LinuxQuestions.org
Review your favorite Linux distribution.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 01-23-2003, 08:08 PM   #1
Javier
LQ Newbie
 
Registered: Dec 2002
Posts: 14

Rep: Reputation: 0
Angry IPTABLES problem


Hello to everyone. I guess you all know I am here because I need help. Here is the lowdown. I have a DSL connection to the internet. I share the internet to two computers using a Linksys router. Pc number one is running Windows 98SE.
Pc number two is a dual boot box. It runs Windows 98SE and Red Hat 8.0.

Here is my problem, when I boot into Linux, I am able to ping any web site with no problems, however I cannot surf the internet. When I try to surf, my requests just time out after several minutes. Using "lokkit" I can see that the firewall is set to "high". When I try to change it to "medium", the iptables file does not get saved with my changes. I have even tried shutting down the firewall for testing purposes. I can not surf the internet even with the firewall down. I am able to receive my mail using Mozilla.
 
Old 01-23-2003, 08:20 PM   #2
KevinJ
Member
 
Registered: Feb 2001
Location: Colorado Springs, CO
Distribution: Redhat v8.0 (soon to be Fedora? or maybe I will just go back to Slackware)
Posts: 857

Rep: Reputation: 30
Well, I wouldn't run a firewall on it while you test this. Your Linksys router should have a firewall on it, so I don't see why you would need one on the Linux box.

service iptables stop

should turn it off completely I think.

You say you can ping websites.... do you mean the hostname or the IP address?

What does your /etc/resolv.conf have in it?

-Kevin
 
Old 01-23-2003, 08:50 PM   #3
Javier
LQ Newbie
 
Registered: Dec 2002
Posts: 14

Original Poster
Rep: Reputation: 0
Here are the answers to your questions.

I did stop the iptables. I went to "/etc/rc.d/rc5.d" and I issued a
"iptables stop".

I can ping the web sites by both hostname and IP address.

As for the contents of the "/etc/resolv.conf", it has two entries. This are the contents:
nameserver 206.141.192.60
nameserver 206.141.192.55

Those are the IP addresses were the ones provided by my ISP.

TIA

Javier
 
Old 01-23-2003, 09:05 PM   #4
KevinJ
Member
 
Registered: Feb 2001
Location: Colorado Springs, CO
Distribution: Redhat v8.0 (soon to be Fedora? or maybe I will just go back to Slackware)
Posts: 857

Rep: Reputation: 30
well... I don't think that works, at least not like you typed it. Like I said.. try "service iptables stop"

-Kevin
 
Old 01-23-2003, 09:15 PM   #5
Javier
LQ Newbie
 
Registered: Dec 2002
Posts: 14

Original Poster
Rep: Reputation: 0
Sorry, I should have written down the correct sintax. However, I did shutdown the service. I have done it both ways, by using the "Service" button and selecting iptables and pressing the "stop" button as well as by going to the "rc.5" subdirectory and issuing the stop command. I am currently on the dual boot box under Windows.
 
Old 01-24-2003, 07:58 AM   #6
pilot1
Member
 
Registered: Jun 2002
Location: USA
Distribution: Gentoo, Fedora Core
Posts: 408

Rep: Reputation: 30
I had this same problem, in my case it was that the gateway wasn't set. Type "netconfig" and then just go through the screens and make sure to set the default gateway to your routers IP, also it would be a good idea to have iptables turned off while you run netconfig and test is.
 
Old 01-24-2003, 08:55 AM   #7
Javier
LQ Newbie
 
Registered: Dec 2002
Posts: 14

Original Poster
Rep: Reputation: 0
Thanks for your suggestion. I tried it however it did not solve my problem. The request comes back after several minutes with the
"The document contains no data" response.
When I went through the "netconfig", I tried both giving it a static IP address and switching to dhcp. While I ran the tests, the firewall was down. I went to "/etc/rc.d/rc5.d" and executed:
"./Sxxiptables stop" where xx is the number given to the link file.
 
Old 01-24-2003, 09:43 AM   #8
KevinJ
Member
 
Registered: Feb 2001
Location: Colorado Springs, CO
Distribution: Redhat v8.0 (soon to be Fedora? or maybe I will just go back to Slackware)
Posts: 857

Rep: Reputation: 30
Okay.. so you have a good network connection but you can't get HTTP?? That has to be either firewall or browser settings.

Any chance the cable/dsl router is filtering your IP address?

Can you try a different browser... like "links" or "lynx"?

Try this....

chkconfig --level 2345 iptables off

then reboot.

I know you are frustrated by this, but we are missing a piece of the puzzle.

-Kevin
 
Old 01-24-2003, 11:00 AM   #9
Javier
LQ Newbie
 
Registered: Dec 2002
Posts: 14

Original Poster
Rep: Reputation: 0
I ran all of the different versions of "chkconfig" you suggested. None of them returned any value. I did reboot after that. I then tried to access the web using mozilla, no go. I am able to use "gftp" to download/upload files to the web. I will try to down load "netscape" and try it.

Thanks
Javier
 
Old 01-24-2003, 11:04 AM   #10
KevinJ
Member
 
Registered: Feb 2001
Location: Colorado Springs, CO
Distribution: Redhat v8.0 (soon to be Fedora? or maybe I will just go back to Slackware)
Posts: 857

Rep: Reputation: 30
You don't have "lynx" or "links"? Those are great for troubleshooting something like this.

-KevinJ
 
Old 01-24-2003, 11:10 AM   #11
Javier
LQ Newbie
 
Registered: Dec 2002
Posts: 14

Original Poster
Rep: Reputation: 0
No I don't have either one of them. Are they part of Red Hat 8.0?
 
Old 01-24-2003, 11:20 AM   #12
KevinJ
Member
 
Registered: Feb 2001
Location: Colorado Springs, CO
Distribution: Redhat v8.0 (soon to be Fedora? or maybe I will just go back to Slackware)
Posts: 857

Rep: Reputation: 30
yes... they are both text based HTML browsers.... You can't do a whole lot with them other than troubleshoot because of all the complicated websites people put up today, but they are very good for troubleshooting.

-KevinJ
 
Old 01-24-2003, 11:36 AM   #13
Darin
Senior Member
 
Registered: Jan 2003
Location: Portland, OR USA
Distribution: Slackware, SLAX, Gentoo, RH/Fedora
Posts: 1,024

Rep: Reputation: 45
lynx http://www.slackware.com

Perfect for testing and the site was made to look readable under lynx as well as internet exploder or netscrape.

A couple other things...

I think you need the NAT part of your firewall on to surf so you may not want to turn it off.

If you can ping an internet name like www.3com.com but a web browser doesn't work then that usually ends up being someone put proxy settings in the web browser which need to be taken out.

You can use the text ftp client instead of lynx to troubleshoot also, try "ftp ftp.cdrom.com" and see if it works.
 
Old 01-24-2003, 12:01 PM   #14
Javier
LQ Newbie
 
Registered: Dec 2002
Posts: 14

Original Poster
Rep: Reputation: 0
I installed lynx off the Red Hat installation cd. I then executed the following:
lynx www.google.com
Looking up www.google.com
Making HTTP connection to www.google.com
Seding HTTP request
HTTP request sent: waiting for response
Alert: Unexpected network read error: connection aborted
Cant access www.google.com'
Alert: Unable to access document.

I also tried to do a command line ftp to the ftp.cdrom.com.
I connected with no problems. I then checked the proxie section of mozilla. It is set to connect directly to the internet.

Thanks
 
Old 01-24-2003, 12:13 PM   #15
Darin
Senior Member
 
Registered: Jan 2003
Location: Portland, OR USA
Distribution: Slackware, SLAX, Gentoo, RH/Fedora
Posts: 1,024

Rep: Reputation: 45
This is progress, you can ftp but not http that tells something.

You're IP addresses and related settings like DNS and gateway are probably all set fine. You could even see if the other machine can also FTP, you can type ftp.cdrom.com in a web browser and see if that works.

I've never had a problem like that but my guess would be that you have some rules in your firewall that block http (www sites) from working properly. The fix would be to go through the settings in your firewall, some RH or "lokkit" guru will have to help with suggestions for that.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
problem iptables stomach Linux - Software 3 09-22-2005 02:21 PM
problem with iptables Israfel2000 Linux - Security 3 07-18-2004 12:30 AM
iptables problem bhagat_panwar Linux - Software 0 08-27-2003 06:45 AM
iptables problem? poulaum Linux - Networking 12 02-27-2003 03:57 PM
Problem with IPTABLES jfall Linux - Networking 3 11-04-2002 03:10 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 12:54 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration