Support

Akeeba Backup for WordPress

#30261 Which ports should be open?

Posted in ‘Akeeba Backup for WordPress’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

WordPress version
n/a
PHP version
n/a
Akeeba Backup version
n/a

Latest post by on Thursday, 18 October 2018 17:17 CDT

Deonkretch
Hi Akeeba Support,

Want to find out, which ports should be open in order to post-process to another server?

Just to give you a bit of background: We have recently moved one of our sites to another server with heightened security, all ports are closed by the firewall unless otherwise specified. Cloudflare is also in place for the server. We are unable to login to the wordpress admin unless we VPN into another network.

I've tried pinging the url(www.akeebabackup.com) from SSH, and I do get a response.

I'm getting the following when doing the backup: cURL error 7: Failed to connect to www.akeebabackup.com port 443: Timed out.

It works fine when I do the backup without any post-processing. Also, I'm trying to deploy to a Google drive.

nicholas
Akeeba Staff
Manager
Pinging a domain name uses ICMP. It does not open a TCP connection. See https://superuser.com/questions/674605/what-is-type-of-icmp-packets-tcp-or-udp for a quick explanation. Since your firewall, most likely an iptables-based one, is filtering TCP and UDP traffic (but not ICMP) you can ping but you cannot make HTTP requests (which use TCP traffic) to remote servers.

You should try using cURL from the command line to see if you can connect to a remote server over HTTP/HTTPS. For example, you can run

curl "https://cdn.akeebabackup.com/updates/backupwppro.ini"

to see if you can access our CDN. In order to receive and install updates you need to be able to access both cdn.akeebabackup.com and www.akeebabackup.com over port 443 (HTTPS). Please note that the IP address for the CDN is not guaranteed since it's a CDN and by definition it resolves to whichever server is closest to you (your server, not you the person).

Moreover, post-processing requires opening a connection to different domains. Google Drive requires access to both www.googleapis.com and www.akeebabackup.com over port 443. Also note that Google Drive MAY return a different URL it requires access to over port 443.

All these domains need to be accessible from your server, i.e. you need to allow outbound TCP connections to them. How you should do that is very well outside the scope of our support. It has everything to do with how the server and its firewall is set up. You need to ask your systems administrator to help you open outbound connections in your firewall to these domains.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

System Task
system
This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!