Support

Akeeba Backup for WordPress

#30261 – Which ports should be open?

Posted in ‘Akeeba Backup for WordPress’
This is a public ticket. Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.
Tuesday, 18 September 2018 07:51 CDT
Hi Akeeba Support,

Want to find out, which ports should be open in order to post-process to another server?

Just to give you a bit of background: We have recently moved one of our sites to another server with heightened security, all ports are closed by the firewall unless otherwise specified. Cloudflare is also in place for the server. We are unable to login to the wordpress admin unless we VPN into another network.

I've tried pinging the url(www.akeebabackup.com) from SSH, and I do get a response.

I'm getting the following when doing the backup: cURL error 7: Failed to connect to www.akeebabackup.com port 443: Timed out.

It works fine when I do the backup without any post-processing. Also, I'm trying to deploy to a Google drive.
Custom Fields
WordPress version (in x.y.z format) 4.9.7
PHP version (in x.y.z format) 5.5.19
Akeeba Backup version (x.y.z format) 3.1.1
 
Deonkretch
Tuesday, 18 September 2018 09:43 CDT
Pinging a domain name uses ICMP. It does not open a TCP connection. See https://superuser.com/questions/674605/what-is-type-of-icmp-packets-tcp-or-udp for a quick explanation. Since your firewall, most likely an iptables-based one, is filtering TCP and UDP traffic (but not ICMP) you can ping but you cannot make HTTP requests (which use TCP traffic) to remote servers.

You should try using cURL from the command line to see if you can connect to a remote server over HTTP/HTTPS. For example, you can run

curl "https://cdn.akeebabackup.com/updates/backupwppro.ini"

to see if you can access our CDN. In order to receive and install updates you need to be able to access both cdn.akeebabackup.com and www.akeebabackup.com over port 443 (HTTPS). Please note that the IP address for the CDN is not guaranteed since it's a CDN and by definition it resolves to whichever server is closest to you (your server, not you the person).

Moreover, post-processing requires opening a connection to different domains. Google Drive requires access to both www.googleapis.com and www.akeebabackup.com over port 443. Also note that Google Drive MAY return a different URL it requires access to over port 443.

All these domains need to be accessible from your server, i.e. you need to allow outbound TCP connections to them. How you should do that is very well outside the scope of our support. It has everything to do with how the server and its firewall is set up. You need to ask your systems administrator to help you open outbound connections in your firewall to these domains.


Nicholas K. Dionysopoulos

Lead Developer and Director



Greek: native

English: excellent

French: basic



Please keep in mind my timezone and cultural differences when reading my replies. Thank you!



nicholas
Thursday, 18 October 2018 17:17 CDT
This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.
system
This ticket is closed, therefore read-only. You can no longer reply to it. If you need to provide more information, please open a new ticket and mention this ticket's number.

Support Information

Working hours: Typically we work Monday to Friday, 9am to 7pm Cyprus timezone (EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets, but we cannot respond to them, outside of our working hours.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!

Cookies Notification - Action required

This website uses cookies to provide user authentication and improve your user experience. Please indicate whether you consent to our site placing these cookies on your device. You can change your preference later, from the controls which will be made available to you at the bottom of every page of our site.