LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - General
User Name
Password
Linux - General This Linux forum is for general Linux questions and discussion.
If it is Linux Related and doesn't seem to fit in any other forum then this is the place.

Notices


Reply
  Search this Thread
Old 03-30-2020, 03:20 AM   #1
postcd
Member
 
Registered: Oct 2013
Posts: 527

Rep: Reputation: Disabled
ssh,HTTP,ICMP timeout but IP not blocked by netfilter


When i am unable to connect to one particular destination computer using ssh,curl,ping and its IP is not blocked in the iptables nor /etc/hosts.deny on CentOS 7, how do you discover if the block is remote or local and if local, do you have ideas on where it can be blocked (consider i tried various connection ways as mentioned above).

That remote computer works and is connectable from different IPs. Remote computer admin claims (he may be wrong) my IP is not blocked.
 
Old 03-30-2020, 05:23 AM   #2
berndbausch
LQ Addict
 
Registered: Nov 2013
Location: Tokyo
Distribution: Mostly Ubuntu and Centos
Posts: 6,316

Rep: Reputation: 2002Reputation: 2002Reputation: 2002Reputation: 2002Reputation: 2002Reputation: 2002Reputation: 2002Reputation: 2002Reputation: 2002Reputation: 2002Reputation: 2002
I would use tcpdump to see exactly which packets arrive at that computer.

For example:
Code:
tcpdump -i ens3f0 -v host 1.2.3.4
where 1.2.3.4 is the IP address from which you fail to connect to the computer in question, and ens3f0 is the interface (if you omit the interface, tcpdump will use the first real NIC; you can also use -i any).

The host 1.2.3.4 expression is a filter that only collects packets to or from that host. You can also filter by protocol, port and other criteria, and use boolean logic to combine several criteria.

See the manual pages for tcpdump and pcap-filter.
 
1 members found this post helpful.
Old 03-31-2020, 08:47 AM   #3
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 26,763

Rep: Reputation: 7983Reputation: 7983Reputation: 7983Reputation: 7983Reputation: 7983Reputation: 7983Reputation: 7983Reputation: 7983Reputation: 7983Reputation: 7983Reputation: 7983
Quote:
Originally Posted by postcd View Post
When i am unable to connect to one particular destination computer using ssh,curl,ping and its IP is not blocked in the iptables nor /etc/hosts.deny on CentOS 7, how do you discover if the block is remote or local and if local, do you have ideas on where it can be blocked (consider i tried various connection ways as mentioned above).

That remote computer works and is connectable from different IPs. Remote computer admin claims (he may be wrong) my IP is not blocked.
You should be familiar with tcpdump, considering you've been using it for years, and also have been handed it again in another thread recently:
https://www.linuxquestions.org/quest...ow-4175667621/

...where you never followed up or answered questions. And you, AGAIN, don't provide details here either; it could be blocked on a firewall, load balancer, or at the ISP connection point. You tell us nothing about anything in the environment, and we aren't going to guess. But common sense should tell you that if you can connect from OTHER addresses but not ONE particular address, that the address in question is being denied. You mention a 'remote computer admin', but again don't tell us who they work for, why you doubt them, or what you see in the logs on either side...again, do you expect us to guess?
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: Speeding Up Netfilter (by Avoiding Netfilter) LXer Syndicated Linux News 0 05-16-2018 01:36 PM
ICMP blocked, any other tools but traceroute? mlewis Linux - Networking 18 01-22-2014 12:38 PM
icmp echo received by GTPU tunnel, but when system do icmp reply, wrong! pxgxue Linux - Networking 0 12-07-2012 09:44 AM
Mod recent blocked related question (netfilter). WHO IS BLOCKED CarLost Linux - Security 6 07-29-2008 03:53 PM
ICMP traffic archives/writing ICMP traffic in a file maia_1 Programming 0 07-20-2004 03:43 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - General

All times are GMT -5. The time now is 04:22 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration