[northeast] FIOS and Inbound Port 80 in Verizon Fiber Optics http://www.dslreports.com/forum/r21055634 en Fri, 27 Nov 2009 05:43:17 EDT Fri, 27 Nov 2009 05:43:17 EDT Re: [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21077096 Hooper : you can always use a web forwarder to redirect the request to a specific URL with a port. All of the major DNS hosts provide this.

OR

You could offload the website to a hosting provider.]]> http://www.dslreports.com/forum/remark,21077096 Mon, 08 Sep 2008 15:49:58 EDT Re: [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21077051 devicemanage : I hear ya and I am aware about the access from the inside. I have been testing it and guardster says it isnt open. I must not be opening the port correctly. I will try again and see if there is anything I missed. It is a Cisco PIX 501.

My biggest beef is I want to be able to give out the url in normal fashion like www.domian.com plus I have many links out there right now that would need to be updated. Too bad I could point my A record for the domain at something and then have that redirect to my ip:port - know of anything like this?
--
»www.devicemanager.net]]> http://www.dslreports.com/forum/remark,21077051 Mon, 08 Sep 2008 15:41:34 EDT Re: [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21075542 Doctor Olds :
said by devicemanage See Profile :

I also have a website running on the same server. I then opened port 8008 in the firewall and forwarded it to the exchange/web server. I can't access the site, the domain host has the correct ip.
From the LAN side it is normal to not have access to any servers when trying the Public IP or the FQDN as only the Private LAN IP should work. Try accessing the server from the WAN using a Web Proxy like www.guardster.com or by having a friend test it.
--
What’s the point of owning a supercar if you can’t scare yourself stupid from time to time?]]> http://www.dslreports.com/forum/remark,21075542 Mon, 08 Sep 2008 10:45:28 EDT Re: [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21075397 devicemanage : Sorry I wasn't clear. I am not worried about exchane anymore. Exchange are you active sync is working and so is the owa.

I also have a websire running on the same server. I then opened port 8008 in the firewall and forwarded it to the exchange/web server. I can't access the site, the domain host has the correct ip.]]> http://www.dslreports.com/forum/remark,21075397 Mon, 08 Sep 2008 10:17:41 EDT Re: [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21075192 Hooper :
said by devicemanage See Profile :

Well I have the ssl up and running the active sync is running. Now when I configure iis for port 8008 and forward traffic from firewall to server, I can not get the site to load. Does anyone know of a port that works that I can try? Am I missing something here?
You have to use 443. Forward that to your computer running exchange. ]]> http://www.dslreports.com/forum/remark,21075192 Mon, 08 Sep 2008 09:35:45 EDT Re: [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21074961 devicemanage : Well I have the ssl up and running the active sync is running. Now when I configure iis for port 8008 and forward traffic from firewall to server, I can not get the site to load. Does anyone know of a port that works that I can try? Am I missing something here?
--
»www.devicemanager.net]]> http://www.dslreports.com/forum/remark,21074961 Mon, 08 Sep 2008 08:29:57 EDT Re: [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21068979 Smith6612 : I have Verizon DSL here on ATM of course and I've seen my PPPoE sessions last for 2 months many times until the DSLAM reboots and I get a new IP because the modem had to resync. Though of course I've always been on ATM...]]> http://www.dslreports.com/forum/remark,21068979 Sat, 06 Sep 2008 23:13:23 EDT Re: [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21068350 Doctor Olds :
said by devicemanage See Profile :

I figured that - dsl was insane the way the ip changed - my poor friend had them but he used noip to keep track of it.
That's either defects from the provider or problems with the line, not the technology. I frequently have the same DSL IP/PPP session for 7 to 14 days now and before the change to ATM circuits from the way they were in the old days, my IP/PPP sessions ran 20 to 40 days.

»Over 1 month PPPoE session

»31 Days Same PPP Session - 5660 PPPoE
--
What’s the point of owning a supercar if you can’t scare yourself stupid from time to time?]]> http://www.dslreports.com/forum/remark,21068350 Sat, 06 Sep 2008 13:56:56 EDT Re: [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21067787 More Fiber :
said by devicemanage See Profile :

Well If you look up you ip and assign it to your equipments outside interface and never reboot your equipment - theoretically shouldn't you have a static ip?
Setting your router's WAN interface to static with your current IP will only work until your current DHCP lease expires. If the WAN interface is set to static, it will not request or renew a DHCP lease. When your current DHCP lease expires without being renewed your previously assigned IP address is available to be assigned to someone else.

Since a DHCP client (your router) will normally renew the DHCP lease at 1/2 of the lease time, your lease essentially never expires as long as you keep renewing. If you disconnect your router past the lease expiration, then you may get a different IP address. Also, if VZ reboots their DHCP server (rare) you would get a different IP address.]]> http://www.dslreports.com/forum/remark,21067787 Sat, 06 Sep 2008 11:31:25 EDT Re: [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21067707 ghot1 : damn lotsa PA types lol I didnt notice that till u mentioned it :)]]> http://www.dslreports.com/forum/remark,21067707 Sat, 06 Sep 2008 11:14:33 EDT Re: [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21067691 darcilicious : :-)]]> http://www.dslreports.com/forum/remark,21067691 Sat, 06 Sep 2008 11:09:34 EDT Re: [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21067676 JohnA :
You're right. I was basically talking to jaguar and ghot1. Pgh suburbs!]]> http://www.dslreports.com/forum/remark,21067676 Sat, 06 Sep 2008 11:06:43 EDT Re: [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21067625 ghot1 : lucky dogs :D]]> http://www.dslreports.com/forum/remark,21067625 Sat, 06 Sep 2008 10:51:48 EDT Re: [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21067586 darcilicious :
said by JohnA See Profile :

DSL was PPPoE.
Not all DSL -- we had DHCP out here in exGTE land :)]]> http://www.dslreports.com/forum/remark,21067586 Sat, 06 Sep 2008 10:39:49 EDT Re: [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21067477 ghot1 : i know dsl was pppoe i had it for 5 years....when I had COAX FIOS my fios was DHCP and the optimizer set my MTU at 1500

when I had them change it to ctat5e from ONT to router the optimizer set my MTU at 1492 but registry still sez DHCP ????]]> http://www.dslreports.com/forum/remark,21067477 Sat, 06 Sep 2008 10:11:35 EDT Re: [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21067443 JohnA :
DSL was PPPoE. My FIOS is PPPoE, and I can pull a different IP at the drop of a hat. IPs have been stickier on FIOS even with PPPoE, but any router disconnect, and I can get a new one.

DHCP provides a much stickier IP. If your router is always on, it will just renew the lease when the lease is half way through it's time.]]> http://www.dslreports.com/forum/remark,21067443 Sat, 06 Sep 2008 10:02:41 EDT Re: [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21067270 ghot1 : I cant test that anymore they made me send the router and the BIG set top box back when I had them switch me cat5e from ONT to comp....your in PA just call tech support and ask here there number: 888-553-1555

I know what your saying though I can see my IP in my software firewall and it hardly ever changes....its to their advantage to offer dynamic IP for a couple reasons:

1: we ran out of IP's about 2 years ago....so dynamic means we can still all connect
2. They dont have to buy as big a block of IP's if they offer dynamic

I would imagine that in the next year or so the lease times will drastically shorten and we'll get diff IP's more often just like the old DSL days....I've been a verizon customer for 6 years they rolled out DSL the same way...after 2 years they started releasing the IPs faster and even let us buy just internet w/o a credit card which they didnt do in the beginning....same as NOW with the FIOS]]> http://www.dslreports.com/forum/remark,21067270 Sat, 06 Sep 2008 09:04:27 EDT Re: [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21067252 devicemanage : I figured that - dsl was insane the way the ip changed - my poor friend had them but he used noip to keep track of it.
--
»www.devicemanager.net]]> http://www.dslreports.com/forum/remark,21067252 Sat, 06 Sep 2008 08:57:53 EDT Re: [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21067247 ghot1 : according to verizon: at least in my area the lease is 24 hours and even when it releases they said Ill prolly get the same IP back anyways .....the only way I wouldnt is if the rare chance that someone else had their lease release at nearly the same instant and grab the IP I HAD lol

so even thought they promised dynamic IP it no way like DSL dynamic IP with DSL you could reboot comp and modem power off and wait 30 secs and get new IP :/]]> http://www.dslreports.com/forum/remark,21067247 Sat, 06 Sep 2008 08:55:42 EDT Re: [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21067223 devicemanage : Well If you look up you ip and assign it to your equipments outside interface and never reboot your equipment - theoretically shouldnt you have a static ip? Or if your equipment isnt power cycled at the time of the lease experation, wouldn't you retain the dynamic ip until the next time around? So far I have rebooted my equipment here a number of times, put the actiontech in bridge mode, never lost the address. Thoughts?

I think I can handle installing the cert on the phone - no biggie to save a few bucks. I will also try the smathost setup with outbound.verizon.net
--
»www.devicemanager.net]]> http://www.dslreports.com/forum/remark,21067223 Sat, 06 Sep 2008 08:45:10 EDT Re: [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21063106 Ronin_R6 :
said by Hooper See Profile :

said by Ronin_R6 See Profile :

Just go to startssl.com and get yourself a free Certificate. Then use secure connections. It will use port 443 which isn't blocked, and it will keep your data more secure in the process.
You can generate your own SSL as well via numerous 3rd party tools and through Windows Certificate Authority. The problem is that they are not trusted by a root CA and will likely cause issues on your device with security prompts. This will break synchronization, unless you hack the device's root store to accept the cert.
Microsoft doesn't trust the startssl certs either, so they have to be installed on the devices. Not really a hack, in fact most of the enterprises I have worked for use their own PKI infrastructure. Installing certs on windows mobile is a one click operation.

I too am relaying my outgoing mail through Verizon's mail server, but not because the ports were blocked, but rather because gmail would not accept emails from my dynamic ip address.

I will have to check port 25 incoming here, but I am certain that a couple years ago when I switched to FiOS the port 25 blocking caused a disruption in my mail.]]> http://www.dslreports.com/forum/remark,21063106 Fri, 05 Sep 2008 14:29:18 EDT Re: [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21062585 Hooper :
said by Ronin_R6 See Profile :

Just go to startssl.com and get yourself a free Certificate. Then use secure connections. It will use port 443 which isn't blocked, and it will keep your data more secure in the process.
You can generate your own SSL as well via numerous 3rd party tools and through Windows Certificate Authority. The problem is that they are not trusted by a root CA and will likely cause issues on your device with security prompts. This will break synchronization, unless you hack the device's root store to accept the cert.]]> http://www.dslreports.com/forum/remark,21062585 Fri, 05 Sep 2008 13:12:10 EDT Re: [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21062566 Hooper : Port 25 is open here on my resdintial account. In exchange I use authenticated SMTP outbound to outgoing.verizon.net. No reason to pay for a service in either direction.

My IP has lasted up to 6 months, but recently a lot less due to power issues (planned) that have taken things offline for several hours.]]> http://www.dslreports.com/forum/remark,21062566 Fri, 05 Sep 2008 13:09:42 EDT Re: [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21062335 devicemanage : I am doing the same thing, works like a charm but costs me like 50 a year to keep it running. I fine with it but would be nice to be free too. Quick question, how long are you holding on to your ip?]]> http://www.dslreports.com/forum/remark,21062335 Fri, 05 Sep 2008 12:31:53 EDT Re: [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21061490 Ronin_R6 : Just go to startssl.com and get yourself a free Certificate. Then use secure connections. It will use port 443 which isn't blocked, and it will keep your data more secure in the process.

The issue I had when setting up exchange on my residential fios connection was that VZ blocks incoming port 25. I had to sign up for a mail redirection service that will accept mail on port 25, then forward them on a nonstandard port to my exchange box. I lso use their dynamic dns service as well, which is free as long as they are the registrar of my domain name.]]> http://www.dslreports.com/forum/remark,21061490 Fri, 05 Sep 2008 09:45:25 EDT Re: [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21059908 devicemanage : Thanks everyone!!!!]]> http://www.dslreports.com/forum/remark,21059908 Thu, 04 Sep 2008 22:46:21 EDT Re: [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21059765 More Fiber :
said by devicemanage See Profile :

I need to find a way around the inbound port 80 block for residential service.
As was suggested by deblin See Profile, you can use dyndns.org to redirect your active sync.

However, rather than appending :81 to the URL, dyndns.org offers a service called WebHop:
»www.dyndns.com/support/kb/webhop···ml#ports
which accepts incoming requests on port 80 to a public domain name and redirects them to a non-standard port on your dynamic IP address (e.g. 8080).

You need three things to make this work:
•dyndns.org's WebHop service
•Enable the dyndns.org dynamic IP address updater in the Actiontec.
•Create a Port Forward in the Actiontec for inbound port 8080 to your server's port 80.]]> http://www.dslreports.com/forum/remark,21059765 Thu, 04 Sep 2008 22:23:50 EDT Re: [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21058133 Hooper : I was never able to get activesync to work over anything but port 80 and 443. I tried for a bit and then ran out of time. I couldn't find any other real success stories on the net either... one of the reasons I gave up.]]> http://www.dslreports.com/forum/remark,21058133 Thu, 04 Sep 2008 17:42:28 EDT Re: [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21057466 devicemanage :
said by Hooper See Profile :

said by devicemanage See Profile :

Well I can now access the owa via mail.domainname.com:443 - this might suffice for now but I cant get my cell to accept anything except the domain name - it just reverts back.

Thanks for the info so far. I was aware about the fios port blocking but there are lots of things you can do to live with it - if you know how.
The "Requires Secure Connection" checkbox on your mobile specifies the client to use port 443/SSL. This is also one of the reasons non-standard ports really don't work well with ActiveSync. Take for example Nokia's Mail For Exchange client. It allows you to enter a non-standard port, but exchange on the back end gets screwed up connecting.
Yeah, I hear ya, I am probably going to go the ssl route. I did find a msft link about creating a virtual server in exchange and then re-direct kb817379

»support.microsoft.com/kb/817379/en-us

what do you think of method 2]]> http://www.dslreports.com/forum/remark,21057466 Thu, 04 Sep 2008 15:35:24 EDT Re: [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21057379 sashwa : Moved back from Microsoft as it doesn't seem to be a Microsoft problem.]]> http://www.dslreports.com/forum/remark,21057379 Thu, 04 Sep 2008 15:18:45 EDT Re: [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21057369 Hooper :
said by devicemanage See Profile :

Well I can now access the owa via mail.domainname.com:443 - this might suffice for now but I cant get my cell to accept anything except the domain name - it just reverts back.

Thanks for the info so far. I was aware about the fios port blocking but there are lots of things you can do to live with it - if you know how.
The "Requires Secure Connection" checkbox on your mobile specifies the client to use port 443/SSL. This is also one of the reasons non-standard ports really don't work well with ActiveSync. Take for example Nokia's Mail For Exchange client. It allows you to enter a non-standard port, but exchange on the back end gets screwed up connecting.]]> http://www.dslreports.com/forum/remark,21057369 Thu, 04 Sep 2008 15:17:01 EDT Re: [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21056272 devicemanage : Well I can now access the owa via mail.domainname.com:443 - this might suffice for now but I cant get my cell to accept anything except the domain name - it just reverts back.

Thanks for the info so far. I was aware about the fios port blocking but there are lots of things you can do to live with it - if you know how.
--
»www.devicemanager.net]]> http://www.dslreports.com/forum/remark,21056272 Thu, 04 Sep 2008 11:38:26 EDT Re: [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21056217 Doctor Olds :
said by devicemanage See Profile :

I need to find a way around the inbound port 80 block for residential service.
The only way around a blocked port is to open it. That means you have to purchase a Business Account. You can't get the port opened on a Residential FIOS Account. If you need port 80, it is only open on their Business Plans.

»Verizon Online FiOS FAQ »What about Port 80 - is it blocked?
--
What’s the point of owning a supercar if you can’t scare yourself stupid from time to time?]]> http://www.dslreports.com/forum/remark,21056217 Thu, 04 Sep 2008 11:27:46 EDT Re: [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21056146 sashwa : Moved in from Verizon Fiber Optic.]]> http://www.dslreports.com/forum/remark,21056146 Thu, 04 Sep 2008 11:11:11 EDT Re: [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21056130 Hooper : »technet.microsoft.com/en-us/libr···80).aspx

If you only have one public IP, you can only have one server on 443. I would mover the firewall to another port.]]> http://www.dslreports.com/forum/remark,21056130 Thu, 04 Sep 2008 11:08:17 EDT Re: [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21056002 devicemanage :
said by Hooper See Profile :

The easiest solution is to use 443 and get a cert (assuming you are talking about Exchange Activesync). Running Active Sync for Exchange on a non-standard port will leave you reeling in frustration.
I am using it for exchange. Not too sure how I would change the owa to 443? Could you explain that for me? I would assume there is a record in iis that I need to change, but do you know the details? Currently I am using 443 for my firewall I would assume like with any webserver you could run multiple sites off 1 port?]]> http://www.dslreports.com/forum/remark,21056002 Thu, 04 Sep 2008 10:45:11 EDT Re: [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21055885 Hooper : The easiest solution is to use 443 and get a cert (assuming you are talking about Exchange Activesync). Running Active Sync for Exchange on a non-standard port will leave you reeling in frustration.]]> http://www.dslreports.com/forum/remark,21055885 Thu, 04 Sep 2008 10:25:42 EDT Re: [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21055814 deblin : You can use a dynamic dns from someone like http://dyndns.org, and just run your server on port 81 instead of 80, then point your browser (or your active sync client/etc) to:

http://yourhost.dyndns.org:81

Thanks,
Josh
--
He who is not contented with what he has, would not be contented with what he would like to have. -Socrates]]> http://www.dslreports.com/forum/remark,21055814 Thu, 04 Sep 2008 10:08:48 EDT [northeast] FIOS and Inbound Port 80 http://www.dslreports.com/forum/remark,21055634 devicemanage : I need to find a way around the inbound port 80 block for residential service. What tools are you guys using - I need to be able to run active sync over the internet for my cell phone.
--
»www.devicemanager.net]]> http://www.dslreports.com/forum/remark,21055634 Thu, 04 Sep 2008 09:32:47 EDT