Re: Port 443 listening, but can't connect

That's what I'm thinking too, but I don't have access or the know how for
that part. :)

What's odd is I do see a random request in the access log... obviously a
malicious probe but I don't get how it got through and I can't get
through...

Example:
45.144.212.235 - - [26/Sep/2025:09:47:57 -0500] "GET /.git/HEAD HTTP/1.1"
302 219"



On Fri, Sep 26, 2025 at 7:58 AM Rob Berendt <robertowenberendt@xxxxxxxxx>
wrote:

Firewall update?
Last night was nasty for firewalls. Cisco had a CVE out that was like a
9.9 sev level. We updated firmware on all our firewalls.
Someone might have punched 443 through earlier but never 'saved' that. A
reboot to put the firmware on might have cleared it.

On Fri, Sep 26, 2025 at 8:40 AM Brad Stone <bvstone@xxxxxxxxx> wrote:

I have a customer who is looking for some help with an Apache HTTP server
issue.

For years they've run their website on the IBM using an Apache server.
They are on V7R4 now.

Yesterday in the middle of the day all of a sudden no one could connect

to

their web server from the Internet (outside of their local network).

I got on, restarted the server, checked the log and error files, etc.
Nothing there.

The only way they can connect is if they are on the local network and

use

the IP address of the web server. Coming from the outside in (from the
interwebs) it won't connect. I verified this using a VPN to their

system.

Netstat shows that port 443 is listening, and the jobs are the correct

HTTP

server jobs.

They claim nothing has changed at all.

Here's the interesting thing... That same server instance has port 80

open

as well and that works just fine. Also they have a test instance with

port

8080 and 8443 which also we can connect to just fine.

It's only port 443 that is having this issue. I have a feeling someone
else is running an application on the network on that port, but I'm not
sure where to start looking for something like that.

Just looking for ideas.. thanks!

Bradley V. Stone
www.bvstools.com
Native IBM i e-Mail solutions for Microsoft Office 365, Gmail, or any

Cloud

Provider!
--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
list
To post a message email: WEB400@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.

--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
list
To post a message email: WEB400@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.