HTTP not working, HTTPS and FTP ok

smith_martin · 04-25-2005, 11:48 AM

Hi,
About a week ago HTTP stopped working across all browsers (Firefox, Konqueror, lynx, Mozilla).

I'm able to use HTTPS and FTP, can ping as well.

Any ideas where I should start looking? Never heard of this problem before.

acid_kewpie · 04-25-2005, 12:37 PM

stopped working? care to explain? is this to a single apache server or what? are you saying this is a client or server issue?

smith_martin · 04-25-2005, 02:49 PM

Sorry about the vague post.

This is on a client box, using the aforementioned browsers. Any attempt to load a page (google, yahoo, etc.) using an http connection fails with a server timeout.

I've checked the browser configurations, and there are no defined proxies or rules. And like I said, loading those same pages with HTTPS or FTPing from a browser works just fine.

Let me know if I can give you any more info. Don't really know where to start here.

kencaz · 04-25-2005, 02:59 PM

Sounds like a Domain service (DNS) problem. have you tried going to google through IP address:
http://216.239.39.99/

Could be a firewall or proxy issue as well.

KC

acid_kewpie · 04-25-2005, 03:29 PM

at a lower level, can you use wget or curl to grab google.com or such like? they're more likely to provide you with decent errors too.

Matir · 04-25-2005, 03:55 PM

You might want to check for any IPTables rules blocking outbound to port 80. Perform iptables -L.

smith_martin · 04-29-2005, 06:15 AM

Hi,

Matir, you hit it on the head. I had two iptables rules blocking outgoing, with rules to return the "host unreachable" error message. I have no idea how they were inserted, and am currently inspecting my logs to try to track down how.

I've since flushed my iptables and am searching for a suitable replacement, namely the default Mandrake (or Mandriva) 10.1 /etc/sysconfig/iptables file. I've man-ed and googled iptables, and have found some good how-to's, but am unsure as to which rules NEED to be defined.

Anyone have a standard iptables configuration that they'd like to share? Or is there even such a thing? Or is that config file generated automatically when I do a "service iptables restart"? I'm not at the box right now, and this option just occurred to me.

I'll post my iptables log once I fix this problem.

Thanks for everyone's help.