host unreachable when making http request

hradtke · 05-26-2007, 12:14 PM

I setup my linux box with FC6. I can ssh in from the outside fine. I can view web pages from the linux box using the private IP address. However, it times out when I try to view from either inside the network on a different computer or outside the network.

tcpdump:

Code:

07:44:38.613675 IP 192.168.0.101.rds2 > 192.168.0.102.irdmi: S 1901969890:1901969890(0) win 65535 <mss 1460,nop,nop,sackOK>
07:44:38.613713 IP 192.168.0.102 > 192.168.0.101: ICMP host 192.168.0.102 unreachable - admin prohibited, length 56
07:44:41.610326 IP 192.168.0.101.rds2 > 192.168.0.102.irdmi: S 1901969890:1901969890(0) win 65535 <mss 1460,nop,nop,sackOK>
07:44:41.610365 IP 192.168.0.102 > 192.168.0.101: ICMP host 192.168.0.102 unreachable - admin prohibited, length 56
07:44:42.034686 arp who-has 192.168.0.1 tell 192.168.0.102
07:44:42.034842 arp reply 192.168.0.1 is-at 00:13:46:1f:15:72 (oui Unknown)

I did some research on ICMP throwing that admin prohibited error and it sounds like the router is blocking the request. I have port forwarding setup, but I should not even need it inside the network correct? What is going on here?

jschiwal · 05-27-2007, 05:03 AM

If you can browse on the LAN, then the hosts firewall isn't the problem.
You can't browse on the lan using your routers external address however.

These two statements contradict each other:

Quote:

I can view web pages from the linux box using the private IP address. However, it times out when I try to view from either inside the network

Do you mean the same host (linux box) as is running the server? That isn't a LAN address that is the local host. So if another host on the lan can't access it, check the firewall on the Linux web server.

What does nmap on a different LAN computer say?

hradtke · 05-27-2007, 10:25 AM

Doh! I figured specifying the private IP would hit the router. I did not even think to check the firewall settings either as I thought both 22 and 80 were open as default. Thanks its working great now.