02:19 <johny11> Hi everyone! Anybody here able to help me with my sandstorm setup?

02:19 <johny11> By here I mean like active :P

23:13 <Gischer> Hi guys. I am having trouble installing sandstorm on a new Ubuntu 16.04 server. The server refuses all connections, even when I get a fresh admin-token. I can use telnet to connect to the port in question from my LAN, but using the sandcats url (or the raw IP addr) for an external connection says "connection refused"

23:13 <Gischer> Any ideas?

23:29 <biotim> gischer: are you behind a home router? is it setup to forward port 443 to your server?

23:31 <Gischer> Well, it's a small office router, and I have both 443 and 80 port forwarded

23:31 <Gischer> Also 6080 and 30025 for that matter.

23:32 <biotim> and is the server firewall configure to allow port 443? (using ufw or similar)

23:33 <Gischer> Hmm, I don't know about that.

23:33 <Gischer> How to check?

23:33 <biotim> sudo ufw status

23:33 <biotim> https://help.ubuntu.com/community/UFW

23:34 <Gischer> Thanks. Checking ...

23:34 <Gischer> response is "status: inactive"

23:35 <Gischer> Does that mean no firewall?

23:36 <Gischer> I can telnet to the ports in question on LAN

23:36 <biotim> well it means ufw is not enabled; there could be existing iptables rules if you've previously set up open ports for other things

23:36 <biotim> but if not, you can go ahead and enable ufw

23:37 <Gischer> It's pretty much a fresh install of Ubuntu

23:37 <Gischer> I did not manually add any firewall.

23:38 <biotim> yeah i guess ufw is installed by default but needs to be enabled

23:38 <biotim> https://help.ubuntu.com/lts/serverguide/firewall.html

23:39 <Gischer> It seems like good policy to enable, but do you think that will help me connect to sandstorm?

23:39 <biotim> you'll need to do sudo ufw allow 443/tcp

23:40 <biotim> to allow traffic through on that port

23:41 <biotim> or you can say it as sudo ufw allow https

23:41 <biotim> you may also want to do sudo ufw allow http

23:41 <biotim> otherwise you'll fail to connect unless you manually type https://

23:42 <Gischer> lol, I'm logged in via ssh, and enabling ufw will break it

23:43 <biotim> oh hmm. Can you allow ssh and then enable ufw?

23:44 <Gischer> Yep. That worked.

23:45 <biotim> nice of it to warn you about that

23:45 <Gischer> Yes. Kudos to whomever.

23:47 <Gischer> This is really strange. Now when I go to the url (sweetvinesystems.sandcats.io) I get my modem's home page.

23:47 <biotim> Oh i see. It must be hosting an admin page on port 80

23:47 <Gischer> But downforeveryoneorjustme.com shows it not connecting.

23:48 <biotim> if you specify https:// do you get your site?

23:48 <Gischer> When I specify https:// I get "refused to connect" instead.

23:49 <biotim> you may need to do some configuration on your modem. Sounds like it may need to be configured to allow the traffic through

23:50 <Gischer> Well, ok, but what? Do I need a port trigger?

23:51 <Gischer> When I did this before with a different modem, just putting in the NAT was enough. Sigh.

23:52 <biotim> can you reach this page? https://sweetvinesystems.sandcats.io:6080/

23:52 <Gischer> Refused to connect

23:53 <biotim> when I visit https://sweetvinesystems.sandcats.io I see sandstorm but it says "setup token required"

23:53 <biotim> "To use this server's setup page, you need a valid setup token."

23:53 <biotim> "Generate a new one now from the command line by running sandstorm admin-token and following the link it outputs."

23:53 <Gischer> It works for you????!!!!

23:54 <biotim> lol

23:54 <biotim> yeah that is odd if you can't reach it but i can

23:54 <Gischer> I guess somehow my modem gets confused by me being on the inside but trying to address the outside?

23:55 <biotim> if do http://sweetvinesystems.sandcats.io/ I get "refused to connect"

23:55 <biotim> so that's good that I don't see your modem admin page at least

23:55 <Gischer> Yeah, that's a relief

23:56 <Gischer> I'm going to have to talk to my ISP about this modem, I think.

23:56 <Gischer> Of course, they are on reduced hours because they are based in Santa Rosa and had to evacuate for the fire.

23:56 <biotim> is it a combo router modem thing? or is the router separate?

23:56 <Gischer> It's a combo

23:57 <biotim> I see. Well maybe you can poke around in the settings. See if you can change the port of the admin page, or double-check the port forwarding

23:58 <Gischer> There's something I was just reading in the sandstorm docs about a "hairpin problem". I wonder if that's related.

23:59 <biotim> See if you can enable port forwarding of both 80 and 443 to your server

23:59 <biotim> and enable http and https using ufw