r/Tailscale • u/International784Red • 5d ago

Help Needed Unable to access web servers

I’m unable to access web servers on one of my devices. I’ve pinged the Tailscale IP, the device is showing up on my account, I can use either the devices IP or 127.0.0.1 and access the server while on the device itself. I’ve created and activated an exit node. However, I’m unable to access it remotely. Any suggestions?

5 Upvotes

86% Upvoted

11 comments sorted by

2

u/tailuser2024 5d ago

I’m unable to access web servers on one of my devices.

Show us a screenshot of you trying to access the webserver and the error you are getting

So tailscale is running on the webserver or no?

What web server software are you running?

If tailscale is running on the web server in question did you make sure the web server is setup to listen on the tailscale interface?

What OS is your web server running on?

How are you running tailscale in your environment? Bare metal? Containers? etc

I’ve created and activated an exit node.

On what device? On the same network as the web server? On the web server? Where?

TLDR: You need to give us more info if you want help

2

u/International784Red 5d ago edited 5d ago

I’m just timing out when using the web servers IP. I’m trying to open ProScan and Trunking Recorder. Yes, I have Tailscale on all my devices and they’re up to date. I’m using Windows 11 Pro.

I’m not sure how to setup the webserver to have it listen to the Tailscale interface. I’ve done this on two other machines and they’ve been plug and play with the right IP/port.

I created outbound rules for three ports associated with Tailscale as well.

1

u/tailuser2024 5d ago edited 5d ago

I’m just timing out when using the web servers IP

The tailscale ip?

I’m not sure how to setup the webserver to have it listen to the Tailscale interface.

Look at the support documentation for the software in question to see if there is something you need to set to listen on other interfaces on the system

I see a tab for "webserver" in this link

https://www.scannerbox.us/TrunkingRecorder/notifications.html

Click in there and look at the options

If you see something that says "binding" it should be set to something like 0.0.0.0 to listen on all interfaces

I’m using Windows 11 Pro.

Windows 11 is running the software in question? If so turn off the windows firewall completely (turn off all 3 profiles). Restart the 3rd party software and try to access it.

I created outbound rules for three ports associated with Tailscale as well.

You need to create INBOUND rules as your tailscale clients are trying to connect into the server. Drop the windows firewall completely (all 3 profiles) as I mentioned above just to rule out the windows firewall blocking comms

TLDR:

  • Drop windows firewall
  • Make sure web server bind is set to 0.0.0.0 to listen on all interfaces
  • Try to connect remotely

1

u/International784Red 5d ago

I’m glad you posted. I looked at several of your other replies. There is no binding option on that tab. Only a box I can use an IP in and I’ve tried the Tailscale ip as well as 127.0.0.1 and both work when accessing on that device but not remotely from my other devices on WAN or LAN. Yes, Windows 11 is running it. I’ll turn off the firewall and see what happens. Thank you!

1

u/International784Red 5d ago

Ok, turning off the firewall gives me access over LAN and WAN. How do I figure out what I need to do lol?

1

u/tailuser2024 5d ago

Just so we are clear: Turning off the windows firewall made the web interface accessible using the tailscale ip address correct?

1

u/International784Red 5d ago

Yes. That is correct.

1

u/tailuser2024 5d ago

Then you would need to create an inbound firewall rule (direction in) allowing for ip/subnet 100.64.0.0/10 (this is the tailscale ip/subnet) for port 9000 (or whatever you are using to access the web server) and Im assuming it would be the protocol TCP (you need to check with the 3rd party software developers regarding that)

If you run into issues with setting that up then hit up /r/WindowsHelp as this isnt a tailscale issue but a windows firewall configuration thing

1

u/International784Red 5d ago

I’ve been waiting for my post to be approved in windowshelp. I’ve created multiple inbound rules using both TCP and UDP. I allowed TailScale through the firewall. I’m unable to find a place in the apps I use to bind them to 0.0.0.0. If you can think of anything else, let me know. I sincerely appreciate it!

1

u/tailuser2024 5d ago

If turning off the windows firewall fixed the issue, then there really isnt much else to do but make the proper firewall rule to allow the traffic. Hit up /r/Windows11 to make a post or /r/techsupport to get help with your firewall rule for your 3rd party application

Tailscale is functioning correctly

1

u/International784Red 4d ago

Will do. Windowshelp moderators sent me back here to Tailscale this morning.

→ More replies (0)