Hello

Im trying to setup a webserver at home.
I have read an online tutorial found at:
http://thewishs.com/Web_Work/Dynamic_IPs/.
Its good for newbies such as myself, but does not cover everything.

My problem is that I cant get it to work.
What have I done so far?


My ISP uses static IP, therefore I use Zoneedit.com.
They gave me two nameservers which I should 
login and enter at for example goddaddy.com (or whereever the domain namne w
as bought)
I have done that more than 72 hours ago.

Then, still at zoneedit.com, I set my IP for that domain.
That will be the IP that www.whatismyip.com is showing me (external)

The thing is, that im using a D-link DI-604 to share the ADSL connection wit
h 
altogheter three computers. (One webserver)
When I view the settings for my router I can see that all three connected PC
s 
have their own IP number. Do they (IP) only exist in my "network"?


My server computer is running winXP and as webserver I use Apache.
In Apache I have set port 80 (default).
When I try localhost in the browser I get my test page working
(Classic "Hello world"). So, I guess the server is running!

In the router setting I have opened port 80 for incoming traffic.
I know that there is a lot of steps involved here, but any tip
is welcome.
There are three Pcs connected to the router and I have set the IP.
That is the external IP. From here, how do I "find" my server, which the rou
ter has 
given another IP for?

I know that my ISP allows webservers and keeps port 80 open.

By the way, I have searched for some tutorial which covers this. (without su
ccess)
Do you know any good tutorial which covers this at a newbie level, please po
st a link.


Thanks / Martin

[ Post a follow-up to this message ]

Ok, update:

At the D-link settings I can click "Advanced" and then "Routing".
It says: 
"Routing table. Use the routing table for routing purposes within your local
 network"

There I can fill in :

Destination
Subnet mask
Gateway
Hop
Enable (probably just check the box)

If this is what I need, im not sure what to fill in.

Thanks/ Martin

[ Post a follow-up to this message ]

martinsmith34 wrote:


> Im trying to setup a webserver at home.

Read this tutorial very carefully:

http://www.diywebserver.com/index.php


> My ISP uses static IP, therefore I use Zoneedit.com.

You need to clearly state if you are using a
"dynamic" connection or a "static" connection.

Dynamic means your ip address changes frequently,
usually each time you logon to your server. Setting
up a webserver for dynamic ip addresses is challenging
and inherently, there are a lot of problems.

Static address, piece of cake.

You will not use Zone Edit if you have a static
ip address connection.

> They gave me two nameservers which I should...

> I have done that more than 72 hours ago.

Allow seven to fifteen days for your domain name
server address to propagate. You will not be
able to connect in seventy-two hours, very
rarely does this happen.


> that im using a D-link DI-604 to share the ADSL

> altogheter three computers. (One webserver)

WAN connection on your router plugs into
your DSL modem. Be sure you use the right
type of cable, straight versus cross over.

LAN 1 - computer one
LAN 2 - computer two
LAN 3 - computer three (Apache)

Again, check your cable type needed.

Turn off dynamic address assignment inside
your router. Set it for static addresses.

Using a typical 192.168.1.x address scheme,

computer 1 - 192.168.1.2
computer 2 - 192.168.1.3
computer 3 - 192.168.1.4 (Apache)

Set your router to forward port 80 to your
computer three which is loaded with Apache.
Addresses can be changed to your liking
just be sure port 80 is forwarded to
your Apache machine.

Note a block of ip addresses inside your
router are reserved and cannot be used.
They are for dynamic addressing.

You are good to go once you work past your
DSL connection concerns. I know little about
Zone Edit and understand only the basis of
how sites like that work.

Be sure your Zone Edit software is installed
correctly and running, at all times.

Your router should be configured with several
items for its frontend connection to your
DSL modem.

Dynamic connection addressing, if dynamic is
what you are actually using.

At least two domain name servers (DNS) provided
by your DSL company. Those are used only for
your browser connections, outward.

Your router device address, often an address
of 192.168.1.1 or similar.

Subnet mask, most often 255.255.255.0

You need to clarify if your DSL connection is
via dynamic addresses or a static address.
This makes a critical difference in router
configuration and your server DNS needs.

Consult your router manual to be sure all
is configured correctly.


> I know that my ISP allows webservers and keeps port 80 open.

This is extremely rare unless you have a commercial
level account. If not allowed, your DSL provider
will shut off your connection via your modem MAC
address, as soon as they scan and discover a
webserver on your line. Check with them.

Address security, instantly, like right now.
Do not enable Apache as an internet server
until you address security. If you do not
address security, your machine will be taken
over in less than twenty-four hours. You
are broadcasting the location of your
router and machines. People with less than
good intent, will be visiting.

You are running an NT 5 machine which is the
most insecure machine made to date.

Ninety percent of your efforts should directed
at addressing very high level security.


Purl Gurl

[ Post a follow-up to this message ]

Purl Gurl wrote:

> martinsmith34 wrote:

(snipped)
 

> Ninety percent of your efforts should directed
> at addressing very high level security.


If you, the reader, have doubts about hacker attacks
or doubt security is all that important, we enjoy
an average of one-thousand attacks per day.

http://www.purlgurl.net/attacks.html/

Currently, a little over ten-thousand attacks
from April Fool's to yesterday. None successful
thus far, but we are adding a Conseal firewall
and are looking at cisco firewalls and Hotbrick
firewalls on Ebay.

Having a router firewall, having a software
firewall, running various security measures
through Apache, all are great. However, you
can never have enough security devices and
I would be foolish to claim our server is
beyond being hacked; it is just a matter of
time until some sociopathic cretin finds a
security hole in our system, and there
ample numbers of those mentally disturbed
people running loose on the internet.

Running a server is a lot of fun! Nonetheless,
you must accept the responsibilities which come
with running your own server.


Purl Gurl

[ Post a follow-up to this message ]