New ASUS router

Please use this template for troubleshooting questions.

My issue: Website not reachable

How I encountered the problem: Error on browsing

Solutions I’ve tried: Contacted Webcentral and checked IP. Contacted Exetel to check static IP. Contacted ASUS to check port forwarding

Version of NGINX or NGINX adjacent software (e.g. NGINX Gateway Fabric): nginx version: nginx/1.24.0 (Ubuntu)

Deployment environment:

Minimal NGINX config to reproduce your issue (preferably running on https://tech-playground.com/playgrounds/nginx for ease of debugging, and if not as a code block): (Tip → Run nginx -T to print your entire NGINX config to your terminal.)

2025/12/22 12:27:40 [warn] 236592#236592: protocol options redefined for 0.0.0.0:443 in /etc/nginx/sites-enabled/sydneybackgammonclub.org.au:31
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful

configuration file /etc/nginx/nginx.conf:

user john;
worker_processes auto;
pid /run/nginx.pid;
error_log /var/log/nginx/error.log;
include /etc/nginx/modules-enabled/*.conf;

events {
worker_connections 768;

multi_accept on;

}

http {

    ##
    # Basic Settings
    ##

    sendfile on;
    tcp_nopush on;
    types_hash_max_size 2048;
    # server_tokens off;

    # server_names_hash_bucket_size 64;
    # server_name_in_redirect off;

    include /etc/nginx/mime.types;
    default_type application/octet-stream;

    ##
    # SSL Settings
    ##

    ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3; # Dropping SSLv3, ref: POODLE
    ssl_prefer_server_ciphers on;

    ##
    # Logging Settings
    ##

    access_log /var/log/nginx/access.log;

    ##
    # Gzip Settings
    ##

    gzip on;

    # gzip_vary on;
    # gzip_proxied any;
    # gzip_comp_level 6;
    # gzip_buffers 16 8k;
    # gzip_http_version 1.1;
    # gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;

    ##
    # Virtual Host Configs
    ##

    include /etc/nginx/conf.d/*.conf;
    include /etc/nginx/sites-enabled/*;
    server {
    listen 80 default_server;
    listen [::]:80 default_server;
    server_name _;
    return 444;
    }

}

mail {

# See sample authentication script at:

# GitHub - nginxinc/nginx-wiki: ARCHIVED -- Source for the now archived NGINX Wiki section of https://www.nginx.com

# auth_http localhost/auth.php;

# pop3_capabilities “TOP” “USER”;

# imap_capabilities “IMAP4rev1” “UIDPLUS”;

server {

listen localhost:110;

protocol pop3;

proxy on;

}

server {

listen localhost:143;

protocol imap;

proxy on;

}

#}

configuration file /etc/nginx/mime.types:

types {
text/html html htm shtml;
text/css css;
text/xml xml;
image/gif gif;
image/jpeg jpeg jpg;
application/javascript js;
application/atom+xml atom;
application/rss+xml rss;

text/mathml                                      mml;
text/plain                                       txt;
text/vnd.sun.j2me.app-descriptor                 jad;
text/vnd.wap.wml                                 wml;
text/x-component                                 htc;

image/avif                                       avif;
image/png                                        png;
image/svg+xml                                    svg svgz;
image/tiff                                       tif tiff;
image/vnd.wap.wbmp                               wbmp;
image/webp                                       webp;
image/x-icon                                     ico;
image/x-jng                                      jng;
image/x-ms-bmp                                   bmp;

font/woff                                        woff;
font/woff2                                       woff2;

application/java-archive                         jar war ear;
application/json                                 json;
application/mac-binhex40                         hqx;
application/msword                               doc;
application/pdf                                  pdf;
application/postscript                           ps eps ai;
application/rtf                                  rtf;
application/vnd.apple.mpegurl                    m3u8;
application/vnd.google-earth.kml+xml             kml;
application/vnd.google-earth.kmz                 kmz;
application/vnd.ms-excel                         xls;
application/vnd.ms-fontobject                    eot;
application/vnd.ms-powerpoint                    ppt;
application/vnd.oasis.opendocument.graphics      odg;
application/vnd.oasis.opendocument.presentation  odp;
application/vnd.oasis.opendocument.spreadsheet   ods;
application/vnd.oasis.opendocument.text          odt;
application/vnd.openxmlformats-officedocument.presentationml.presentation
                                                 pptx;
application/vnd.openxmlformats-officedocument.spreadsheetml.sheet
                                                 xlsx;
application/vnd.openxmlformats-officedocument.wordprocessingml.document
                                                 docx;
application/vnd.wap.wmlc                         wmlc;
application/wasm                                 wasm;
application/x-7z-compressed                      7z;
application/x-cocoa                              cco;
application/x-java-archive-diff                  jardiff;
application/x-java-jnlp-file                     jnlp;
application/x-makeself                           run;
application/x-perl                               pl pm;
application/x-pilot                              prc pdb;
application/x-rar-compressed                     rar;
application/x-redhat-package-manager             rpm;
application/x-sea                                sea;
application/x-shockwave-flash                    swf;
application/x-stuffit                            sit;
application/x-tcl                                tcl tk;
application/x-x509-ca-cert                       der pem crt;
application/x-xpinstall                          xpi;
application/xhtml+xml                            xhtml;
application/xspf+xml                             xspf;
application/zip                                  zip;

application/octet-stream                         bin exe dll;
application/octet-stream                         deb;
application/octet-stream                         dmg;
application/octet-stream                         iso img;
application/octet-stream                         msi msp msm;

audio/midi                                       mid midi kar;
audio/mpeg                                       mp3;
audio/ogg                                        ogg;
audio/x-m4a                                      m4a;
audio/x-realaudio                                ra;

video/3gpp                                       3gpp 3gp;
video/mp2t                                       ts;
video/mp4                                        mp4;
video/mpeg                                       mpeg mpg;
video/ogg                                        ogv;
video/quicktime                                  mov;
video/webm                                       webm;
video/x-flv                                      flv;
video/x-m4v                                      m4v;
video/x-matroska                                 mkv;
video/x-mng                                      mng;
video/x-ms-asf                                   asx asf;
video/x-ms-wmv                                   wmv;
video/x-msvideo                                  avi;

}

configuration file /etc/nginx/sites-enabled/optimalportfoliostrategies.com:

server {
listen 443 ssl;
listen [::]:443 ssl;
http2 on;

server_name optimalportfoliostrategies.com;

ssl_certificate /etc/letsencrypt/live/optimalportfoliostrategies.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/optimalportfoliostrategies.com/privkey.pem;

access_log /home/john/optimalportfoliostrategies.com/logs/access.log;
error_log /home/john/optimalportfoliostrategies.com/logs/error.log;

root /home/john/optimalportfoliostrategies.com/public/;
index index.php;

location / {
    try_files $uri $uri/ /index.php?$args;
}

location ~ \.php$ {
    try_files $uri =404;
    fastcgi_split_path_info ^(.+\.php)(/.+)$;
    fastcgi_pass unix:/run/php/php8.3-fpm.sock;
    fastcgi_index index.php;
    include fastcgi.conf;
}

}

server {
listen 443 ssl;
listen [::]:443 ssl;
http2 on;

server_name www.optimalportfoliostrategies.com;

ssl_certificate /etc/letsencrypt/live/optimalportfoliostrategies.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/optimalportfoliostrategies.com/privkey.pem;

return 301 https://optimalportfoliostrategies.com$request_uri;

}

server {
listen 80;
listen [::]:80;

server_name optimalportfoliostrategies.com www.optimalportfoliostrategies.com;

return 301 https://optimalportfoliostrategies.com$request_uri;

}

configuration file /etc/nginx/fastcgi.conf:

fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param QUERY_STRING $query_string;
fastcgi_param REQUEST_METHOD $request_method;
fastcgi_param CONTENT_TYPE $content_type;
fastcgi_param CONTENT_LENGTH $content_length;

fastcgi_param SCRIPT_NAME $fastcgi_script_name;
fastcgi_param REQUEST_URI $request_uri;
fastcgi_param DOCUMENT_URI $document_uri;
fastcgi_param DOCUMENT_ROOT $document_root;
fastcgi_param SERVER_PROTOCOL $server_protocol;
fastcgi_param REQUEST_SCHEME $scheme;
fastcgi_param HTTPS $https if_not_empty;

fastcgi_param GATEWAY_INTERFACE CGI/1.1;
fastcgi_param SERVER_SOFTWARE nginx/$nginx_version;

fastcgi_param REMOTE_ADDR $remote_addr;
fastcgi_param REMOTE_PORT $remote_port;
fastcgi_param REMOTE_USER $remote_user;
fastcgi_param SERVER_ADDR $server_addr;
fastcgi_param SERVER_PORT $server_port;
fastcgi_param SERVER_NAME $server_name;

PHP only, required if PHP was built with --enable-force-cgi-redirect

fastcgi_param REDIRECT_STATUS 200;

configuration file /etc/nginx/sites-enabled/sydneybackgammonclub.org.au:

server {
listen 443 ssl http2;
listen [::]:443 ssl;
http2 on;

server_name sydneybackgammonclub.org.au;

ssl_certificate /etc/letsencrypt/live/sydneybackgammonclub.org.au/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/sydneybackgammonclub.org.au/privkey.pem;

access_log /home/john/sydneybackgammonclub.org.au/logs/access.log;
error_log /home/john/sydneybackgammonclub.org.au/logs/error.log;

root /home/john/sydneybackgammonclub.org.au/public/;
index index.php;

location / {
    try_files $uri $uri/ /index.php?$args;
}

location ~ \.php$ {
    try_files $uri =404;
    fastcgi_split_path_info ^(.+\.php)(/.+)$;
    fastcgi_pass unix:/run/php/php8.3-fpm.sock;
    fastcgi_index index.php;
    include fastcgi.conf;
}

}

server {
listen 443 ssl http2;
listen [::]:443 ssl;
http2 on;

server_name www.sydneybackgammonclub.org.au;

ssl_certificate /etc/letsencrypt/live/sydneybackgammonclub.org.au/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/sydneybackgammonclub.org.au/privkey.pem;

return 301 https://sydneybackgammonclub.org.au$request_uri;

}

server {
listen 80;
listen [::]:80;

server_name sydneybackgammonclub.org.au www.sydneybackgammonclub.org.au;

return 301 https://sydneybackgammonclub.org.au$request_uri;

}

NGINX access/error log: (Tip → You can usually find the logs in the /var/log/nginx directory.)

Sorry too many .gz files. I was going to take a screenshot but I don’t know if this can be attached.

OK so I hope I’ve filled out all neccessary details. if not please ask.
I changed my router after a lot of issues with the Internet’s NBN connection and Exetel. The upshot of all of this was Exetel giving me a new static IP which I’ve changed the A record at Webcentral. I’ve rebooted the NBN modem and ASUS router. Both now acknowledge the new IP.
I’ve added port forwarding to my router for port 80 and 443 pointing to my internal ip and ports 80 and 443.
Still no connection to the website!

My last hope is something needs to be reconfigured in Nginx. I set this up so long ago that I’ve forgotten all about it and my memory isn’t what it used to be!

If I’ve missed any significant details that’ll help you help me please ask.
TIA
John

Hi @johnhedge ,
It appears that the root cause of your issue is either in the router configuration or DNS, as the IP address has been changed. Is there any response from nginx? “Error on browsing“ is too wide.
If you do not see any response, nginx can’t be the reason for it.

My ISP; Exetel, changed my static IP address. Ostensibly to assist with a faulty Internet connection.
I’ve had Claude run checks on everything and Claude’s comment was that the ISP is blocking the ports. They deny this but…!
My understanding, is that they are in the process of abandoning static IPs unless they’re IPv6.
My account with them is 50/20 which they are not offering any more.
John

Hi @johnhedge ,

Could you draw a diagram of your network? Where exactly is nginx running, on a physical machine, a VM, or in a container (docker/lxc)? Is nginx located in your home network? If so, can you connect to ports 80/443 while being on the same network?

Thanks!

Hi Ivan,
I’ve found the problem.
Port forwarding was configured, but the Source IP restriction was blocking everything.
Thanks,
John

1 Like

Thank you for the update, John!