Access from internet (behind DSL-router) to nginx web server not possible

xgana · August 8, 2018, 9:49am

I build my own image for Bananpi and want to use it as a web server. After many days, i'm not able to get the external access from internet(DDNS access) work. But the test with local IP works fine. The same configuration works in my last build in May.

Now i made a simple test just only with nginx and mysql(mariadb). I cannot get connection to openwrt web server. If i switch from openwrt to centos server, i get the connet from internet. For locally connetion using IP is always possible to connect all web server. I checked the file /var/log/nginx/access.log and there is not log information from internet, but only the log information from local access.

I do not have good experece with protocol, so can somebody help me to figure out, what is going wrong with my configuration? or may be a bug in code?

if someone want to rebuild this problem, i can send him the .config file

Thanks!

config.seed
CONFIG_TARGET_sunxi=y
CONFIG_TARGET_sunxi_cortexa7=y
CONFIG_TARGET_sunxi_cortexa7_DEVICE_sun7i-a20-bananapi=y
CONFIG_DEVEL=y
CONFIG_TOOLCHAINOPTS=y
CONFIG_GCC_LIBSSP=y
CONFIG_IMAGEOPT=y
CONFIG_LIBC="glibc"
CONFIG_LIBC_USE_GLIBC=y
# CONFIG_LIBC_USE_MUSL is not set
CONFIG_NGINX_HTTP_ACCESS=y
CONFIG_NGINX_HTTP_AUTH_BASIC=y
CONFIG_NGINX_HTTP_AUTOINDEX=y
CONFIG_NGINX_HTTP_BROWSER=y
CONFIG_NGINX_HTTP_CACHE=y
CONFIG_NGINX_HTTP_CHARSET=y
CONFIG_NGINX_HTTP_EMPTY_GIF=y
CONFIG_NGINX_HTTP_FASTCGI=y
CONFIG_NGINX_HTTP_GEO=y
CONFIG_NGINX_HTTP_GZIP=y
CONFIG_NGINX_HTTP_LIMIT_CONN=y
CONFIG_NGINX_HTTP_LIMIT_REQ=y
CONFIG_NGINX_HTTP_MAP=y
CONFIG_NGINX_HTTP_MEMCACHED=y
CONFIG_NGINX_HTTP_PROXY=y
CONFIG_NGINX_HTTP_REFERER=y
CONFIG_NGINX_HTTP_REWRITE=y
CONFIG_NGINX_HTTP_SCGI=y
CONFIG_NGINX_HTTP_SPLIT_CLIENTS=y
CONFIG_NGINX_HTTP_SSI=y
CONFIG_NGINX_HTTP_UPSTREAM_HASH=y
CONFIG_NGINX_HTTP_UPSTREAM_IP_HASH=y
CONFIG_NGINX_HTTP_UPSTREAM_KEEPALIVE=y
CONFIG_NGINX_HTTP_UPSTREAM_LEAST_CONN=y
CONFIG_NGINX_HTTP_USERID=y
CONFIG_NGINX_HTTP_UWSGI=y
CONFIG_NGINX_NAXSI=y
CONFIG_NGINX_PCRE=y
CONFIG_OPENSSL_WITH_DEPRECATED=y
CONFIG_OPENSSL_WITH_EC=y
CONFIG_OPENSSL_WITH_NPN=y
CONFIG_OPENSSL_WITH_PSK=y
CONFIG_OPENSSL_WITH_SRP=y
CONFIG_PACKAGE_libaio=y
CONFIG_PACKAGE_libatomic=y
CONFIG_PACKAGE_libbz2=y
CONFIG_PACKAGE_libfreetype=y
CONFIG_PACKAGE_libintl-full=y
CONFIG_PACKAGE_libjpeg=y
CONFIG_PACKAGE_liblzma=y
CONFIG_PACKAGE_libncurses=y
CONFIG_PACKAGE_libnetsnmp=y
CONFIG_PACKAGE_libopenssl=y
CONFIG_PACKAGE_libpcre=y
CONFIG_PACKAGE_libpng=y
CONFIG_PACKAGE_libssp=y
CONFIG_PACKAGE_libstdcpp=y
CONFIG_PACKAGE_libxml2=y
CONFIG_PACKAGE_mariadb-client=y
CONFIG_PACKAGE_mariadb-client-extra=y
CONFIG_PACKAGE_mariadb-server=y
CONFIG_PACKAGE_nginx=y
CONFIG_PACKAGE_php7=y
CONFIG_PACKAGE_php7-cgi=y
CONFIG_PACKAGE_php7-fastcgi=y
CONFIG_PACKAGE_php7-fpm=y
CONFIG_PACKAGE_php7-mod-gd=y
CONFIG_PACKAGE_php7-mod-gettext=y
CONFIG_PACKAGE_php7-mod-hash=y
CONFIG_PACKAGE_php7-mod-mysqli=y
CONFIG_PACKAGE_php7-mod-mysqlnd=y
CONFIG_PACKAGE_php7-mod-pdo=y
CONFIG_PACKAGE_php7-mod-pdo-mysql=y
CONFIG_PACKAGE_php7-mod-snmp=y
CONFIG_PACKAGE_php7-mod-soap=y
CONFIG_PACKAGE_php7-mod-sockets=y
CONFIG_PACKAGE_php7-mod-xml=y
CONFIG_PACKAGE_resolveip=y
CONFIG_PACKAGE_terminfo=y
CONFIG_PACKAGE_zlib=y
CONFIG_PACKAGE_zoneinfo-core=y
CONFIG_PHP7_FILTER=y
CONFIG_PHP7_LIBFREETYPE=y
CONFIG_PHP7_LIBXML=y
CONFIG_PHP7_SYSTEMTZDATA=y
# CONFIG_PKG_CC_STACKPROTECTOR_REGULAR is not set
CONFIG_STRIP_ARGS="--strip-all"
CONFIG_TARGET_SUFFIX="gnueabi"
CONFIG_USE_GLIBC=y
# CONFIG_USE_SSTRIP is not set
CONFIG_USE_STRIP=y
# CONFIG_PKG_CC_STACKPROTECTOR_NONE is not set
# CONFIG_PKG_CC_STACKPROTECTOR_REGULAR is not set
# CONFIG_TARGET_ar71xx_generic is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_A60 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ALFAAP120C is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ALFAAP96 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ALFANX is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ALL0258N is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ALL0305 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ALL0315N is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_AP121_16M is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_AP121_8M is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_AP132 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_AP135 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_AP136_010 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_AP136_020 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_AP143_16M is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_AP143_8M is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_AP147_010 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_AP152_16M is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_AP96 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_BXU2000N2 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_CAP4200AG is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_DB120 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_DGL5500A1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_DHP1565A1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_DIR505A1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_DIR825B1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_DIR825C1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_DIR835A1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_DLRTDEV01 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_EAP300V2 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_EAP7660D is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_EPG5000 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ESR1750 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ESR900 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_F9K1115V2 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_HORNETUB is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_HORNETUBx2 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_JA76PF is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_JA76PF2 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_JWAP003 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_MR1750 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_MR600 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_MR900 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_MYNETREXT is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_MZKW04NU is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_MZKW300NH is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_NBG6616 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_OM2P is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_OM5P is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_OM5PAC is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_PB42 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_PB44 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_TEW673GRU is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_TEW732BR is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_TEW823DRU is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_TUBE2H16M is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_TUBE2H8M is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_WNDAP360 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_WNR2200 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_WP543_16M is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_WP543_8M is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_WPE72_16M is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_WPE72_8M is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_WRT160NL is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_WRT400N is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_WZR450HP2 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_WZR600DHP is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_WZRHPAG300H is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_WZRHPG300NH is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_WZRHPG300NH2 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_WZRHPG450H is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ZCN1523H28 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ZCN1523H516 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_antminer-s1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_antminer-s3 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_antrouter-r1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ap121f is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ap531b0 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ap90q is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ap91-5g is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_archer-c25-v1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_archer-c5-v1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_archer-c58-v1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_archer-c59-v1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_archer-c60-v1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_archer-c60-v2 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_archer-c7-v1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_archer-c7-v2 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_archer-c7-v2-il is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_archer-c7-v4 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_archer-c7-v5 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_arduino-yun is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_bhr-4grv2 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_bsb is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_c-55 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_cap324 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_cap324-nocloud is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_carambola2 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_cf-e316n-v2 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_cf-e320n-v2 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_cf-e355ac-v1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_cf-e355ac-v2 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_cf-e375ac is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_cf-e380ac-v1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_cf-e380ac-v2 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_cf-e385ac is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_cf-e520n is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_cf-e530n is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_cpe210-220-v1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_cpe210-v2 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_cpe505n is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_cpe510-520-v1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_cpe830 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_cpe870 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_cr3000 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_cr3000-nocloud is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_cr5000 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_cr5000-nocloud is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_dLAN_Hotspot is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_dLAN_pro_1200_ac is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_dLAN_pro_500_wp is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_dap-1330-a1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_dap-2695-a1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_dir-869-a1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_dr342 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_dr531 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_dragino2 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_e1700ac-v2-16M is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_e1700ac-v2-8M is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_e558-v2-16M is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_e558-v2-8M is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_e600g-v2-16M is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_e600g-v2-8M is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_e600gac-v2-16M is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_e600gac-v2-8M is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_e750a-v4-16M is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_e750a-v4-8M is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_e750g-v8-16M is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_e750g-v8-8M is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_eap120-v1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_el-m150 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_el-mini is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ens202ext is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ew-balin is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ew-dorin is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ew-dorin-router is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_fritz300e is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_fritz4020 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_fritz450e is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_gl-ar150 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_gl-ar300 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_gl-ar300m is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_gl-ar750 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_gl-domino is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_gl-inet-6408A-v1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_gl-inet-6416A-v1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_gl-mifi is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_gl-usb150 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_hiwifi-hc6361 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_jwap230 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_koala is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_lan-turtle is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_lima is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_mc-mac1200r is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_minibox-v1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_mr12 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_mr16 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_mw4530r-v1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_mynet-n600 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_mynet-n750 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_n5q is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_omy-g1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_omy-x1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_onion-omega is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_oolite-v1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_oolite-v5.2 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_oolite-v5.2-dev is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_packet-squirrel is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_pqi-air-pen is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_qihoo-c301 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_r36a is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_r602n is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_re355-v1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_re450-v1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_rme-eg200 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_rut900 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_rw2458n is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_sc1750 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_sc300m is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_sc450 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_smart-300 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_som9331 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_sr3200 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_t830 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_tellstick-znet-lite is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_tl-mr6400-v1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_tl-wdr3500-v1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_tl-wdr3600-v1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_tl-wdr4300-v1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_tl-wdr4300-v1-il is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_tl-wdr4310-v1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_tl-wdr4900-v2 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_tl-wdr6500-v2 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_tl-wdr7500-v3 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_tl-wpa8630-v1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_tl-wr1043n-v5 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_tl-wr1043nd-v1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_tl-wr1043nd-v2 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_tl-wr1043nd-v3 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_tl-wr1043nd-v4 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_tl-wr2543-v1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_tl-wr710n-v1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_tl-wr710n-v2.1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_tl-wr810n-v1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_tl-wr810n-v2 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_tl-wr842n-v1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_tl-wr842n-v2 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_tl-wr842n-v3 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_tl-wr902ac-v1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_tl-wr942n-v1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ts-d084 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ubdev01 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ubnt-air-gateway is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ubnt-air-gateway-pro is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ubnt-airrouter is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ubnt-bullet-m is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ubnt-lbe-m5 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ubnt-loco-m-xw is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ubnt-ls-sr71 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ubnt-nano-m is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ubnt-nano-m-xw is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ubnt-rocket-m is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ubnt-rocket-m-ti is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ubnt-rocket-m-xw is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ubnt-rs is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ubnt-rspro is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ubnt-uap-pro is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ubnt-unifi is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ubnt-unifi-outdoor is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ubnt-unifi-outdoor-plus is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ubnt-unifiac-lite is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ubnt-unifiac-mesh is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_ubnt-unifiac-pro is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_wam250 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_wbs210-v1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_wbs510-v1 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_weio is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_wifi-pineapple-nano is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_wlr8100 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_wndr3700 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_wndr3700v2 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_wndr3800 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_wndr3800ch is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_wndrmac is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_wndrmacv2 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_wpj342 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_wpj344 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_wpj531 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_wpj558 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_wpj563 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_wrtnode2q is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_xd3200 is not set
# CONFIG_TARGET_ar71xx_generic_DEVICE_zbt-we1526 is not set
# CONFIG_TARGET_ar71xx_generic_Default is not set
# CONFIG_TARGET_ar71xx_mikrotik is not set
# CONFIG_TARGET_ar71xx_nand is not set
# CONFIG_TARGET_ar71xx_tiny is not set
# CONFIG_TARGET_sunxi_cortexa8_DEVICE_sun4i-a10-cubieboard is not set
# CONFIG_TARGET_sunxi_cortexa8_DEVICE_sun4i-a10-marsboard is not set
# CONFIG_TARGET_sunxi_cortexa8_DEVICE_sun4i-a10-olinuxino-lime is not set
# CONFIG_TARGET_sunxi_cortexa8_DEVICE_sun4i-a10-pcduino is not set
# CONFIG_TARGET_sunxi_cortexa8_DEVICE_sun5i-a13-olimex-som is not set
# CONFIG_TARGET_sunxi_cortexa8_DEVICE_sun5i-a13-olinuxino is not set
# CONFIG_TARGET_sunxi_cortexa8_Default is not set
# CONFIG_USE_LIBSTDCXX is not set
# CONFIG_USE_SSTRIP is not set
CONFIG_USE_UCLIBCXX=y

xgana · August 8, 2018, 11:47am

Btw. The build is based on v18.06.0

Compile pc ubuntu 18.04

jeff · August 8, 2018, 3:00pm

I'd be surprised if it's a bug in the code. More likely there is something different about the configuration.

Would you explain how you have your devices connected, including your modem, router, and the web server?

xgana · August 9, 2018, 7:27am

Hi Jeff,
Thank you!

My web server is based on openwrt and i use nginx and mariadb for it. router is Fritzbox 7390 which is connected to internet with DSL. All my local devices are connected to this router.

/etc/nginx/nginx.conf
#user nobody nogroup;
user www-data www-data;
worker_processes  1;

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

#pid        logs/nginx.pid;

events {
    worker_connections  1024;
}

http {
    include       mime.types;

        #access_log  logs/host.access.log  main;

        location / {
            root   /www/html;
            index  index.html index.htm index.php;
            if (!-e $request_filename) {
                rewrite ^ /index.php last;
            }
        }

        #error_page  404              /404.html;

        # redirect server error pages to the static page /50x.html
        #
        error_page   500 /500.html;
        location = /500.html {
            root   html;
        }

        error_page   502  /502.html;
        location = /502.html {
            root   html;
        }

        error_page   503 504  /503.html;
        location = /503.html {
            root   html;
        }

        # proxy the PHP scripts to Apache listening on 127.0.0.1:80
        #
        #location ~ \.php$ {
        #    proxy_pass   http://127.0.0.1;
        #}

        # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
        #
        location ~ \.php$ {
            root           /www/html;
            fastcgi_pass   unix:/var/run/php7-fpm.sock;
            fastcgi_read_timeout 280;
            fastcgi_index  index.php;
            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
            include        fastcgi_params;
        }

        # deny access to .htaccess files, if Apache's document root
        # concurs with nginx's one
        #
        #location ~ /\.ht {
        #    deny  all;
        #}
}

xgana · August 12, 2018, 12:11pm

I did following work, but this is still not work!!!

setup firewall and disable it.
build the test image for x86
using older Openwrt version and worked configuration( i cannot reproduce the worked version again, because i dont know, which version in feeds was used!!!)

I use tcpdump and checked the messages fron LOCAL and WWW. In openwrt device i get both data packages from eth0 but with the difference:
a. IP from LOCAL or WWW is correct!
b. Package from LOCAL has a MSS of 1460 bytes and the Openwrt replies also with 1460 bytes MSS .
c. package from WWW has a MSS of 1452 bytes and there is no reply from Openwrt
d. package from WWW has a MSS of 1452 bytes to Centos system, the Centos rplies with 1460 bytes MSS.

Has somebody idea, what goes wrong?

Thanks!

xgana · August 12, 2018, 12:31pm

I also try to set MSS Clamping in firewall, but no chance.

does someone know, If the firewall in Openwrt disabled, will the packages still be foreware or not?

wgqoufsn · August 12, 2018, 1:06pm

You normaly just need port forwarding. If your nginx is missing https and run on port 80, then just forward in your DSL-Router port 80 to the network-IP of your banana-pi. The exact ip you enter into your browser in the same network to open the website.
Thats all.

BTW: I would recommend to replace the crappy old 7390 with some free software device running OpenWrt and based on lantiq xrx200. There are many devices you get in many countries for less then 5€. So at the end selling your 7390 and getting a free software device with a better modem would even earn you some bucks.

xgana · August 13, 2018, 7:19pm

Hi,

today i can figure out the poblem:

The problem is in network stack, it is not possible to use static ip In /etc/config/network! Now i set to dhcp, i can then get everything work as i want.

I hope, that some one can fix this bug in openwrt and give me a feedback.

Thanks a lot for all answeres!

jeff · August 13, 2018, 7:56pm

Hmmm, sounds like you've found a fix, but I doubt that's the cause.

In all my OpenWRT devices, static IPs assigned through /etc/config/network work. What leads you to the conclusion? Do you have evidence that either the interface or the routing table is not properly configured?

xgana · August 13, 2018, 9:01pm

Hi Jeff,

i don't find any fix, but only a workarround for me:-)

If you want to reproduce this problem, you can use v18.06.0. I tested this version for x86-64 and bananapi.
If you use static ip, the netmask will block the traffic, but if you change the netmask the data will be passed:
I use 192.168.11.22 behind the router and 192.168.22.11 for openwrt in local network. In router port forward is set to 80.
if use 255.255.255.0 as local netmask i can see the data is coming but no answer from openwrt.
but if use 255.255.0.0 as local netmask i can see the data is coming and openwrt answered.
So my interpretation is the netmask blocked the traffic, i then tried dhcp and it works.

An older version with static ip worked for me too, but right now i cannot get the older version work! The problem is the openwrt source and feeds do not have strict version dependence. I cannot reconfigure feeds packages in the versions which i were using. May you have idea how do you solve this problem?

jeff · August 13, 2018, 10:10pm

I'm not sure I'm following it all, but it seems as though you've potentially got two disjoint networks on the same interface. It sounds like

192.168.11.0/24 -- general clients
192.168.22.0/24 -- server target

Without knowing your configuration, unless you've got both networks configured on the interface, only one will be properly routed, the other will take the default route (typically out the "WAN" interface).

Configuring two addresses under OpenWRT typically requires a second UCI "interface" declaration on the same physical interface.

xgana · August 14, 2018, 8:42am

Hi Jeff,

it is not so complicated as you think. I just use the openwrt for a bapapapi web server and this web server is connected to a router(Fritzbox) which is never been flashed with other OS. The 192.168.11.22 is the ip for router and the router forwards port 80 on 192.168.22.11 to my web server. My web server is set to ip 192.168.22.11 and listen on port 80. So the netmask for web server should be 24 and this setting is worked for my all other linux server.

wgqoufsn · August 14, 2018, 9:02am

This kind of sound wrong to me. How should a device in a network of 192.168.11.0/24 (your fritzbox) get to 192.168.22.0/24 (your device connected to the fritzbox via lan cable)?
You wrote that a third device had access to the webserver locally (inside the fritzbox lan when i understood right). What IP had this device?

xgana · August 14, 2018, 9:27am

Hi wgqoufsn，

for my test i use two router build a chain the first connect to internet and the second used for local network. Between the router you can set your ip as you want(for me this is 192.168.11.0/24). I always use this to test the access from outside of the local network and this woks very fine for me.

wgqoufsn · August 14, 2018, 12:13pm

So you have a double-NAT. Thats in general not something that can be recommended.
So your fritzbox have 192.168.11.0/24 and you second router WAN is connected to 192.168.11.0/24 and its LAN is 192.168.22.0/24 . You have to forward then twice. But as written, thats not recommended.
Can you be please extremely deep in detail about now in what case openwrt have a bug? Please EXTREMELY deep in detail. Because until now it was unknown that you have two routers there.
Jeff also wrote "I'm not sure I'm following it all".
So explain in extreme deep detail what is going on in your setup so that people can reproduce that and fix that if its really an openwrt bug.

xgana · August 14, 2018, 2:13pm

I do not do deeply analyse of this problem, right now i have a work around and i ca do my job further.
All i did and i know are placed here, also how you can reproduce this problem is mentioned before.
About double-NAT is an easy way to be used to test this case, so as i can trace the traffic from both side. If you have another possibilities to do this, you do not need this configuration.