No access to internet from Konsole, Konqueror works fine

Tim.R · 06-07-2006, 09:29 AM

Hi

I'm having this strange problem where I can't access the internet from konsole (at least, I've tried wget and ssh). I have no problems with Konqueror though. Apparently nobody else is having this problem, because I can't find any reference to it on any forum or on the internet in general.

If i were to ssh username @ some.server.com from konsole it just hangs and eventually times out. However, if I go to http : / / some.server.com in konqueror (which doesn't respond as there is no http server at that url), and leave konqueror open, I can ssh to it from the konsole with no problems. The same thing happens with wget, I can't download anything until I type the server address into konqueror first. It's not just the one server either, it's anywhere on the internet.

I've tried with numerical IPs as well, but get the same problem, so it's not a DNS issue.

I'm also not behind a proxy or anything, so a simple export http_proxy won't solve the problem either.

I'm currently running KDE on SuSE 10.1, using madwifi drivers on an orinoco proxim gold wireless card. I've had no troubles with the card other than this, and I used to run Fedora Core 5 which didn't have this problem (but didn't have as nice of an interface for wireless networking as SuSE).

Kernel version is 2.6.16.13-4-smp

iwconfig gives

Code:

IEEE 802.11g  ESSID:"xxxx"  Nickname:"xxxx"
          Mode:Managed  Frequency:2.437 GHz  Access Point: 00:11:95:9D:72:24
          Bit Rate:54 Mb/s   Tx-Power:15 dBm   Sensitivity=0/3
          Retry:off   RTS thr:off   Fragment thr:off
          Encryption key:xxxx-xxx-xx-x   Security mode:restricted
          Power Management:off
          Link Quality=39/94  Signal level=-56 dBm  Noise level=-95 dBm
          Rx invalid nwid:293  Rx invalid crypt:0  Rx invalid frag:0
          Tx excessive retries:0  Invalid misc:0   Missed beacon:0

ifconfig gives

Code:

ath0      Link encap:Ethernet  HWaddr xx:xx:xx:xx:xx:xx
          inet addr:10.1.1.2  Bcast:10.255.255.255  Mask:255.0.0.0
          inet6 addr: fe80::220:a6ff:fe51:aee2/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:10416 errors:0 dropped:0 overruns:0 frame:0
          TX packets:11036 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:7213523 (6.8 Mb)  TX bytes:1515286 (1.4 Mb)

b0uncer · 06-07-2006, 09:49 AM

How about firewalling? That would sound very odd to me too, but check out (with root privileges)

Code:

iptables -L

to see if you have iptables configured somehow. Can't really figure out anything else right now..but it can't be a big problem if you get http connections right away. You might also want to try ethereal or similar app to see how the connections are started and where they end if they end..

Tim.R · 06-07-2006, 09:57 PM

I'm not so good with iptables, but this is what it gives (default with SUSE 10.1). In fact it looks kind of insecure if anything. I'll try ethereal when I get home tonight.

Thanks,
-Tim

P.S. iptables -L gives:

[CODE]
Chain INPUT (policy DROP)
target prot opt source destination
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
input_ext all -- anywhere anywhere
LOG all -- anywhere anywhere limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix `SFW2-IN-ILL-TARGET '
DROP all -- anywhere anywhere

Chain FORWARD (policy DROP)
target prot opt source destination
LOG all -- anywhere anywhere limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix `SFW2-FWD-ILL-ROUTING '

Chain OUTPUT (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere state NEW,RELATED,ESTABLISHED
LOG all -- anywhere anywhere limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix `SFW2-OUT-ERROR '

Chain forward_ext (0 references)
target prot opt source destination

Chain input_ext (1 references)
target prot opt source destination
DROP all -- anywhere anywhere PKTTYPE = broadcast
ACCEPT icmp -- anywhere anywhere icmp source-quench
ACCEPT icmp -- anywhere anywhere icmp echo-request
ACCEPT icmp -- anywhere anywhere state RELATED,ESTABLISHED icmp echo-reply
ACCEPT icmp -- anywhere anywhere state RELATED,ESTABLISHED icmp destination-unreachable
ACCEPT icmp -- anywhere anywhere state RELATED,ESTABLISHED icmp time-exceeded
ACCEPT icmp -- anywhere anywhere state RELATED,ESTABLISHED icmp parameter-problem
ACCEPT icmp -- anywhere anywhere state RELATED,ESTABLISHED icmp timestamp-reply
ACCEPT icmp -- anywhere anywhere state RELATED,ESTABLISHED icmp address-mask-reply
ACCEPT icmp -- anywhere anywhere state RELATED,ESTABLISHED icmp protocol-unreachable
ACCEPT icmp -- anywhere anywhere state RELATED,ESTABLISHED icmp redirect
reject_func tcp -- anywhere anywhere tcp dpt:ident state NEW
LOG all -- anywhere anywhere limit: avg 3/min burst 5 PKTTYPE = multicast LOG level warning tcp-options ip-options prefix `SFW2-INext-DROP-DEFLT '
DROP all -- anywhere anywhere PKTTYPE = multicast
LOG tcp -- anywhere anywhere limit: avg 3/min burst 5 tcp flags:FIN,SYN,RST,ACK/SYN LOG level warning tcp-options ip-options prefix `SFW2-INext-DROP-DEFLT '
LOG icmp -- anywhere anywhere limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix `SFW2-INext-DROP-DEFLT '
LOG udp -- anywhere anywhere limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix `SFW2-INext-DROP-DEFLT '
LOG all -- anywhere anywhere limit: avg 3/min burst 5 state INVALID LOG level warning tcp-options ip-options prefix `SFW2-INext-DROP-DEFLT-INV '
DROP all -- anywhere anywhere

Chain reject_func (1 references)
target prot opt source destination
REJECT tcp -- anywhere anywhere reject-with tcp-reset
REJECT udp -- anywhere anywhere reject-with icmp-port-unreachable
REJECT all -- anywhere anywhere reject-with icmp-proto-unreachable
{/CODE]