nas-tools/webdav/TROUBLESHOOTING.md

WebDAV External Access Troubleshooting Guide

Problem

WebDAV works on intranet but fails from external networks with "Connection refused" error.

Common Causes and Solutions

1. Service Bound to Localhost Only

Symptom: Service only listens on 127.0.0.1 or ::1 instead of all interfaces.

Solution:

• Apache: Change Listen 127.0.0.1:5006 to Listen 0.0.0.0:5006 or Listen *:5006
• Nginx: Change listen 127.0.0.1:5006; to listen 0.0.0.0:5006; or listen *:5006;
• Other services: Ensure binding to 0.0.0.0 or * instead of localhost/127.0.0.1

Check:

netstat -tuln | grep 5006
# or
ss -tuln | grep 5006

If you see 127.0.0.1:5006 or ::1:5006, the service is only accessible locally.

2. Firewall Blocking Port 5006

Solution:

UFW (Ubuntu/Debian):

sudo ufw allow 5006/tcp
sudo ufw reload

firewalld (CentOS/RHEL):

sudo firewall-cmd --permanent --add-port=5006/tcp
sudo firewall-cmd --reload

iptables:

sudo iptables -A INPUT -p tcp --dport 5006 -j ACCEPT
sudo iptables-save

3. Router Port Forwarding Not Configured

Solution:

1. Access your router's admin panel
2. Navigate to Port Forwarding / Virtual Server settings
3. Add rule:
   • External Port: 5006
   • Internal IP: Your NAS IP address (e.g., 192.168.1.100)
   • Internal Port: 5006
   • Protocol: TCP
4. Save and apply changes

4. Router Firewall Blocking Incoming Connections

Solution:

• Check router firewall settings
• Ensure port 5006 is allowed for incoming connections
• Some routers have separate WAN firewall rules

5. ISP Blocking Port 5006

Solution:

• Some ISPs block certain ports
• Try a different external port (e.g., 5007, 8080)
• Update port forwarding to use the new port

6. Service Not Running or Crashed

Check service status:

# For systemd services
systemctl status webdav
# or
systemctl status apache2
# or
systemctl status nginx

# Check if process is running
ps aux | grep -i webdav

Restart service:

sudo systemctl restart webdav
# or
sudo systemctl restart apache2
# or
sudo systemctl restart nginx

7. NAS-Specific Configuration

Synology NAS:

1. Control Panel → External Access → Router Configuration
2. Enable port forwarding for port 5006
3. Control Panel → Security → Firewall
4. Ensure port 5006 is allowed

QNAP NAS:

1. Network & Virtual Switch → Port Forwarding
2. Add rule for port 5006
3. Security → Firewall → Allow port 5006

Other NAS:

• Check NAS admin panel for port forwarding/firewall settings
• Ensure WebDAV service is enabled and configured for external access

Diagnostic Steps

1. Run the diagnostic script:

   chmod +x diagnose_webdav.sh
   sudo ./diagnose_webdav.sh
   

2. Test local connection:

   curl -k -X PROPFIND https://localhost:5006
   # or
   curl -k -X PROPFIND https://127.0.0.1:5006
   

3. Test from internal network:

   curl -k -X PROPFIND https://<NAS_INTERNAL_IP>:5006
   

4. Test from external network:

   curl -k -X PROPFIND https://jimmygan.myds.me:5006
   

5. Check if port is reachable externally:

   # From external network
   telnet jimmygan.myds.me 5006
   # or
   nc -zv jimmygan.myds.me 5006
   

Quick Fix Checklist

• Service is bound to 0.0.0.0:5006 (not 127.0.0.1:5006)
• Firewall allows port 5006
• Router port forwarding configured (External 5006 → Internal NAS IP:5006)
• Router firewall allows incoming connections on port 5006
• WebDAV service is running
• Tested local connection (works)
• Tested internal network connection (works)
• External connection still fails → Check ISP/port blocking

Additional Notes

• DDNS: Your domain jimmygan.myds.me appears to be a DDNS service. Ensure it's properly configured and pointing to your current external IP.
• HTTPS: Since you're using HTTPS, ensure SSL certificate is valid and the service is configured for SSL/TLS.
• IPv6: The error shows IPv6 connection attempts. If your router/NAS doesn't support IPv6 properly, you may need to disable IPv6 or configure it separately.