As the bare-iron server came from my long-time cloud provider (since Debian 6), incoming ports 80 and 443 are blocked.