open localhost for other devices in same network only

[Per Jessen]

On Fri, 20 Mar 2020 19:49:04 +0100

On Fri, 20 Mar 2020 18:52:22 +0100

On Fri, 20 Mar 2020 17:07:17 +0100

Must say, that, in case that I have a firewall, it is what
came with the default install of OS 15.1. Also apache is a
default install via Yast.

I expect the firewall is your problem.

Well, it might be, but Daniel hasn't told us how his phone is
connected to the Internet yet. Maybe it's not on the local wifi
network, or maybe it's on a guest network provided by the
router, as the phones in my house are. We don't even know
whether it's IP4 or IP6 yet.
I think it would be helpful if Daniel described the setup,
including IP addresses (unless the mysterious 'IP' in his
original mail is a public address).

The computer and the phone are connected to the same router, both
have addresses 192.168.x.x.

Sorry but 192.168.x.x is not a network identifier. 192.168.0.x is a
different network to 192.168.1.x That was exactly my point.

<nitpick>
On 192.168.0.0/16, they are on the same network.
</nitpick>

I don't think it's likely that somebody who was able to configure that
non-standard arrangement would be asking the questions Daniel is.

I guess at most "atypical" , but not non-standard :-) Otherwise I
agree, it was just your claim that 192.168.1.x and 192.168.2.x were
separate networks I found a little too strong.

For solving Daniel's issue, it is sufficient to know we're dealing
with some 192.168.x.x network behind his router.

No, that's entirely my point. Some routers, such as mine have TWO
different 192.168.*.* networks behind them.

one for wifi, one for wired ?

Well, it seems Daniel's router doesn't do that.

[Dave Howorth]

On Fri, 20 Mar 2020 16:01:52 -0400

I know, but that's nothing to do with what I wrote. Please reread.

I'm having a hard time understanding what you're trying to do that's
causing so much problem.

I'm not trying to do anything; I'm not the OP. Please generalise my
request and reread the whole thread :)

  As I mentioned, it wasn't hard to set up a
web server and it wasn't hard to connect to it.  What are you doing
that's causing the problem?  For example, you mention directories.
Why is that even of interest from someone simply trying to access the
server?  It should be transparent.  Regardless, at the moment, the
addresses are irrelevant.  Just set up the server so that it works.
You can then start worrying about what it can access and keeping it
to the local network is simply not an issue.

[Dave Howorth]

On Fri, 20 Mar 2020 19:49:04 +0100

On Fri, 20 Mar 2020 18:52:22 +0100

On Fri, 20 Mar 2020 17:07:17 +0100

Must say, that, in case that I have a firewall, it is what came
with the default install of OS 15.1. Also apache is a default
install via Yast.

I expect the firewall is your problem.

Well, it might be, but Daniel hasn't told us how his phone is
connected to the Internet yet. Maybe it's not on the local wifi
network, or maybe it's on a guest network provided by the router,
as the phones in my house are. We don't even know whether it's
IP4 or IP6 yet.
I think it would be helpful if Daniel described the setup,
including IP addresses (unless the mysterious 'IP' in his
original mail is a public address).

The computer and the phone are connected to the same router, both
have addresses 192.168.x.x.

Sorry but 192.168.x.x is not a network identifier. 192.168.0.x is a
different network to 192.168.1.x That was exactly my point.

<nitpick>
On 192.168.0.0/16, they are on the same network.
</nitpick>

I don't think it's likely that somebody who was able to configure that
non-standard arrangement would be asking the questions Daniel is.

For solving Daniel's issue, it is sufficient to know we're dealing
with some 192.168.x.x network behind his router.

No, that's entirely my point. Some routers, such as mine have TWO
different 192.168.*.* networks behind them.

[Per Jessen]

Yes, I have firewalld running, I know since 5 minutes :-)
I stopped it, and - trara! - it (kind of) works.
- can I open port 80 in firewalld settings (I guess I'll find them
somewhere in Yast) without the risk to compromise my computer or the
files that are within the local apache directory htdocs...?

Yep. By opening port 80 on that machine, your apache webserver becomes
available to your local network only.

- what could be the reason for the "kind of" described below?
Kind of: I get the connection to the server http://192.158.1.x and it
show's apaches default index-page "it works".

That isn't "kind of", that's 100% success :-)

Now when I call my file
http://192.158.1.x/Entwicklung/project/index.php it shows the text of
the index-file, but not the images, nor does it use the CSS.

"text of the the index file" = output from your index.php ?

When it doesn't show any images, what do you see instead - a placeholder
or just nothing? The former would mean the image wasn't found, if you
see nothing at all, something is wrong with the HTML. Not using the
CSS - which is linked in from a file? Also sounds like the file isn't
being found.

If you look in the apache logs, you will see 404s for the files that
were not found.

On my local computer the path is /srv/www/htdocs/Entwicklung/project
within the php-file pathes are relative
it works on the same computer, but not on the phone (but it works on
the phone when calling it from the online-internet-server)

"it works on the same computer" ? so when you browse it locally, which
address do you use? localhost or 192.168.x.x ? Try it from the local
computer, but with 192.168.x.x - that ought to produce the same result
as on your phone. Maybe then view the source (ctrl-u) and paste it
somewhere for us to see. Or send it to me.

[Daniel Bauer]

Post by Per Jessen

Yes, I have firewalld running, I know since 5 minutes :-)
I stopped it, and - trara! - it (kind of) works.
- can I open port 80 in firewalld settings (I guess I'll find them
somewhere in Yast) without the risk to compromise my computer or the
files that are within the local apache directory htdocs...?

Yep. By opening port 80 on that machine, your apache webserver becomes
available to your local network only.

Ok, I opened that port, and in fact I can reach the server when the
phone is on my wifi-net, but not when it's on the phone-net. Good.

Post by Per Jessen

- what could be the reason for the "kind of" described below?
Kind of: I get the connection to the server http://192.158.1.x and it
show's apaches default index-page "it works".

That isn't "kind of", that's 100% success :-)

Now when I call my file
http://192.158.1.x/Entwicklung/project/index.php it shows the text of
the index-file, but not the images, nor does it use the CSS.

"text of the the index file" = output from your index.php ?

Yes

Post by Per Jessen
When it doesn't show any images, what do you see instead - a placeholder
or just nothing? The former would mean the image wasn't found, if you
see nothing at all, something is wrong with the HTML.

I see the "missing image" icon. Styles are not applied, the font is not
used, background colors and images do not appear. (Inline styles are
applied - this is only a temporary page and I added some styles directly
to the lines - but styles from the css-file not)

Loading Image...

Post by Per Jessen
Not using the
CSS - which is linked in from a file? Also sounds like the file isn't
being found.

Yes, linked from a file.

Post by Per Jessen
If you look in the apache logs, you will see 404s for the files that
were not found.

This is the log from the very last try. As much as I see all parts were
loaded correctly. Still styles are not applied and image not shown on
the mobile.

192.168.1.35 - - [21/Mar/2020:09:56:17 +0100] "GET
/Entwicklung/karls/index2.php HTTP/1.1" 200 1724 "-" "Mozilla/5.0
(Android 7.0; Mobile; rv:68.0) Gecko/68.0 Firefox/68.0"
192.168.1.35 - - [21/Mar/2020:09:56:17 +0100] "GET
/Entwicklung/karls/img/logo_small.png HTTP/1.1" 200 4002
"http://192.168.1.38/Entwicklung/karls/index2.php" "Mozilla/5.0 (Android
7.0; Mobile; rv:68.0) Gecko/68.0 Firefox/68.0"
192.168.1.35 - - [21/Mar/2020:09:56:17 +0100] "GET
/Entwicklung/karls/css/karls.css HTTP/1.1" 200 14159
"http://192.168.1.38/Entwicklung/karls/index2.php" "Mozilla/5.0 (Android
7.0; Mobile; rv:68.0) Gecko/68.0 Firefox/68.0"
192.168.1.35 - - [21/Mar/2020:09:56:17 +0100] "GET
/Entwicklung/karls/scripts/karls_top.js HTTP/1.1" 200 6120
"http://192.168.1.38/Entwicklung/karls/index2.php" "Mozilla/5.0 (Android
7.0; Mobile; rv:68.0) Gecko/68.0 Firefox/68.0"
192.168.1.35 - - [21/Mar/2020:09:56:18 +0100] "GET
/Entwicklung/karls/scripts/karls_top.js HTTP/1.1" 200 6120
"http://192.168.1.38/Entwicklung/karls/index2.php" "Mozilla/5.0 (Android
7.0; Mobile; rv:68.0) Gecko/68.0 Firefox/68.0"
192.168.1.35 - - [21/Mar/2020:09:56:18 +0100] "GET
/Entwicklung/karls/img/logo_small.png HTTP/1.1" 200 4002
"http://192.168.1.38/Entwicklung/karls/index2.php" "Mozilla/5.0 (Android
7.0; Mobile; rv:68.0) Gecko/68.0 Firefox/68.0"
192.168.1.35 - - [21/Mar/2020:09:56:18 +0100] "GET /favicon.ico
HTTP/1.1" 200 302 "-" "Mozilla/5.0 (Android 7.0; Mobile; rv:68.6.0)
Gecko/68.6.0 Firefox/68.6.0"

Post by Per Jessen

On my local computer the path is /srv/www/htdocs/Entwicklung/project
within the php-file pathes are relative
it works on the same computer, but not on the phone (but it works on
the phone when calling it from the online-internet-server)

"it works on the same computer" ? so when you browse it locally, which
address do you use? localhost or 192.168.x.x ? Try it from the local
computer, but with 192.168.x.x - that ought to produce the same result
as on your phone.

It works on the same computer with 192...
Loading Image...

Post by Per Jessen
Maybe then view the source (ctrl-u) and paste it
somewhere for us to see. Or send it to me.

It's not a big secret :-)
https://www.daniel-bauer.com/div/index2.html.txt

(I see there are some characters displayed wrong - this is because I
saved to source on the phone and sent it to me as email..., originally
all characters are displayed correctly)

[Carlos E. R.]

...

Comtrend VG-8050 - I suppose Daniel has a different model, mine has
some years. Maybe even different brand. But same provider, so same
thinking heads.
<https://www.scribd.com/document/298854959/Manual-Usuario-Fabricante-Router-Fibra-Optica-Comtrend-VG-8050>

Ah thanks, but that site seems to want me to sign up to it to be able
to read the document.

I just exited the prompt and it appeared to let me read, but I did not try
browse to the end. You can instead just google "Comtrend VG-8050" and find
another site, some have the original which is in English, not Spanish.

I don't have now access to my desktop machine which has a copy; I'm
migrating it.

- --
Cheers
Carlos E. R.

(from openSUSE 15.1 (Legolas))

[Dave Howorth]

On Sat, 21 Mar 2020 22:12:00 +0100 (CET)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
...

Comtrend VG-8050 - I suppose Daniel has a different model, mine has
some years. Maybe even different brand. But same provider, so same
thinking heads.
<https://www.scribd.com/document/298854959/Manual-Usuario-Fabricante-Router-Fibra-Optica-Comtrend-VG-8050>

Ah thanks, but that site seems to want me to sign up to it to be
able to read the document.

I just exited the prompt and it appeared to let me read, but I did
not try browse to the end. You can instead just google "Comtrend
VG-8050" and find another site, some have the original which is in
English, not Spanish.

OK. This link has an English manual:
http://www.movistar.es/rpmm/estaticos/residencial/fijo/banda-ancha-adsl/manuales/router-inalambrico-movistar-futura-ftth/Manual-usuario-fabricante-Router-Fibra-Optica-Comtrend-VG-8050.pdf

I don't see any mention of more than one WLAN though??

I don't have now access to my desktop machine which has a copy; I'm
migrating it.
- --
Cheers
Carlos E. R.
(from openSUSE 15.1 (Legolas))

[Carlos E. R.]

Post by Dave Howorth

...

Comtrend VG-8050 - I suppose Daniel has a different model, mine has
some years. Maybe even different brand. But same provider, so same
thinking heads.

...

Post by Dave Howorth
http://www.movistar.es/rpmm/estaticos/residencial/fijo/banda-ancha-adsl/manuales/router-inalambrico-movistar-futura-ftth/Manual-usuario-fabricante-Router-Fibra-Optica-Comtrend-VG-8050.pdf
I don't see any mention of more than one WLAN though??

I have not read it recently, but when I define a guest wifi access I can
only enter ssid and password, nothing about defining an vlan or segment.
And it ends in the same segment as everything, with access to everything.

- --
Cheers
Carlos E. R.

(from openSUSE 15.1 (Legolas))

[Carlos E. R.]

I have not read it recently, but when I define a guest wifi access I
can only enter ssid and password, nothing about defining an vlan or
segment. And it ends in the same segment as everything, with access to
everything.

Some WiFi routers have a guest WiFi, which connects guests only to the
Internet.

I know.

But mine has 4 guest wifis, and all of them connect to the main internal
network.

<https://susepaste.org/12205271>

  A proper AP will support VLANs for the different SSIDs.  The
VLANs can then be used to connect the other SSIDs as needed

As you can see, the wifi setup can not associate the guest to an vlan.

See security tab, some more options but not that one:

<https://susepaste.org/83223245>



I have a separate AP upstairs (Asus RT-N12D1), but I need the guest
access downstairs. This one has a proper guest configuration with
restricted lan access, it says. I have to try it.

[Dave Howorth]

On Fri, 20 Mar 2020 18:52:22 +0100

On Fri, 20 Mar 2020 17:07:17 +0100

Must say, that, in case that I have a firewall, it is what came
with the default install of OS 15.1. Also apache is a default
install via Yast.

I expect the firewall is your problem.

Well, it might be, but Daniel hasn't told us how his phone is
connected to the Internet yet. Maybe it's not on the local wifi
network, or maybe it's on a guest network provided by the router,
as the phones in my house are. We don't even know whether it's IP4
or IP6 yet.
I think it would be helpful if Daniel described the setup,
including IP addresses (unless the mysterious 'IP' in his original
mail is a public address).

The computer and the phone are connected to the same router, both
have addresses 192.168.x.x.

Sorry but 192.168.x.x is not a network identifier. 192.168.0.x is a
different network to 192.168.1.x That was exactly my point. You
certainly need to give us the first three octets, and there's no reason
not to give us the fourth.

I can, for example, use the App SSHelper and rsync from my phone to
the computer, so in principle the connection works.
I read a lot in google, open this, open that, but I am bit afraid
that I could open my local server to the world...
In earlier projects I uploaded the files to the online-web-server in
a htaccess protected folder, but it would be much more comfortable if
I could simply see how my CSS magic works using the local server...

[Per Jessen]

On Fri, 20 Mar 2020 18:52:22 +0100

On Fri, 20 Mar 2020 17:07:17 +0100

Must say, that, in case that I have a firewall, it is what came
with the default install of OS 15.1. Also apache is a default
install via Yast.

I expect the firewall is your problem.

Well, it might be, but Daniel hasn't told us how his phone is
connected to the Internet yet. Maybe it's not on the local wifi
network, or maybe it's on a guest network provided by the router,
as the phones in my house are. We don't even know whether it's IP4
or IP6 yet.
I think it would be helpful if Daniel described the setup,
including IP addresses (unless the mysterious 'IP' in his original
mail is a public address).

The computer and the phone are connected to the same router, both
have addresses 192.168.x.x.

Sorry but 192.168.x.x is not a network identifier. 192.168.0.x is a
different network to 192.168.1.x That was exactly my point.

<nitpick>
On 192.168.0.0/16, they are on the same network.
</nitpick>

For solving Daniel's issue, it is sufficient to know we're dealing with
some 192.168.x.x network behind his router.

[James Knott]

I know, but that's nothing to do with what I wrote. Please reread.

I'm having a hard time understanding what you're trying to do that's
causing so much problem.  As I mentioned, it wasn't hard to set up a web
server and it wasn't hard to connect to it.  What are you doing that's
causing the problem?  For example, you mention directories. Why is that
even of interest from someone simply trying to access the server?  It
should be transparent.  Regardless, at the moment, the addresses are
irrelevant.  Just set up the server so that it works.  You can then
start worrying about what it can access and keeping it to the local
network is simply not an issue.

[James Knott]

Doesn't firewalld automatically open a port to the local network?
There's not much point in a web server that can't serve any machines
except its own loopback address! (except for specialist testing
purposes)

If your LAN has an RFC 1918, such as 192.168.x.y, then you will never
see any connections come in from the Internet.  If you have a public
address, then you might.  Those RFC1918 addresses are not allowed on the
Internet.

[Dave Howorth]

On Sat, 21 Mar 2020 20:53:23 +0100 (CET)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

...

Post by Per Jessen
Well, it seems Daniel's router doesn't do that.

My router, suplied by the ISP (Telefonica) doesn't have that
feature. I have a different SSID and password, but there is no
separate VLAN or segment for it, which is a pain. And Daniel is
using the same ISP as me, although I suspect his router is quite
newer than mine.

I don't understand. What's the purpose of a different SSID and
password if it gives access to the same network? Is the manual for
that router available online? (in English :)

I agree with you, but someone at Comtrend or Telefónica thought it
good or not necessary to pay for the feature of having a separate
vlan (the router does uses vlans for the TV and voice services).
What is it good for? Maybe to not give the guest your password and
change it after he goes. Sigh :-/
Comtrend VG-8050 - I suppose Daniel has a different model, mine has
some years. Maybe even different brand. But same provider, so same
thinking heads.
<https://www.scribd.com/document/298854959/Manual-Usuario-Fabricante-Router-Fibra-Optica-Comtrend-VG-8050>

Ah thanks, but that site seems to want me to sign up to it to be able
to read the document.

- --
Cheers
Carlos E. R.

[Dave Howorth]

On Sat, 21 Mar 2020 13:40:52 +0100 (CET)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
...

Post by Per Jessen

No, that's entirely my point. Some routers, such as mine have TWO
different 192.168.*.* networks behind them.

one for wifi, one for wired ?

No, one main network and one guest network, with different access
profiles. Devices on the guest network can't see the main network,
so it's a good place to put many IOT devices. Much like a DMZ.
Maybe it's just a Fritz!Box feature?

Post by Per Jessen
Well, it seems Daniel's router doesn't do that.

My router, suplied by the ISP (Telefonica) doesn't have that feature.
I have a different SSID and password, but there is no separate VLAN
or segment for it, which is a pain. And Daniel is using the same ISP
as me, although I suspect his router is quite newer than mine.

I don't understand. What's the purpose of a different SSID and password
if it gives access to the same network? Is the manual for that router
available online? (in English :)

- --
Cheers
Carlos E. R.

[Patrick Shanahan]

Post by Dave Howorth
On Sat, 21 Mar 2020 13:40:52 +0100 (CET)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
...

Post by Per Jessen

No, that's entirely my point. Some routers, such as mine have TWO
different 192.168.*.* networks behind them.

one for wifi, one for wired ?

No, one main network and one guest network, with different access
profiles. Devices on the guest network can't see the main network,
so it's a good place to put many IOT devices. Much like a DMZ.
Maybe it's just a Fritz!Box feature?

Post by Per Jessen
Well, it seems Daniel's router doesn't do that.

My router, suplied by the ISP (Telefonica) doesn't have that feature.
I have a different SSID and password, but there is no separate VLAN
or segment for it, which is a pain. And Daniel is using the same ISP
as me, although I suspect his router is quite newer than mine.

I don't understand. What's the purpose of a different SSID and password
if it gives access to the same network? Is the manual for that router
available online? (in English :)

bad morning, but. Somehow this ended up in the wrong message. You
referenced links not being displayed when you accessed a paticular local
web page. If the links were not to directories in
/srv/www/htdocs/xxx/..., apache2/http requires specific configuration to
follow links. I believe it can be accomplished within ".htaccess" files
but know it can be enabled with specific configuration in the apache2/http
configs.

ie: a link from /<some>/<directory>/<file> to /srv/www/thdocs/...

apache2/http *must* be configured to follow links or the above will fail.

[Carlos E. R.]

Post by Dave Howorth

...

Post by Per Jessen
Well, it seems Daniel's router doesn't do that.

My router, suplied by the ISP (Telefonica) doesn't have that feature.
I have a different SSID and password, but there is no separate VLAN
or segment for it, which is a pain. And Daniel is using the same ISP
as me, although I suspect his router is quite newer than mine.

I don't understand. What's the purpose of a different SSID and password
if it gives access to the same network? Is the manual for that router
available online? (in English :)

I agree with you, but someone at Comtrend or Telefónica thought it good or
not necessary to pay for the feature of having a separate vlan (the router
does uses vlans for the TV and voice services).

What is it good for? Maybe to not give the guest your password and change
it after he goes. Sigh :-/

Comtrend VG-8050 - I suppose Daniel has a different model, mine has some
years. Maybe even different brand. But same provider, so same thinking
heads.

One site in English (even though the name is in Spanish):
<https://www.scribd.com/document/298854959/Manual-Usuario-Fabricante-Router-Fibra-Optica-Comtrend-VG-8050>

- --
Cheers
Carlos E. R.

(from openSUSE 15.1 (Legolas))

[Per Jessen]

The computer and the phone are connected to the same router, both have
addresses 192.168.x.x.
I can, for example, use the App SSHelper and rsync from my phone to
the computer, so in principle the connection works.
I read a lot in google, open this, open that, but I am bit afraid that
I could open my local server to the world...

You don't need to worry - with IPv4, you are behind an IPv4 NAT
mechanism, unless you explicitly configure it to forward stuff to your
webserver, you're safe.

In earlier projects I uploaded the files to the online-web-server in a
htaccess protected folder, but it would be much more comfortable if I
could simply see how my CSS magic works using the local server...

Assuming you have firewalld, my first suggestion would be to shut it
down, then see if your dev website works from your mobile. If it works
and you are more comfortable with having firewalld running, start it up
again. You just need to configure it to open port 80. I can't help
with that, I don't use firewalld.

[Daniel Bauer]

Post by Per Jessen

The computer and the phone are connected to the same router, both have
addresses 192.168.x.x.
I can, for example, use the App SSHelper and rsync from my phone to
the computer, so in principle the connection works.
I read a lot in google, open this, open that, but I am bit afraid that
I could open my local server to the world...

You don't need to worry - with IPv4, you are behind an IPv4 NAT
mechanism, unless you explicitly configure it to forward stuff to your
webserver, you're safe.

In earlier projects I uploaded the files to the online-web-server in a
htaccess protected folder, but it would be much more comfortable if I
could simply see how my CSS magic works using the local server...

Assuming you have firewalld, my first suggestion would be to shut it
down, then see if your dev website works from your mobile. If it works
and you are more comfortable with having firewalld running, start it up
again. You just need to configure it to open port 80. I can't help
with that, I don't use firewalld.

Yes, I have firewalld running, I know since 5 minutes :-)

I stopped it, and - trara! - it (kind of) works.

So now I have two questions:

- can I open port 80 in firewalld settings (I guess I'll find them
somewhere in Yast) without the risk to compromise my computer or the
files that are within the local apache directory htdocs...?

- what could be the reason for the "kind of" described below?

Kind of: I get the connection to the server http://192.158.1.x and it
show's apaches default index-page "it works".

Now when I call my file http://192.158.1.x/Entwicklung/project/index.php
it shows the text of the index-file, but not the images, nor does it use
the CSS. I have the same result with another project that is online on
my internet-webserver and that works on the webserver...

On my local computer the path is /srv/www/htdocs/Entwicklung/project
within the php-file pathes are relative
it works on the same computer, but not on the phone (but it works on the
phone when calling it from the online-internet-server)

Thanks for the help.

Daniel

[Per Jessen]

I have not read it recently, but when I define a guest wifi access I
can only enter ssid and password, nothing about defining an vlan or
segment. And it ends in the same segment as everything, with access to
everything.

I think I would consider vlans to be out of scope for most SOHO
equipment and "staff" ?

Dave, if your Fritz!box has multiple SSIDs, I would also expect it to
support VLANs ?

Two of our access points are TP-Link TL WA901 and WA801 - they both
support 4 SSIDs with VLANs. We have assigned a separate VLAN for the
guest SSID.

[Dave Howorth]

On Sat, 21 Mar 2020 09:10:18 +0100

Post by Per Jessen

On Fri, 20 Mar 2020 19:49:04 +0100

On Fri, 20 Mar 2020 18:52:22 +0100

On Fri, 20 Mar 2020 17:07:17 +0100

Must say, that, in case that I have a firewall, it is what
came with the default install of OS 15.1. Also apache is a
default install via Yast.

I expect the firewall is your problem.

Well, it might be, but Daniel hasn't told us how his phone is
connected to the Internet yet. Maybe it's not on the local
wifi network, or maybe it's on a guest network provided by the
router, as the phones in my house are. We don't even know
whether it's IP4 or IP6 yet.
I think it would be helpful if Daniel described the setup,
including IP addresses (unless the mysterious 'IP' in his
original mail is a public address).

The computer and the phone are connected to the same router,
both have addresses 192.168.x.x.

Sorry but 192.168.x.x is not a network identifier. 192.168.0.x
is a different network to 192.168.1.x That was exactly my
point.

<nitpick>
On 192.168.0.0/16, they are on the same network.
</nitpick>

I don't think it's likely that somebody who was able to configure
that non-standard arrangement would be asking the questions Daniel
is.

I guess at most "atypical" , but not non-standard :-)

OK, non-default. :P

Post by Per Jessen
Otherwise I
agree, it was just your claim that 192.168.1.x and 192.168.2.x were
separate networks I found a little too strong.

For solving Daniel's issue, it is sufficient to know we're dealing
with some 192.168.x.x network behind his router.

No, that's entirely my point. Some routers, such as mine have TWO
different 192.168.*.* networks behind them.

one for wifi, one for wired ?

No, one main network and one guest network, with different access
profiles. Devices on the guest network can't see the main network, so
it's a good place to put many IOT devices. Much like a DMZ.

Maybe it's just a Fritz!Box feature?

Post by Per Jessen
Well, it seems Daniel's router doesn't do that.

[Carlos E. R.]

...

Post by Per Jessen

No, that's entirely my point. Some routers, such as mine have TWO
different 192.168.*.* networks behind them.

one for wifi, one for wired ?

No, one main network and one guest network, with different access
profiles. Devices on the guest network can't see the main network, so
it's a good place to put many IOT devices. Much like a DMZ.
Maybe it's just a Fritz!Box feature?

Post by Per Jessen
Well, it seems Daniel's router doesn't do that.

My router, suplied by the ISP (Telefonica) doesn't have that feature. I
have a different SSID and password, but there is no separate VLAN or
segment for it, which is a pain. And Daniel is using the same ISP as me,
although I suspect his router is quite newer than mine.

- --
Cheers
Carlos E. R.

(from openSUSE 15.1 (Legolas))

[Daniel Bauer]

On Fri, 20 Mar 2020 17:07:17 +0100

Must say, that, in case that I have a firewall, it is what came with
the default install of OS 15.1. Also apache is a default install via
Yast.

I expect the firewall is your problem.

Well, it might be, but Daniel hasn't told us how his phone is connected
to the Internet yet. Maybe it's not on the local wifi network, or maybe
it's on a guest network provided by the router, as the phones in my
house are. We don't even know whether it's IP4 or IP6 yet.
I think it would be helpful if Daniel described the setup, including IP
addresses (unless the mysterious 'IP' in his original mail is a public
address).

The computer and the phone are connected to the same router, both have
addresses 192.168.x.x.

I can, for example, use the App SSHelper and rsync from my phone to the
computer, so in principle the connection works.

I read a lot in google, open this, open that, but I am bit afraid that I
could open my local server to the world...

In earlier projects I uploaded the files to the online-web-server in a
htaccess protected folder, but it would be much more comfortable if I
could simply see how my CSS magic works using the local server...

[Daniel Bauer]

Hi,
I am developing a website on localhost (apache/php/MySQL with default
install, OpenSuse 15.1) and would like to connect to it from other
devices (especially my mobile phone).
I'd like to be able to access all in /srv/www/htdocs/ but ONLY from my
local network, e.g. devices on the same wifi, and NOT open it to the
world.
What must I do?

Configure the website to be accessible from your local network -
192.168.x ?

Yes. But /how/ to I configure the website to be accessible from the
local network?

By default, apache is probably listening on all interfaces
anyway.

(right now, when I want to connect to local IP I get "unable to ccect.
Firefox can't establish a connection to the server at IP")

Is apache running ?

Yes, he's running all the time. I can access it from the computer on
which it is running. But not from my phone.

I use the correct IP. Tried it in the browser of the actual computer:
ok; from phone: "unable to connect".

Must say, that, in case that I have a firewall, it is what came with the
default install of OS 15.1. Also apache is a default install via Yast.