RE: [IPCop-user] Changing IPCop admin port 445

[Stephen M. <ip...@3l...>]

>> I'm still having problems accessing the web interface.=20
>> Consolidating advice from several sources, I have made the=20
>> following changes:

>> 1. Modified the following lines in /etc/httpd/conf/httpd.conf:

>> Listen 444
>> ....
>> <VirtualHost _default_:444> =20

>> 2. Modified /var/ipcop/header.pl:

>> <VirtualHost _default_:444>

This file actually contains:

>> print "Location:
>> https://$ENV{'SERVER_ADDR'}:444/$ENV{'PATH_INFO'}\r\n\r\n";

>> 3. Modified /home/httpd/cgi-bin/portfw.cgi:

>> print "Location:
>> https://$ENV{'SERVER_ADDR'}:4445/$ENV{'PATH_INFO'}\r\n\r\n";

>above is in header.pl not portfw.cgi, and her you use 4445, not 444 as
>elsewere!

Oops, this file actually contains the following line:

my @tcp_reserved =3D (81,222,444);


>> 4. Modified /var/ipcop/xtaccess/config adding the line:=20

>> tcp,0.0.0.0/0,444,on,0.0.0.0

>> 5. Restarted the webserver by running the commands:

>> #killall httpd
>> #httpd -DSSL

>Are there something in /var/log/httpd/error_log when you re-start
>apache??


Error log on restart reads:

[Wed Dec  1 10:53:38 2004] [notice] caught SIGTERM, shutting down
[Wed Dec  1 10:53:43 2004] [notice] Apache configured -- resuming normal
operations
[Wed Dec  1 10:53:43 2004] [notice] Accept mutex: sysvsem (Default: =
sysvsem)


> BTW do you use IPCop 1.4 as there is option "-DSSL" not needed as fare
> as i remember.

Yes, I am using 1.4.1. I just tried restarting the httpd service without
this option, but it didn't seem to make a difference.=20

>> I have repeated these steps several times and substituted different =
port
>> numbers), but I am unable to open in a browser. When I try accessing
>> http://nnn.nnn.nnn.nnn:81 in Mozilla I get the following error =
message
>> "The connection was refused when connecting to nnn.nnn.nnn.nnn:444. =
IE6
>> just gives "The page cannot be displayed"

> have you tryed  https://nnn.nnn.nnn.nnn:444 ???

Yes, but it made no difference.



>> I have tried a port scan from both the red zone and green zone and =
the=20
>> only port opened are 81 and 222.