloud access secure anyway it worked out for me. But, as mentioned, many ISPs will block incoming port 80 to prevent home users setting up a website as they are suspicious it may be commercial and cut into the traffic. Since I do not have a static IP, I use No-Ip and port forwarded on my router port 443 to my apache server. Port 80 (3BB) shows closed on all websites that have port scanners to test for open ports but 443 ok.

is your port 443 also open from abroad?

[Tywais]

I went through this recently with 3BB when I setup a private cloud at home. Spent a lot of time investigating it and 3BB indeed blocks incoming 80 but 443 (SSL) was open and since I wanted my cloud access secure anyway it worked out for me. But, as mentioned, many ISPs will block incoming port 80 to prevent home users setting up a website as they are suspicious it may be commercial and cut into the traffic. Since I do not have a static IP, I use No-Ip and port forwarded on my router port 443 to my apache server. Port 80 (3BB) shows closed on all websites that have port scanners to test for open ports but 443 ok.

is your port 443 also open from abroad?

Yes, as I used several online port scanners from outside of Thailand to verify it with.

[Lopburi99]

Shit. My port 443 is also blocked.

[2008bangkok]

Shit. My port 443 is also blocked.

???? That's exactly what you told us 10 posts ago

[Lopburi99]

Oops, I'm not familiar with the use of the SSL term, I was thinking HTTPS for port 443 forgetting somebody told me earlier to check it. A newbie error. sorry.

BTW, 3BB tech support emailed me a couple of questions similar to "is your router plugged in?" last night. After sending them a few screen shots of my router settings and port check results I await their next reponse but it is clear from you guys what it will be. I asked about upgrade options I had.