Cannot Access FMP IWP from outside the LAN

[danabase]

I have FMP Server advanced 8 configured to host a web file on the network, but we can only access it on the local network. I have our sonic wall configured to allow port forwarding to the file on port 591, but in the web config screen it only shows the internal IP address. Is there someplace to configure the port and IP address in FMPSA to allow for access to the pages from outside the network> We originally hosted these files using FMP 6, and the port forwarding worked fine for both inside and outside the network.

I tried using the public IP in this way:

http://[public IP]/fmi/iwp/

and also

http://[public IP]:591/fmi/iwp/

and this

http://[public IP]:591

and I get an unable to connect error.

[Phillip Holmes]

Hello Danabase

I think you have got this incorrect. If you are using FMS8 Advanced in any of the configurations discussed in the documentation the only port you need open is port 80 and that points to the machine that is running IWP engine. This machine should be talking to FMS8 and not your web browser.

Regards

Phillip

[danabase]

No, I realize that the default for FMSA is 80, and that is what shows up:

http://[privateIP]:80

but I cannot access the page from outside the network. How do I fix that? Previously, I have used port 591, so I was trying to see if that would work. I could not get the IWP page to appear from off th network, only inside. Is there documentation somewhere on this? HELP!

[Mose Giganticus]

I have a similar problem. I everything works well with IWP from inside the local network (using 192.168.0.x addresses), but once I try to access the server from outside the network, I can see the database, and get to the login screen, but it hangs at login.

I've tried logging in with several accounts and nothing gets past the login screen when using the outside IP adress.

Obvisouly, I'm getting TO the file on the server since I can see it and get to the login screen, so it doesn;t seem to be a port forwarding issue... filemaker just won;t let me login to the datbase when accessed from outside the local network.

Is there some kind of advanced authentication that's failing? I'm using FM 8.5Pro

[Mose Giganticus]

I think I solved my problem. I believ my issue had to do with the router not being able to loop back to itself (send a request from inside the LAN, out to the internet, then back into the LAN). This issue is mentioned in the IWP starter guide that came with FM.

I was on the same network as the sever when I tested this. I have since relocated and logged in to the server remotely fine.

[Phillip Holmes]

I sent you the docs via email. Hope they help

Regards

Phillip

[skullhex]

Check to see if your internet service provider blocks port 80. My isp blocks both port 80 for web hosting and 25 for exchange email. I spent a month thinking it was something to do with filemaker 8 server advanced, instant web publishing or my windows server 2003. you must foward the port to the ip address of your web server.

Edited May 25, 2007 by Guest

[Genx]

Your ISP blocks Port 80?? I.e. The company that actually provides you with your internet connection actually blocks a port?

Don't think that's possible.. A port is simply a way of directing traffic to a desired computer once a particular network has been reached via its internal address.

Consider this, the IP address of your office network is 203.203.111.111 (this is not a real IP). This IP identifies your network only, you could have thousands of computers within your network. So the question arises, if you want someone to be able to communicate with a particular computer hosting a a particular program, inside your network, how do you achieve this given that 203.203.111.111 identifies the network as a whole?

I.e.

203.203.111.111:85

Computer 1: 192.168.0.2 (No Ports Forwarded)

Computer 2: 192.168.0.3 (Ports 591, 8080 Forwarded)

Computer 3: 192.168.0.4 (Port 85 forwarded)

Computer 4: 192.168.0.6 (No Ports Forwarded)

In the example above, the user requests the network with the ip address 203.203.111.111 but would like to communicate with the computer 192.168.0.4. The answer is port forwarding.

But there's more to port forwarding than just that.. The ports also relate to particular programs on a given computer. E.g. Port 80 is the default port for a Web Server. If thats so true, then why is a website like fmforums accessible with the address http://www.fmforums.com. The key here is http:// -- This prefix automatically initiates communication on its default port - 80.

Think of this way:

Network->Computer->Program

External IP:85->

(Network Address Translater)NAT looks for the IP registered with Port 85

-> Traffic Forwarded to that PC via IP provided by NAT

-> Once it reaches the PC, Forwarded immediatley to the appropriate program.

Now, on a side note, for anyone reading this, be careful what ports you open and where possible get your network admin's to deal with port forwarding for you, it takes a matter of seconds and they shouldn't even have to come on site.

Anyway... end random explanation.

If your ISP does for some reason actually block traffic on the ports - especially those two - then they are ah .. morons (sorry) and I hope your not paying more than 10 bucks a month for their services.

[Genx]

Now... to actually address the original issue:

Externally, if you are using your default web port, follow these directions and in 95% of the cases this will work fine:

1) While at the office, visit www.whatismyip.com

2) Go to a place outside your network, i.e. outside your office, i.e. not connected to your LAN, e.g. home.

3) Enter the address you got previously from www.whatismyip.com, DO NOT APPEND A PORT NUMBER UNLESS IT IS A PORT OTHER THAN 80. e.g. http://203.230.122.244/fmi/iwp/

While at the office / the same lan as your files are hosted on:

http://192.168.0.x/fmi/iwp

Again 192.168.0.x is not necessarily going to be a format of your lan ip, though it is a standard format. And once again, do not append a port number unless it something other than 80.

Hope that helps.

Assuming you have a default setup WebServer, traffic will be forwarded on port 80.

[skullhex]

Here's the link to my isp's website page informing its customer's of the blocking of port 80. you can pay extra for them to unblock it.

http://optimum.custhelp.com/cgi-bin/optimum.cfg/php/enduser/std_adp.php?p_faqid=2140&p_created=1171060019&p_sid=ROE1VvCi&p_accessibility=&p_redirect=&p_lva=&p_sp=cF9zcmNoPTEmcF9zb3J0X2J5PSZwX2dyaWRzb3J0PSZwX3Jvd19jbnQ9NCZwX3Byb2RzPSZwX2NhdHM9JnBfcHY9JnBfY3Y9JnBfcGFnZT0xJnBfc2VhcmNoX3RleHQ9b3B0b25saW5lIGJsb2NrcyBwb3J0IDgw&p_li=&p_topview=1

[Genx]

Port 80 Blocking

Because Port 80 is often used by malicious software, including viruses and worms, Optimum Online, like many ISPs, blocks this port for all standard Optimum Online customers.

What kind of a lame reason is that?

That's like saying because car's can kill people you can't drive one.

Every Port is dangerous and it should be up to the user not the ISP to block ports especially if they charge you a premium to unblock it... Unless your on dialup it shouldn't be any issue anyway, you start off with every port closed and unless you deliberatley open port 80 on your Router nothing aint getting inside anyway.

Sorry Skullhex, this is in no way addressed at you, I just don't like a lot of internet companies and the way they tend to rip of consumers.

Edited May 26, 2007 by Guest
typo

[djlane]

This is not a question, its just an addendum to Genx’s nice explanation above about connecting to IWP from outside the LAN.

I followed all the instructions about port forwarding etc but still it did not work.

I then found out that an additional setting was needed in my DSL modem. I needed to specify the NAPT default server IP address. In my case this is an Alcatel Speedtouch modem. In the modem control panel Advanced settings / NAPT / Default server, I put in the IP address of the Router (10.0.0.1). Previously it was blank. Not sure why.

Once this was done, it all worked perfectly.