LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 10-27-2006, 11:05 AM   #1
max2004
Member
 
Registered: Feb 2005
Posts: 57

Rep: Reputation: 15
Ping to router works, internet doesn't


Hi,

I have 3 Fedora boxes in a home lan connected with a router. Two of them can access the internet, the third one can ping the other two and the router, but cannot access the internet. What could be my mistake?

Thx, Max
 
Old 10-27-2006, 11:50 AM   #2
alienux
Member
 
Registered: Sep 2006
Location: Dayton, Ohio
Distribution: Slackware 12, Fedora Core, PCLinuxOS
Posts: 194

Rep: Reputation: 30
1. Do you have the router's IP address as the default gateway on the third box?

2. Can you ping Internet addresses by IP? Try pinging 4.2.2.2 to see if you get a reply. If so, you need to add a nameserver to /etc/resolv.conf
 
Old 10-27-2006, 11:16 PM   #3
osor
HCL Maintainer
 
Registered: Jan 2006
Distribution: (H)LFS, Gentoo
Posts: 2,450

Rep: Reputation: 70
Can you post the output of `route' or `ip route'
 
Old 11-05-2006, 03:05 PM   #4
max2004
Member
 
Registered: Feb 2005
Posts: 57

Original Poster
Rep: Reputation: 15
Hi guys,

ip route gives me:
192.168.0.0/24 dev eth0 proto kernel scope link src 192.168.0.2
default via 192.168.0.1 dev eth0

Eth0 is the only interface I have and 192.168.0.1 is the router's (Netgear home router) IP. I can ping the router, but cannot ping to outside my LAN (e.g. www.google.com -> unknown host or 4.2.2.2 -> 100% packet loss). I can ping the router, but cannot access it over the webinterface.

ip addr gives me (among other stuff):
Code:
eth0: <BROADCAST, MULTICAST, UP, 10000> ...
      ...
      inet 192.168.0.2/24 brd 192.168.0.255 scope global eth0
      ...
This drives me crazy...

Thanks,
Max
 
Old 11-06-2006, 11:54 AM   #5
max2004
Member
 
Registered: Feb 2005
Posts: 57

Original Poster
Rep: Reputation: 15
Is there anything else I could try?? Please!

More information:
- Router: Netgear RP614v3 (latest firmware).
- I can ssh to another linux box (the two boxes are only connected over the router)

Any hint is appreciated!
Max
 
Old 11-06-2006, 01:22 PM   #6
farslayer
Guru
 
Registered: Oct 2005
Location: Willoughby, Ohio
Distribution: linuxdebian
Posts: 7,232
Blog Entries: 5

Rep: Reputation: 189Reputation: 189
did you check your /etc/resolv.conf settings as suggested above ?

if you can browse to http://72.14.203.104 but not http://wwww.google.com then your problem is most likely in the dns server settings in resolv.conf
 
Old 11-06-2006, 02:09 PM   #7
max2004
Member
 
Registered: Feb 2005
Posts: 57

Original Poster
Rep: Reputation: 15
Thx for your post. Name resolution is not the problem, the /etc/resolv.d is equal in the two fedora systems and browsing to http://72.14.203.104 doesn't work either

btw: When I run Knoppix (a live linux dvd) on the computer, everything works, so there is nothing with the cabel or network card.

More ideas?

Thanks for every post,
Max
 
Old 11-06-2006, 04:42 PM   #8
osor
HCL Maintainer
 
Registered: Jan 2006
Distribution: (H)LFS, Gentoo
Posts: 2,450

Rep: Reputation: 70
Quote:
Originally Posted by max2004
Thx for your post. Name resolution is not the problem, the /etc/resolv.d is equal in the two fedora systems and browsing to http://72.14.203.104 doesn't work either

btw: When I run Knoppix (a live linux dvd) on the computer, everything works, so there is nothing with the cabel or network card.

More ideas?

Thanks for every post,
Max
Perhaps it is iptables rules?

Try posting the output of `iptables-save' from both Fedora boxes (i.e., a working one and the non-working one).
 
Old 11-06-2006, 05:39 PM   #9
mrn
LQ Newbie
 
Registered: Aug 2006
Posts: 2

Rep: Reputation: 0
hey,
i had very-very similar problem on ubuntu with one dsl modem:
ping worked, even outside, but the browser was dead, unless
i typed the ip of the server directly in the browser.
(example 2 get the IP: "dig google.com" in command line).
Ok, then I just switched to konqueror (as browser)
where everything works, and mozilla still does the strange things..
m.
 
Old 11-07-2006, 06:04 AM   #10
max2004
Member
 
Registered: Feb 2005
Posts: 57

Original Poster
Rep: Reputation: 15
Hi,

executing /sbin/iptables-save doesn't yield any output on both boxes (the working one and the not working one).
@mrn: Thanks for your post. I think your problem is different and is rather a firefox or name resolution problem.

I also tried iptables --list on both boxes:
The working one:
Code:
root > /sbin/iptables --list
Chain INPUT (policy ACCEPT)
target     prot opt source               destination
RH-Firewall-1-INPUT  all  --  anywhere             anywhere

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
RH-Firewall-1-INPUT  all  --  anywhere             anywhere

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

Chain RH-Firewall-1-INPUT (2 references)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere
ACCEPT     icmp --  anywhere             anywhere            icmp any
ACCEPT     esp  --  anywhere             anywhere
ACCEPT     ah   --  anywhere             anywhere
ACCEPT     udp  --  anywhere             224.0.0.251         udp dpt:mdns
ACCEPT     udp  --  anywhere             anywhere            udp dpt:ipp
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:ipp
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTABLISHED
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:ssh
REJECT     all  --  anywhere             anywhere            reject-with icmp-host-prohibited
The not working one:
Code:
root > > /sbin/iptables --list
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         
RH-Firewall-1-INPUT  all  --  anywhere             anywhere            

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         
RH-Firewall-1-INPUT  all  --  anywhere             anywhere            

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         

Chain RH-Firewall-1-INPUT (2 references)
target     prot opt source               destination         
ACCEPT     all  --  anywhere             anywhere            
ACCEPT     icmp --  anywhere             anywhere            icmp any 
ACCEPT     ipv6-crypt--  anywhere             anywhere            
ACCEPT     ipv6-auth--  anywhere             anywhere            
ACCEPT     udp  --  anywhere             224.0.0.251         udp dpt:mdns 
ACCEPT     udp  --  anywhere             anywhere            udp dpt:ipp 
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:ipp 
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTABLISHED 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:ssh 
REJECT     all  --  anywhere             anywhere            reject-with icmp-host-prohibited
Thanks a lot for all the support!

Max
 
Old 11-07-2006, 06:45 PM   #11
osor
HCL Maintainer
 
Registered: Jan 2006
Distribution: (H)LFS, Gentoo
Posts: 2,450

Rep: Reputation: 70
Quote:
Originally Posted by max2004
Hi,

executing /sbin/iptables-save doesn't yield any output on both boxes (the working one and the not working one).
@mrn: Thanks for your post. I think your problem is different and is rather a firefox or name resolution problem.

I also tried iptables --list on both boxes:
The working one:
Code:
root > /sbin/iptables --list
Chain INPUT (policy ACCEPT)
target     prot opt source               destination
RH-Firewall-1-INPUT  all  --  anywhere             anywhere

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
RH-Firewall-1-INPUT  all  --  anywhere             anywhere

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

Chain RH-Firewall-1-INPUT (2 references)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere
ACCEPT     icmp --  anywhere             anywhere            icmp any
ACCEPT     esp  --  anywhere             anywhere
ACCEPT     ah   --  anywhere             anywhere
ACCEPT     udp  --  anywhere             224.0.0.251         udp dpt:mdns
ACCEPT     udp  --  anywhere             anywhere            udp dpt:ipp
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:ipp
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTABLISHED
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:ssh
REJECT     all  --  anywhere             anywhere            reject-with icmp-host-prohibited
The not working one:
Code:
root > > /sbin/iptables --list
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         
RH-Firewall-1-INPUT  all  --  anywhere             anywhere            

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         
RH-Firewall-1-INPUT  all  --  anywhere             anywhere            

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         

Chain RH-Firewall-1-INPUT (2 references)
target     prot opt source               destination         
ACCEPT     all  --  anywhere             anywhere            
ACCEPT     icmp --  anywhere             anywhere            icmp any 
ACCEPT     ipv6-crypt--  anywhere             anywhere            
ACCEPT     ipv6-auth--  anywhere             anywhere            
ACCEPT     udp  --  anywhere             224.0.0.251         udp dpt:mdns 
ACCEPT     udp  --  anywhere             anywhere            udp dpt:ipp 
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:ipp 
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTABLISHED 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:ssh 
REJECT     all  --  anywhere             anywhere            reject-with icmp-host-prohibited
Thanks a lot for all the support!

Max
Your problem is starting to drive me crazy!

First off, why is iptables-save not behaving (maybe ur not root? are u using selinux?)? It's supposed to dump all netfilter rules (including three tables apart from the default table) in maximum detail.

If you can't get it to work, can you post the exact output of these commands from a working and non-working machine (sorry, it'll be a little big. perhaps 2 posts?):
Code:
iptables -t filter -nvvvvL
iptables -t nat -nvvvvL
iptables -t mangle -nvvvvL
iptables -t raw -nvvvvL
If you still are having trouble, you can also look at "sysctl -a | grep net" or "sysctl -a | grep net.core" (you probably shouldn't post these here, but look at them yourself and see if there's something odd).
 
Old 05-26-2007, 02:11 PM   #12
UhhMaybe
Member
 
Registered: Jul 2004
Location: Salt Lake City, Utah
Distribution: Absolute 12.0 Studio 64 1.3.0
Posts: 470

Rep: Reputation: 30
Cool

In the "working" post,..."...ACCEPT esp..." and "...ACCEPT ah..." two lines are included. In the "non-working" post, "...ACCEPT esp..." and "...ACCEPT ah..." two lines are not included. This is the difference of the two tables. Are they supposed to be the same, or not supposed to be the same?
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
CentoOS router/firewall prob - local network works but router can't access Internet elementalvoid Linux - Networking 6 12-12-2006 04:39 PM
internet works,can not ping router. master Linux - Wireless Networking 1 08-30-2006 03:10 PM
Ping Works but No Internet II bads Linux - Networking 6 02-07-2006 02:37 PM
PING works, but no Internet in Ubuntu only bond00 Linux - Networking 2 01-22-2006 05:41 PM
Router works, but can't ping it! ar1 Linux - Networking 4 03-10-2005 04:42 PM


All times are GMT -5. The time now is 11:59 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration