Can not access EC2 server via IP address

Question

I am having this problem accessing my elastic public IP for my EC2 instance in the web browser. Installed REDHAT 6.3 and installed nginx web server(up and running) and also made sure i enabled port 80 and everything needed was setup.

Now time to enter the public IP to view the default nginx web page and nothing happens. I couldn't access the IP address.

Now i could ping other websites but couldn't ping my IP address.

Now after several hours of trying and trying to figure out what was going on...i figured i should check the networking on the REDHAT OS and whenever i try to edit anything network related..that is it i lost connection to the server and cannot restart the network.

What am i getting wrong here? Why is just accessing my server through IP such a difficult thing? What do i need to do now?

Thanks.

EDIT. here is the security group associated with the EC2 instance

Ports   Protocol    Source
20-21   tcp 0.0.0.0/0   
22  tcp 0.0.0.0/0   
80  tcp 0.0.0.0/0   
14000-14050 tcp 0.0.0.0/0

Ping isn't enabled by default, nor is port 80 in the AWS security group. What's your AWS Security Group for this instance look like? — Jason Floyd, Jan 09 '13 at 16:36
Can you please paste the output of `telnet IP 80` over here. — Napster_X, Jan 11 '13 at 07:40
output of couple of more commands will help: `iptables -L -n` and `getsebool`. — Napster_X, Jan 11 '13 at 07:41

score 1 · Answer 1 · edited Jan 09 '13 at 10:37

1

If it's just web traffic and you can still ssh to your instance, then it's almost certainly something to do with your configuration of nginx.

edited Jan 09 '13 at 10:37

John Gardeniers

27,458
12
55
109

answered Jan 09 '13 at 09:41

GeoSword

1,657
12
16

nginx is configured properly...i am 100% sure about that. – redhatengineer6 Jan 09 '13 at 17:47

score 1 · Accepted Answer · answered Jan 11 '13 at 07:55

So, There are be few things which might be wrong here. You can test them one by one and zero down to the issue.

First check whether you are able to connect to the port from outside. To do that, use this command
```
# telnet IP 80
```
If you are able to connect through this, then it means there is something surely wrong with your WebServer settings and you shouldn't be looking at the next rules.
If first one doesn't work, the second thing to check is your iptables in your machine, not just the AWS security group. To do the same, check the output of this command.
```
# iptables -L -n
```
The default policies should always be ACCEPT, if you are not specifically putting then to DROP or REJECT. To test whether iptables is the issue or not, you can try disabling iptables by flushing the rules or stopping your iptables service.

To flush the rules, use this command:
```
# iptables -F
```
To stop the iptables service:
```
# service iptables stop
```
Now try to access your site.
The third option is to check the Selinux on your machine. On redhat machine, SElinux is by default enabled. To check the same, use this command and check for the status:
```
# getsebool
```
It should say something like this:
```
getsebool:  SELinux is disabled
```
If it's enabled, then it could be the cause. Just try disabling it temporarily with this command:
```
# setenforce 0
```
This will disable the SElinux on your machine on temporarily basis. If this fixes your issue, just update the state from Enforcing to disabled in /etc/sysconfig/selinux and it will disable SElinux at your machine permanently.

Hope this helped.

i have fixed this..i found out since i was using RedHat 6..by default port 80 wasn't open so i had to edit the iptables to include port 80...even with the security group i still needed to do this..thanks. — redhatengineer6, Jan 11 '13 at 15:39

score 1 · Answer 3 · answered Jun 12 '13 at 16:00

GeekRide did a great job of highlighting different troubleshooting steps. The answer for my deployment was related to the iptables. Stopping the service is a great tip to quickly identify the issue.

To solve the issue, be sure to "insert" your port into the table. Do not append, as you will most likely be appending after a "reject all" entry that is at the end of the list. This example uses 5 to be placed after the port 22 rule. In aws since you connect as ec2-user, add the sudo command.

# sudu su
# iptables -L -n
# iptables -I INPUT 5 -p tcp --dport XXXXX -j ACCEPT

If that works, be sure to save in case the iptables service is restarted

# iptables-save

Thanks for the solution. It worked. – Dhrumil Bhankhar Nov 23 '21 at 09:23 — Dhrumil Bhankhar, Nov 23 '21 at 09:23

score 0 · Answer 4 · answered Jan 09 '13 at 08:25

0

Have you edited the security groups firewall to allow ssh web traffic etc?
the default security group firewall is pretty harsh.

from yourEC2 console

Network & security -> Security groups -> default -> inbound

can choose a template rule from the dropdown or create a custom one.

add rule -> apply rule changes

changes should be almost instant

answered Jan 09 '13 at 08:25

peteches

413
3
8

yes i have a security setup myself with the following open `20-21 tcp 0.0.0.0/0 22 tcp 0.0.0.0/0 80 tcp 0.0.0.0/0 14000-14050 tcp 0.0.0.0/0 ` – redhatengineer6 Jan 09 '13 at 08:39
Ok, can you ssh to the default public dns name associated with the instance? – peteches Jan 09 '13 at 09:00
yes with putty..that's how i am able to run command line codes – redhatengineer6 Jan 10 '13 at 08:33

score 0 · Answer 5 · answered Jan 10 '13 at 16:14

Besides your AWS Security group settings to allow port 80, check your Redhat firewall as well. Port 80 isn't open by default.

On your redhat system run system-config-firewall-tui to get the firewall configuration util for redhat open, then allow the http port 80 access.

Can not access EC2 server via IP address

5 Answers5

Linked