Are ports on my box being blocked?

shorty_boy · 01-26-2009, 11:07 AM

Hi all.

I just recently did a system upgrade after having to abandon my Linux box from August until now. I cannot seem to use any ports on my Deabian box except for port 80. When I try ping, I get this...

Code:

Farscape:/home/tenoki# ping www.yahoo.com
PING www.yahoo-ht3.akadns.net (69.147.76.15) 56(84) bytes of data.

and it just sits there for ever until I contol-c it. When I try to do a tracert, I get

Code:

Farscape:/home/tenoki# tracert www.yahoo.com
traceroute to www.yahoo.com (69.147.76.15), 30 hops max, 40 byte packets
 1  homeportal.gateway.2wire.net (192.168.1.254)  7.326 ms  8.929 ms  8.910 ms
 2  * * *
 3  * * *
 4  * * *
 5  * * *
 6  * * *
 7  * * *
 8  * * *

ectera. Now, my ports are open correctly on my router and I am able to do all of this from inside the router console. As a matter of fact, this stuff use to work before I did my sys upgrade on my box. Now when I use P2P apps like Keyhole TV (tv stream app based on p2p technology), I get a ...

Code:

Connect failed: Connection refused

So I tried Bittorrrent and DC++ to see if I could use those anymore, and they give the same error. This occurs instantly for every app that isn't using port 80 it seems.

I did some research and saw that some people were possibly having issues with portmap so I uninstalled it and removed all sym links, but this didn't work. Sources are starting to point me to iptables but unlike most people who are having issues, i seem to have no rules setup...

Code:

Farscape:/home/tenoki# iptables -L -t nat
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination         

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

Could the ports on my system still be blocked? Like I said, this stuff was working before, but when I did my system upgrade, I started running into this problem. I also noticed that my console now says Debian GNU/Linux 5.0 tty1 , then login prompt where as it use to say Welcome to Debian Linux (I'm running testing) then login prompt. Also when I us to restart/shutdown, it would go to terminal and say what it is doing, now it just sits at the terminal with Debian GNU/Linux 5.0 tty1 and the prompt showing. Could my box be broken?

farslayer · 01-26-2009, 02:15 PM

Looks like icmp is blocked at or past your gateway device.. Since the 2wire responds but nothing past that point, that is where the blockage is occurring.

I worked at one location that had a DSL account and their DSL modem/gateway, was actually blocking outbound ports.
I had to disable security in their gateway device so my payment terminal could access the payment gateway over the Internet.

Have you logged into the 2wire device to see what it's security settings are set to ?

shorty_boy · 01-27-2009, 03:56 AM

I'm at work right now, but the thing is...

This was working when I was living in Florida. I just moved to DC (Dec 29 2008) and that is when I did my sys upgrade.

When I get home, I'll try my work laptop (XP box) and see if it is having an issue. But like I said in the previous post, tracert, ping, etc... do work from my router's console and I do have the appropriate ports opened for my apps and computers on my network. I'll also try to put my router in bridge mode to see if it fixes the issue if my XP box does not work. The router is accepting HTTP(s), SSH, etc (the things that you would expect to be allowed) as i have not changed it since it's initial configuration.

If it isn't related to my system, then could it be my ISP. I have dry loop DSL from Verizon. Up until this point, I have always used bundled DSL from AT&T/Bell South. Internet wise, does dry loop function differently, or does that depend on the ISP? I know that they have me with a dynamic IP.

shorty_boy · 01-27-2009, 10:01 AM

I don't know why it would all of a sudden change it's configuration but even though it said stuff was open and enabled thru the firewall (graphical), when I went into the management console thru telnet (terminal), it said a different story.

Lesson learned, terminal is always better as graphical can lie to you. So the issue has been remedied. Does any one know of any alt firmware for a 2wire home portal 1700hw? Apparently my graphical is getting senile and it is a pain to navigate the 2wire thru telnet. This is the first time this has ever happened and i have had this thing for at least 4 years.