So I did a server upgrade this morning (Mavericks Server) and everything went fine -- Or so I thought.

Now, for whatever reason, some of my forwarded ports have stopped working. Namely my L2TP VPN ports (500, 1701 and 4500) and my server admin port of 311. Others like 80, 443 and 1723 (PPTP) work.

I don't get it. I changed nothing on my Airport extreme and had comcast reset the modem. No joy. I also tried changing the IP from my mac mini (running Mavericks server) to another Mac (running mavericks client) in the event the Mavericks was causing an issue. That didn't work.

Could there possibly be a bug in the airport software that is causing this to just pop up? canyouseeme.org confirms the ports are not open. This is driving me bat shit crazy. Or is there a bug in Mavericks and those ports are somehow closed? No firewalls running on any of my machines, it's all controlled by the airport extreme.

WTFBBQ

 

Can you admin into your server internally? If so the issue is with your Mac if not then it's probably with your router.

 

If you didnt touch the Airport settings, I think its on the Mac side somewhere. May be a bug since the server is very beta.

 

I'm going to roll back to 10.8 server and see what happens. Unfortunately, it'll be a few days before I can get to it.

 

No issues internally. But it's strange that certain ports from the outside work, others don't.

 

Maybe something screwy happened in the router. Try resetting it? That's probably quicker and easier to do than going back to to 10.8

 

I did reset it. Even started brand spanking new after a factory reset. Tied the mini's MAC address to it's IP, forwarded port 311 to it. Nada. But I forwarded 80 and 443 after a clean start, those worked.

Could the OS have a bug in it that the port is actually being forwarded to the proper IP but is being stopped at the server-level?

When I watch the VPN logs, there is no activity when I try to connect from the outside, so the first thought is the port is open. But since nothing has changed and was working prior to 10.9, it makes me wonder what's going on within Mavericks.

 

If you turn the firewall off completely on the server does it work then?

 

Firewall IS completely off. It has never been on, even in 10.8.

 

For the hell of it, try turning on Back to my Mac. Its supposed to enable the incoming ports on the airport and macs.

 

That will jack with the NAT settings and likely not help things. Open to anything at this point, though.

The latest Mavericks server release is from 10/4, so hoping GM comes soon. I may wait and see if that cures things. Only thing I'm missing is remote admin under port 311. VPN is working under PTPP, fortunately.

 

I may be off on this but I'd look into turning verbose logging in Console in the server and seeing if you get anything. You said you checked the logs but did you turn on verbose logging? Are VPN logs in the console?

 

VPN logs are in the console... Nothing shows up when using L2TP from the outside. PPTP comes up.

 

Anyway to compare the PPTP logs on 10.9 to PPTP logs of 10.8 Server? I have 10.7 Server but don't have PPTP setup

 

There's nothing to compare as the logs do not change when trying to access the server via L2TP from the outside. There are no error messages, nada. Whereas if PTPP fails or I connect L2TP via inside my firewall, there are plenty of updates. Essentially, when I come from the outside, it's like it never happens.

 

Still fubar under Mavericks GM and the final Server build. wtfbbq

 

Did you do a clean install to GM or upgrade over existing OS?

 

Clean


Looks like some others are having the same issues. It's a Mavericks bug, it appears.