Re: Port 443 listening, but can't connect

[Rob Berendt <robertowenberendt@xxxxxxxxx>]

Firewall update?
Last night was nasty for firewalls.  Cisco had a CVE out that was like a
9.9 sev level.  We updated firmware on all our firewalls.
Someone might have punched 443 through earlier but never 'saved' that.  A
reboot to put the firmware on might have cleared it.

On Fri, Sep 26, 2025 at 8:40 AM Brad Stone <bvstone@xxxxxxxxx> wrote:

> I have a customer who is looking for some help with an Apache HTTP server
> issue.
>
> For years they've run their website on the IBM using an Apache server.
> They are on V7R4 now.
>
> Yesterday in the middle of the day all of a sudden no one could connect to
> their web server from the Internet (outside of their local network).
>
> I got on, restarted the server, checked the log and error files, etc.
> Nothing there.
>
> The only way they can  connect is if they are on the local network and use
> the IP address of the web server.  Coming from the outside in (from the
> interwebs) it won't connect.  I verified this using a VPN to their system.
>
> Netstat shows that port 443 is listening, and the jobs are the correct HTTP
> server jobs.
>
> They claim nothing has changed at all.
>
> Here's the interesting thing...  That same server instance has port 80 open
> as well and that works just fine.  Also they have a test instance with port
> 8080 and 8443 which also we can connect to just fine.
>
> It's only port 443 that is having this issue.  I have a feeling someone
> else is running an application on the network on that port, but I'm not
> sure where to start looking for something like that.
>
> Just looking for ideas.. thanks!
>
> Bradley V. Stone
> www.bvstools.com
> Native IBM i e-Mail solutions for Microsoft Office 365, Gmail, or any Cloud
> Provider!
> --
> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
> list
> To post a message email: WEB400@xxxxxxxxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/web400
> or email: WEB400-request@xxxxxxxxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/web400.