BBB not reachable behind Firewall

[Yorck Reymann]

There is another post on port forwarding in this forum, but I guess this subject goes a little bit deeper, so I open a new thread:

Having BBB on a virtual machine within our LAN, it seems not to be reachable from the Internet.

Locally, the BBB instance has the IP 10.16.13.56. Putting this IP on any browser, I get into the welcome screen of BBB and then can start it.

For external access, I opened the ports on my firewall (DSL, Fritzbox) according to the documentation (http://docs.bigbluebutton.org/install/install.html#configure-the-firewall-if-required) and created a DynDNS aleph2bbb.hopto.org. If I put this URL in an external machine, I get the answer "Welcome to nginx!", which apparently proves that the request gets through to the virtual box and BBB instance. However, I do not manage to get the welcome screen from BBB.

Could this be a setting issue of the BBB config files? E.g., I am not sure how to interprete the instructions about the etc/hosts file in the documentation mentioned above. Must I put the public (and daily changing) IP address there? And what URL should be there? I tried all possible combinations, but without success.

Thank you a lot for your comments.

Yorck

[Fred Dixon]

Hi Yorck,

Did you go through the steps in testing the firewall

  http://docs.bigbluebutton.org/install/install.html#testing-the-firewall

You need to make an entry in the /etc/hosts file of your BigBlueButton server to map the external hostname of aleph2bbb.hopto.org to the internal IP address of the BigBlueButton server.  See above URL for more information.

Regards,... Fred

--
You received this message because you are subscribed to the Google Groups "BigBlueButton-Setup" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-setup+unsub...@googlegroups.com.
To post to this group, send email to bigbluebutton-setup@googlegroups.com.
Visit this group at https://groups.google.com/group/bigbluebutton-setup.
For more options, visit https://groups.google.com/d/optout.

--

BigBlueButton Developer

http://bigbluebutton.org/

@bigbluebutton

[Yorck Reymann]

Dear Fred,

thank you for your quick answer!

Yes, I did the firewall testing with netcap. But I did not open all the range of UDP-ports required, because it is quite large and my router (Fritzbox) does only allow ranges of 255 ports per forwarding. So I would have to edit about 64 rules to open all the range mentioned. I guess that this is not the reason why I do not even reach the welcome screen of BBB. All the other TCP ports required are forwarded to 10.16.13.56 and tested with netcap.

I put the following line in /etc/hosts:
10.16.13.56    aleph2bbb.hopto.org

If I put aleph2bbb.hopto.org into my browser, the system answers:

Welcome to nginx!

If you see this page, the nginx web server is successfully installed and working. Further configuration is required.

For online documentation and support please refer to nginx.org.
Commercial support is available at nginx.com.

Thank you for using nginx.

If I stop the virtual machine, my browser gives an error message (... problem loading page ...). So I can be sure that the message mentioned comes from BBB. But why does is not show the welcome screen? Do I have to change something in the configuration of the VM (Oracle virtual machine) maybe? I don´t have any idea what else I could do ...

Do you know the message I have copied above?

Thank you again and regards

Yorck

Am Mittwoch, 10. Mai 2017 13:45:24 UTC+2 schrieb Fred Dixon:

Hi Yorck,

Did you go through the steps in testing the firewall

  http://docs.bigbluebutton.org/install/install.html#testing-the-firewall

You need to make an entry in the /etc/hosts file of your BigBlueButton server to map the external hostname of aleph2bbb.hopto.org to the internal IP address of the BigBlueButton server.  See above URL for more information.

Regards,... Fred

On Wed, May 10, 2017 at 3:40 AM, Yorck Reymann <yorck....@gmail.com> wrote:

There is another post on port forwarding in this forum, but I guess this subject goes a little bit deeper, so I open a new thread:

Having BBB on a virtual machine within our LAN, it seems not to be reachable from the Internet.

Locally, the BBB instance has the IP 10.16.13.56. Putting this IP on any browser, I get into the welcome screen of BBB and then can start it.

For external access, I opened the ports on my firewall (DSL, Fritzbox) according to the documentation (http://docs.bigbluebutton.org/install/install.html#configure-the-firewall-if-required) and created a DynDNS aleph2bbb.hopto.org. If I put this URL in an external machine, I get the answer "Welcome to nginx!", which apparently proves that the request gets through to the virtual box and BBB instance. However, I do not manage to get the welcome screen from BBB.

Could this be a setting issue of the BBB config files? E.g., I am not sure how to interprete the instructions about the etc/hosts file in the documentation mentioned above. Must I put the public (and daily changing) IP address there? And what URL should be there? I tried all possible combinations, but without success.

Thank you a lot for your comments.

Yorck

--
You received this message because you are subscribed to the Google Groups "BigBlueButton-Setup" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-setup+unsub...@googlegroups.com.

To post to this group, send email to bigbluebu...@googlegroups.com.

Visit this group at https://groups.google.com/group/bigbluebutton-setup.
For more options, visit https://groups.google.com/d/optout.

[Fred Dixon]

Hi Yorck,

You could actually get by with a smaller range if you edit /opt/freeswitch/etc/freeswitch/autoload_configs/switch.conf.xml and choose a smaller range

    <!-- RTP port range -->

    <param name="rtp-start-port" value="32750"/> -->

    <param name="rtp-end-port" value="32768"/> -->

> Locally, the BBB instance has the IP 10.16.13.56. Putting this IP on any browser, I get into the welcome screen of BBB and then can start it. 

Try

  sudo bbb-conf --setip aleph2bbb.hopto.org

and then try accessing it locally again.  If you are going to setup BigBlueButton behind a firewall, you must access it using the external hosthame (even if you are behind the firewall).  

Regards,.. Fred

To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-setup+unsubscribe...@googlegroups.com.

To post to this group, send email to bigbluebu...@googlegroups.com.
Visit this group at https://groups.google.com/group/bigbluebutton-setup.
For more options, visit https://groups.google.com/d/optout.

--

BigBlueButton Developer

http://bigbluebutton.org/

@bigbluebutton

--
You received this message because you are subscribed to the Google Groups "BigBlueButton-Setup" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-setup+unsub...@googlegroups.com.

To post to this group, send email to bigbluebutton-setup@googlegroups.com.

Visit this group at https://groups.google.com/group/bigbluebutton-setup.
For more options, visit https://groups.google.com/d/optout.

[Yorck Reymann]

Dear Fred,

your hint to use in the bbb-conf --setip command the url rather than the local IP number was the solution, and I am very greatful to you. I was already giving up and you saved me. Thank you very much!

I adjusted as well the port forwarding, and now I can use BBB internally and from other computers in the internet with the mentioned URL. That´s really great! I hope I will be able to help others one day as you did for me.

Regards
Yorck

To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-setup+unsub...@googlegroups.com.

To post to this group, send email to bigbluebu...@googlegroups.com.
Visit this group at https://groups.google.com/group/bigbluebutton-setup.
For more options, visit https://groups.google.com/d/optout.

--

BigBlueButton Developer

http://bigbluebutton.org/

@bigbluebutton

--
You received this message because you are subscribed to the Google Groups "BigBlueButton-Setup" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-setup+unsub...@googlegroups.com.

To post to this group, send email to bigbluebu...@googlegroups.com.
Visit this group at https://groups.google.com/group/bigbluebutton-setup.
For more options, visit https://groups.google.com/d/optout.

[Andy Jones]

Hi - if I may jump in to this (old) thread and ask Fred...

if I use sudo bbb-conf --setip nameofDynDNShost.hopto.org

will that mean I don't need all the edits that I did to enter my external IP address can be left.

I just discovered I don't have a static external IP after a router reboot, so I lost my BBB setup.

I have created a free dynamic DNS service which points a name (myname.hopto.org) at the external IP of my router whatever that may be and in theory updates whenever I get a new dynamic IP.

Many thanks

Andy

To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-setup+unsub...@googlegroups.com.

To post to this group, send email to bigbluebu...@googlegroups.com.
Visit this group at https://groups.google.com/group/bigbluebutton-setup.
For more options, visit https://groups.google.com/d/optout.

--

BigBlueButton Developer

http://bigbluebutton.org/

@bigbluebutton

--
You received this message because you are subscribed to the Google Groups "BigBlueButton-Setup" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-setup+unsub...@googlegroups.com.

To post to this group, send email to bigbluebu...@googlegroups.com.
Visit this group at https://groups.google.com/group/bigbluebutton-setup.
For more options, visit https://groups.google.com/d/optout.

[Fred Dixon]

Hi Andy,

> will that mean I don't need all the edits that I did to enter my external IP address can be left.

If you've made edits to a configuration file to enter an external IP address, as guided by the docs, as in

  http://docs.bigbluebutton.org/install/install.html#updating-freeswitch-configuration

you'll need to update them as well.

Regards,... Fred

To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-setup+unsubscribe...@googlegroups.com.

To post to this group, send email to bigbluebu...@googlegroups.com.
Visit this group at https://groups.google.com/group/bigbluebutton-setup.
For more options, visit https://groups.google.com/d/optout.

--

BigBlueButton Developer

http://bigbluebutton.org/

@bigbluebutton

--
You received this message because you are subscribed to the Google Groups "BigBlueButton-Setup" group.

To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-setup+unsubscribe...@googlegroups.com.

To post to this group, send email to bigbluebu...@googlegroups.com.
Visit this group at https://groups.google.com/group/bigbluebutton-setup.
For more options, visit https://groups.google.com/d/optout.

--

BigBlueButton Developer

http://bigbluebutton.org/

@bigbluebutton

--
You received this message because you are subscribed to the Google Groups "BigBlueButton-Setup" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-setup+unsub...@googlegroups.com.

To post to this group, send email to bigbluebutton-setup@googlegroups.com.

Visit this group at https://groups.google.com/group/bigbluebutton-setup.
For more options, visit https://groups.google.com/d/optout.