Apache2 ei toimi domainilla

[ontelo]

Trv,

Aikaisemmin toiminut apache2 on alkanut kenkkuilla. Nykyään en pääse sivulle enää domainilla, vaan selain heittää hetken yrittelyn jälkeen (Could not connect). Pääsen sivuille kuitenkin ip:llä.

Toisaalta domain vastaa pingiin ja pääsen purkkiin sisään esim ssh:lla.

Domainilla on recordit:
A @ xxx.xxx.xxx.xxx
A www xxx.xxx.xxx.xxx
AAAA @ xxxx:xxxx:xxxx:xxxx::x

Joten päättelin että kyse on luultavasti jostain apachen conffista. En oo koskenut käsin mihinkään, joten veikkaan että joku päivitys on rikkonut koko paketin.

Onko kellään veikkauksia? Saa kysyä lisätietoja. Alla muutamia recordeja


iptables -L -nv | grep :80
10825 560K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80
8 686 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:80

netstat -ntlp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 32682/apache2
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 343/sshd
tcp 0 0 0.0.0.0:25 0.0.0.0:* LISTEN 549/master
tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN 32682/apache2

apachectl configtest
Syntax OK

apachectl start
httpd (pid 32682) already running

error.log (ei ollut mitään ihmeellistä):
[Fri Jun 14 11:04:02.831636 2019] [mpm_prefork:notice] [pid 32682] AH00163: Apache/2.4.18 (Ubuntu) OpenSSL/1.0.2g configured -- resuming normal operations
[Fri Jun 14 11:04:02.831814 2019] [core:notice] [pid 32682] AH00094: Command line: '/usr/sbin/apache2'

access.log (ilmeisesti nää on tullut kun ip:llä yritetty):
x - - [14/Jun/2019:09:28:46 +0300] "GET / HTTP/1.1" 301 415 "-" "Go-http-client/1.1"
x - - [14/Jun/2019:10:38:01 +0300] "GET / HTTP/1.1" 200 616 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"
x - - [14/Jun/2019:11:07:53 +0300] "GET / HTTP/1.1" 200 562 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:67.0) Gecko/20100101 Firefox/67.0"
x - - [14/Jun/2019:11:07:53 +0300] "GET x HTTP/1.1" 200 590 "x" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:67.0) Gecko/20100101 Firefox/67.0"
x - - [14/Jun/2019:11:07:53 +0300] "GETx HTTP/1.1" 200 175407 "x" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:67.0) Gecko/20100101 Firefox/67.0"
x - - [14/Jun/2019:11:07:54 +0300] "GET /favicon.ico HTTP/1.1" 404 409 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:67.0) Gecko/20100101 Firefox/67.0"
x - - [14/Jun/2019:11:07:54 +0300] "GET /loop.mp3 HTTP/1.1" 206 1706857 "x" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:67.0) Gecko/20100101 Firefox/67.0"
x - - [14/Jun/2019:11:10:23 +0300] "GET / HTTP/1.1" 200 616 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36"

000-default.conf

Spoileri

<VirtualHost *:80>
# The ServerName directive sets the request scheme, hostname and port that
# the server uses to identify itself. This is used when creating
# redirection URLs. In the context of virtual hosts, the ServerName
# specifies what hostname must appear in the request's Host: header to
# match this virtual host. For the default virtual host (this file) this
# value is not decisive as it is used as a last resort host regardless.
# However, you must set it for any further virtual host explicitly.
ServerName www.xxxxxx.xxx
ServerAlias xxxxxx.xxx

ServerAdmin webmaster@localhost
DocumentRoot /var/www/html

# Available loglevels: trace8, ..., trace1, debug, info, notice, warn,
# error, crit, alert, emerg.
# It is also possible to configure the loglevel for particular
# modules, e.g.
#LogLevel info ssl:warn

ErrorLog ${APACHE_LOG_DIR}/error.log
CustomLog ${APACHE_LOG_DIR}/access.log combined

# For most configuration files from conf-available/, which are
# enabled or disabled at a global level, it is possible to
# include a line for only one particular virtual host. For example the
# following line enables the CGI configuration for this host only
# after it has been globally disabled with "a2disconf".
#Include conf-available/serve-cgi-bin.conf
RewriteEngine on
RewriteCond %{SERVER_NAME} =www.gambina.club [OR]
RewriteCond %{SERVER_NAME} =gambina.club
RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
</VirtualHost>

 

[ontelo]

Jahas selviskin heti työkavereiden kanssa.

Ilmeisesti certin uusimisen yhteydessä (käytin sellasta scriptiä Let's Encrypt - Free SSL/TLS Certificates :stä), niin ei osannu avata porttia. En vaan tajunnu heti miksi se sen pois oli ottanut. Ilmeisesti certti oli kerennyt vanhentumaan.

Fixi:
sudo ufw allow 443/tcp