LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 07-16-2004, 10:52 PM   #1
tron_thomas
Member
 
Registered: May 2004
Posts: 221

Rep: Reputation: 30
Can't ping local computers


I have a small network consisting of two computers.

One computer runs Mac OS X. The other computer dual boots between Windows XP Professional and Fedora Core 2.

When I'm running Windows both computers are able to ping each other. When I'm running Linux, neither computer can ping the other.

What could be the cause for this?
 
Old 07-16-2004, 11:24 PM   #2
seabass55
Member
 
Registered: Jan 2003
Location: 127.0.0.1
Distribution: Fedora&Gentoo
Posts: 207

Rep: Reputation: 30
ethernet card not active (do you have an IP)

start with ifconfig
 
Old 07-17-2004, 12:14 AM   #3
tron_thomas
Member
 
Registered: May 2004
Posts: 221

Original Poster
Rep: Reputation: 30
I believe the ethernet card is working.

The two systems are connected to the Internet via a router. Both systems can ping the router, and both have no problems accessing the Internet.
 
Old 07-17-2004, 01:40 AM   #4
ppuru
Senior Member
 
Registered: Mar 2003
Location: Beautiful BC
Distribution: RedHat & clones, Slackware, SuSE, OpenBSD
Posts: 1,791

Rep: Reputation: 50
Quote:
Both systems can ping the router, and both have no problems accessing the Internet
Does this mean you can ping the router from your Linux box?

Check the firewall rules on your Linux box ... it could be blocking incoming pings.
 
Old 07-17-2004, 10:52 AM   #5
tron_thomas
Member
 
Registered: May 2004
Posts: 221

Original Poster
Rep: Reputation: 30
Yes the Linux system can ping the router.

How do I check the firewall rules?
 
Old 07-17-2004, 12:19 PM   #6
seabass55
Member
 
Registered: Jan 2003
Location: 127.0.0.1
Distribution: Fedora&Gentoo
Posts: 207

Rep: Reputation: 30
/sbin/iptables -L
 
Old 07-17-2004, 06:42 PM   #7
tron_thomas
Member
 
Registered: May 2004
Posts: 221

Original Poster
Rep: Reputation: 30
Here are the results I get from checking the firewall rules:

Chain INPUT (policy ACCEPT)
target prot opt source destination
LINWIZ-INPUT all -- anywhere anywhere

Chain FORWARD (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

Chain ADDRESS-FILTER (1 references)
target prot opt source destination
RETURN all -- Vega.verizon.net anywhere
RETURN all -- tkd.verizon.net anywhere
RETURN all -- 192.168.0.4 anywhere
REJECT-PKT all -- anywhere anywhere

Chain LINWIZ-INPUT (1 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere
DROP all -- 127.0.0.0/8 anywhere
DROP all -- anywhere 127.0.0.0/8
DROP all -- Vega.verizon.net anywhere
SYN-FLOOD tcp -- anywhere anywhere tcp flags:SYN,RST,ACK/SYN
DROP tcp -- anywhere anywhere tcp flags:!SYN,RST,ACK/SYN state NEW
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
ACCEPT icmp -- anywhere anywhere icmp echo-request
ADDRESS-FILTER all -- anywhere anywhere
ACCEPT tcp -- anywhere anywhere tcp dpt:sunrpc
ACCEPT tcp -- anywhere anywhere tcp dpt:nfs
ACCEPT tcp -- anywhere anywhere tcp dpts:4000:4003
ACCEPT udp -- anywhere anywhere udp dpt:sunrpc
ACCEPT udp -- anywhere anywhere udp dpt:nfs
ACCEPT udp -- anywhere anywhere udp dpts:4000:4003
REJECT-PKT all -- anywhere anywhere

Chain REJECT-PKT (2 references)
target prot opt source destination
REJECT tcp -- anywhere anywhere tcp reject-with tcp-reset
REJECT udp -- anywhere anywhere udp reject-with icmp-port-unreachable
REJECT icmp -- anywhere anywhere icmp echo-request reject-with icmp-host-unreachable

Chain SYN-FLOOD (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere limit: avg 1/sec burst 4
DROP all -- anywhere anywhere
 
Old 07-17-2004, 11:14 PM   #8
ppuru
Senior Member
 
Registered: Mar 2003
Location: Beautiful BC
Distribution: RedHat & clones, Slackware, SuSE, OpenBSD
Posts: 1,791

Rep: Reputation: 50
#iptables -nvL

would give you a more detailed report.

iptables -L could be confusing as it does not include interface information.

Quote:
REJECT icmp -- anywhere anywhere icmp echo-request reject-with icmp-host-unreachable
prevents pings from being answered.

Last edited by ppuru; 07-17-2004 at 11:18 PM.
 
Old 07-18-2004, 10:48 AM   #9
tron_thomas
Member
 
Registered: May 2004
Posts: 221

Original Poster
Rep: Reputation: 30
This may be important; when I'm booting up I get some [ Failed ] message scroll by that look like they are related to ipchains in character based portion of the boot process. I can never read what the message are because the scroll by too quickly.
Here are the results of running iptables -nvL:

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
10430 625K LINWIZ-INPUT all -- * * 0.0.0.0/0 0.0.0.0/0

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination

Chain OUTPUT (policy ACCEPT 10467 packets, 550K bytes)
pkts bytes target prot opt in out source destination

Chain ADDRESS-FILTER (1 references)
pkts bytes target prot opt in out source destination
0 0 RETURN all -- * * 192.168.0.2 0.0.0.0/0
0 0 RETURN all -- * * 192.168.0.3 0.0.0.0/0
0 0 RETURN all -- * * 192.168.0.4 0.0.0.0/0
9 648 REJECT-PKT all -- * * 0.0.0.0/0 0.0.0.0/0

Chain LINWIZ-INPUT (1 references)
pkts bytes target prot opt in out source destination
10136 513K ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0
0 0 DROP all -- * * 127.0.0.0/8 0.0.0.0/0
0 0 DROP all -- * * 0.0.0.0/0 127.0.0.0/8
2 470 DROP all -- * * 192.168.0.2 0.0.0.0/0
0 0 SYN-FLOOD tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x16/0x02
0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:!0x16/0x02 state NEW
283 111K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 8
9 648 ADDRESS-FILTER all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:111
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpts:4000:4003
0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:111
0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:2049
0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpts:4000:4003
0 0 REJECT-PKT all -- * * 0.0.0.0/0 0.0.0.0/0

Chain REJECT-PKT (2 references)
pkts bytes target prot opt in out source destination
0 0 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp reject-with tcp-reset
9 648 REJECT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp reject-with icmp-port-unreachable
0 0 REJECT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 8 reject-with icmp-host-unreachable

Chain SYN-FLOOD (1 references)
pkts bytes target prot opt in out source destination
0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 4
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
 
Old 07-18-2004, 10:23 PM   #10
ppuru
Senior Member
 
Registered: Mar 2003
Location: Beautiful BC
Distribution: RedHat & clones, Slackware, SuSE, OpenBSD
Posts: 1,791

Rep: Reputation: 50
you can check /var/log/dmesg, /var/log/boot.log and /var/log/messages for boot errors.

Quote:
0 0 REJECT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 8 reject-with icmp-host-unreachable
As mentioned in my last post, the above rule is blocking your pings.
 
Old 07-18-2004, 11:17 PM   #11
tron_thomas
Member
 
Registered: May 2004
Posts: 221

Original Poster
Rep: Reputation: 30
I checked all these log file and could not find any mention of the errors related to ipchains I see when the system boot up.
 
Old 07-19-2004, 12:08 AM   #12
ppuru
Senior Member
 
Registered: Mar 2003
Location: Beautiful BC
Distribution: RedHat & clones, Slackware, SuSE, OpenBSD
Posts: 1,791

Rep: Reputation: 50
Quoting from your first post
Quote:
The other computer dual boots between Windows XP Professional and Fedora Core 2.
Fedora Core 2 does not install ipchains by default.
 
Old 07-19-2004, 07:49 PM   #13
tron_thomas
Member
 
Registered: May 2004
Posts: 221

Original Poster
Rep: Reputation: 30
As far as I know, I haven't done anything to enable ipchains. One poster suggested that I check my firewall settings using iptable. I thought maybe ipchains was in some way related to iptable.

I can't read everything about the warning that appears on the screen when the setting fails. I was able to get some of the information. The warning says something about the fact that ipchains is incompatible with the kernel I am using, and contains some kind of apology from someone named Paul "Rusty" Russel.

All of this may have nothing to do with this problem.
 
Old 07-19-2004, 11:05 PM   #14
ppuru
Senior Member
 
Registered: Mar 2003
Location: Beautiful BC
Distribution: RedHat & clones, Slackware, SuSE, OpenBSD
Posts: 1,791

Rep: Reputation: 50
Regarding ipchains .. Run the command

rpm -q ipchains.

If you get a response like ipchains-n.nn, run

rpm -e ipchains

to remove ipchains.

About the ping problem
Have you resolved it?
 
Old 07-20-2004, 09:32 PM   #15
tron_thomas
Member
 
Registered: May 2004
Posts: 221

Original Poster
Rep: Reputation: 30
I have had some success using some iptables commands to change firewall settings.

After issuing the commands, the Linux system can ping the Macintosh. The Macintosh cannot ping the Linux system.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
FC4 won't ping 127.0.0.1 or the internet, but will ping local computers jalsk Linux - Networking 4 11-22-2005 05:59 PM
dhcp client can't ping gateway but can ping other local hosts dirty_forks Linux - Networking 7 10-08-2004 10:54 AM
Shouldn't I be able to ping my other computers? mpriddy Linux - Networking 8 02-10-2004 11:03 AM
can't ping remote but can ping local hnash53 Linux - Networking 8 01-26-2004 08:24 PM
Computers cannot ping each other X3781 Linux - Networking 5 01-08-2003 05:39 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 02:50 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration