LinuxQuestions.org
Visit Jeremy's Blog.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > antiX / MX Linux
User Name
Password
antiX / MX Linux This forum is for the discussion of antiX and MX Linux.

Notices


Reply
  Search this Thread
Old 05-07-2021, 09:18 PM   #1
kujirasan
Member
 
Registered: Mar 2007
Posts: 168

Rep: Reputation: 19
Site Being Blocked or inaccessible by the system


I am running MX and Debian Buster, I could access a site, that is financial stock market type, after a major update both system block the site by timing it out, My guess is the site is too intrusive, but is there a way to unblock the site or getting access to it, I have no fire wall enabled. Any one has experienced this, I have a Ubuntu computer that has no problem getting to it!

Any help would be appreciated it, thanking you in advance !
 
Old 05-07-2021, 09:32 PM   #2
frankbell
LQ Guru
 
Registered: Jan 2006
Location: Virginia, USA
Distribution: Slackware, Ubuntu MATE, Mageia, and whatever VMs I happen to be playing with
Posts: 19,324
Blog Entries: 28

Rep: Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142
"Timing out" is not the same thing as "blocking." It could be that some element on the site is not loading/refusing to load.

What browser(s) are you using?

You could try opening your browser from the command line and going to the site. Doing that might throw some helpful messages to the terminal.

It would help if you were able provide the site's URL.

As an aside, if you are not using a firewall, you are taking unnecessary risks. It would likely be a good idea to look into enabling iptables on these machines.
 
1 members found this post helpful.
Old 05-07-2021, 10:23 PM   #3
!!!
Member
 
Registered: Jan 2017
Location: Fremont, CA, USA
Distribution: Trying any&ALL on old/minimal
Posts: 997

Rep: Reputation: 382Reputation: 382Reputation: 382Reputation: 382
traceroute and wget <site> are a couple of troubleshooting ideas that come to mind, to collect more info / clues.

Tell us a little bit more about the upgrade. (error log?)
Do all other sites work?

Here's an interesting PDF I found, from this web search:
traceroute "wget" debug|troubleshoot unreachable site
http://www.democritos.it/~baro/slide...art2.linux.pdf
 
Old 05-07-2021, 10:57 PM   #4
kujirasan
Member
 
Registered: Mar 2007
Posts: 168

Original Poster
Rep: Reputation: 19
Thanks for your reply, this web site is not web based, click on it and then type password, it is desktop based!
I been using Linux for 20 years, starting with Mandrake! I am familiar with Linux, but again there is always problems that are hard to fathom out, I have a Japanese disk rack, that I just insert a hard dist in the computer and start it, I have three of them, MX Latest, Debian 10, KUBUNTU 18.4, on the same computer, only the Debian based ones cause problem.
 
Old 05-08-2021, 02:56 AM   #5
ondoho
LQ Addict
 
Registered: Dec 2013
Posts: 19,872
Blog Entries: 12

Rep: Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053
Quote:
Originally Posted by kujirasan View Post
Thanks for your reply, this web site is not web based, click on it and then type password, it is desktop based!
Are you saying it's locally installed software with a web UI?
We need more info.
Please answer all questions, and provide more info yourself.
 
Old 05-08-2021, 03:35 AM   #6
descendant_command
Senior Member
 
Registered: Mar 2012
Posts: 1,876

Rep: Reputation: 643Reputation: 643Reputation: 643Reputation: 643Reputation: 643Reputation: 643
Quote:
Originally Posted by frankbell View Post
As an aside, if you are not using a firewall, you are taking unnecessary risks. It would likely be a good idea to look into enabling iptables on these machines.
As another aside, what risks do you think "enabling iptables" will mitigate?
 
1 members found this post helpful.
Old 05-08-2021, 08:45 PM   #7
frankbell
LQ Guru
 
Registered: Jan 2006
Location: Virginia, USA
Distribution: Slackware, Ubuntu MATE, Mageia, and whatever VMs I happen to be playing with
Posts: 19,324
Blog Entries: 28

Rep: Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142
Quote:
As another aside, what risks do you think "enabling iptables" will mitigate?
None, so long as its properly configured. Iptables is the built-in Linux firewall capability; it's part of the kernel, not an add-on as in some other operating systems.

There are a number of front ends for iptables, but GUI and CLI. My personal choice is ufw (CLI) or gufw (GUI). A web search for "iptables" will turn up many articles and tutorials.
 
Old 05-09-2021, 09:29 PM   #8
kujirasan
Member
 
Registered: Mar 2007
Posts: 168

Original Poster
Rep: Reputation: 19
iptables are no longer the default, it is nftables; I never had to use them, for whatever reason, will try to look at them, I have asked the website to provide their ip and port, so I can enter them manually, see if that works!.
Thank you again for your suggestions!
 
Old 05-10-2021, 03:49 AM   #9
descendant_command
Senior Member
 
Registered: Mar 2012
Posts: 1,876

Rep: Reputation: 643Reputation: 643Reputation: 643Reputation: 643Reputation: 643Reputation: 643
If you don't currently have any firewall rules, "enabling" some certainly won't help.
Check you applications logs and check general connectivity to the server.
 
Old 05-11-2021, 08:59 PM   #10
kujirasan
Member
 
Registered: Mar 2007
Posts: 168

Original Poster
Rep: Reputation: 19
Using netstat I managed to get the following:

From UBUNTU 18.4
tcp6 0 0 fxserver01-cr.oand:9700 ESTABLISHED
tcp6 0 0 fxserver01.oanda.:https TIME_WAIT

From Debian Buster 10, or MX :


TIME_WAIT

tcp6 0 232 192.168.0.30:59458 fxserver01-cr.oan:https



Note that the Debian one shows oan:https, rather than oanda,


I contacted OANDA they refuses to hand over their ip address or ports, it is possible to enter those addresses in nftables, but the not numeric ip, I point out everything was working well until I hit update/upgrade button, I increases the timing to ssh, to one hour , it still times out in few seconds.The problem is with Debian, it is too hard to adjust it, as example just changing the login screen in KDE is not possible, unless goes in to the files and change thing there!
 
Old 07-03-2021, 01:31 AM   #11
kujirasan
Member
 
Registered: Mar 2007
Posts: 168

Original Poster
Rep: Reputation: 19
The problem was with jdk 16, dropped to jdk 15, everything works! Oracle tends to be pretty lousy at times! Open jkd is far superior, but it is not used commercial vendors!
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] Printer inaccessible after system turned off for 10 days rblampain Debian 4 07-09-2014 10:37 PM
Apache site redirects using what rule? foo.site.com -> www.site.com/foo LaughingBoy Linux - Server 2 04-16-2009 09:51 PM
Mod recent blocked related question (netfilter). WHO IS BLOCKED CarLost Linux - Security 6 07-29-2008 03:53 PM
apache2 vhost site makes default site inaccessible jyamada1 Linux - Server 4 01-17-2007 08:42 PM
Soundcard is being blocked by some application. Will Linux - General 8 11-14-2001 10:16 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > antiX / MX Linux

All times are GMT -5. The time now is 05:07 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration