☰

ping 成功，nslookup 成功，本地 wget 成功，远程 HTTP 失败

tag-icon • tag-icon linux centos internet
ping 成功，nslookup 成功，本地 wget 成功，远程 HTTP 失败

我尝试http://domain.com/test.html从互联网访问，但出现错误

服务器运行的是 CentOS

我正在使用 DSN 托管（yandex.ru）domain.com

通过 IP ping 服务器 = OK

通过域名 Ping 服务器 = OK === nslookup = OK

wget http://domain.com/test.html本地 = OK（apache 配置正确）

服务器有以下内容iptables：

ACCEPT     all  --  anywhere             anywhere
ACCEPT     icmp --  anywhere             anywhere            icmp any
ACCEPT     esp  --  anywhere             anywhere
ACCEPT     ah   --  anywhere             anywhere
ACCEPT     udp  --  anywhere             224.0.0.251         udp dpt:mdns
ACCEPT     udp  --  anywhere             anywhere            udp dpt:ipp
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:ipp
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTAB                 LISHED
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:s                sh
REJECT     all  --  anywhere             anywhere            reject-with icmp-ho                  st-prohibited

更新：iptables -nL

Chain INPUT (policy ACCEPT)
target     prot opt source               destination
RH-Firewall-1-INPUT  all  --  0.0.0.0/0            0.0.0.0/0

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
RH-Firewall-1-INPUT  all  --  0.0.0.0/0            0.0.0.0/0

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

Chain RH-Firewall-1-INPUT (2 references)
target     prot opt source               destination
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0
ACCEPT     icmp --  0.0.0.0/0            0.0.0.0/0           icmp type 255
ACCEPT     esp  --  0.0.0.0/0            0.0.0.0/0
ACCEPT     ah   --  0.0.0.0/0            0.0.0.0/0
ACCEPT     udp  --  0.0.0.0/0            224.0.0.251         udp dpt:5353
ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           udp dpt:631
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:631
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:22
REJECT     all  --  0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited

请建议我还应该检查什么？

答案1

您的防火墙似乎阻止了端口 80。尝试使用以下方法打开它

iptables -I INPUT -p tcp -m tcp --dport 80 -j ACCEPT

如果有效则保存当前配置

service iptables save

这将更新/etc/sysconfig/iptables文件，以便下次服务启动时端口 80 将保持打开。

相关内容