LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 08-29-2007, 04:53 PM   #1
turalo
Member
 
Registered: Sep 2005
Location: NL
Distribution: linux, windows,
Posts: 115

Rep: Reputation: 19
Question my box blocks my ip please help


Hi guys, I have this problem with my Linux box, it's centos 4, this thing I'm using as some db server and web server, it's on public IP,
no firewall.
also no firewall on the os itself. somehow I cannot login to this machine from 1 IP, it's the Ip of my workplace. so from home, and from anywhere else I can login, to ssh, and http, no problem. but when I try to login form office IP it does not let me in, I cannot even ping my box from office. so it's very strange thing, this Linux I installed on collocation, it was directly connected to public dedicated internet connection and I set a static IP settings. So I'm just lost in this, I don't know where to start looking.
Please advise.

thanks.
 
Old 08-29-2007, 06:22 PM   #2
gilead
Senior Member
 
Registered: Dec 2005
Location: Brisbane, Australia
Distribution: Slackware64 14.0
Posts: 4,141

Rep: Reputation: 168Reputation: 168
If the box is visible from everywhere except work, I'd be asking the system admins at work if they're blocking the traffic. If not, have you tried using wireshark to sniff the traffic to see which side is not sending packets (you won't be able to read the content, just check connections) or looking through your logs for errors?
 
Old 08-30-2007, 03:22 AM   #3
turalo
Member
 
Registered: Sep 2005
Location: NL
Distribution: linux, windows,
Posts: 115

Original Poster
Rep: Reputation: 19
Question I can see only syn

Hi, I made some trafcapture, and I can see only syn, no ack, I did about 1minute capture, with 3 requests 2 from my ie and fireox, and 1 with ssh, I can see only syn packets, nothing alse, no errors, no acks, nothing.
 
Old 08-30-2007, 02:06 PM   #4
gilead
Senior Member
 
Registered: Dec 2005
Location: Brisbane, Australia
Distribution: Slackware64 14.0
Posts: 4,141

Rep: Reputation: 168Reputation: 168
If that's the traffic capture results from your box at work it sounds like the packets aren't getting to your box at home. Since you have a running SSH at home, if the traffic was being rejected, you'd get a message back. Have you spoken to the system admins where you work to see if they block SSH traffic?

Also, are you saying that you can't use IE or Firefox to see your web server either? If that's the case and you know that your web server is working, I'd also check your ISP to see if they're blocking traffic.
 
Old 08-30-2007, 03:13 PM   #5
turalo
Member
 
Registered: Sep 2005
Location: NL
Distribution: linux, windows,
Posts: 115

Original Poster
Rep: Reputation: 19
well :-)

Hi, well in our office I'm the admin, so I cheked my firewall but nothing is blocked, and also I'm using ssh to another remotes, so that's working 100%, but about the ISP, I think you are right, I called them, and sent them the sniffer log, and i cheked also simple with win: tracert. that shows only traffic till the isp gateway, so after my contact with them they promised to chek why is it stopped by the gate. I'm waiting for reply now, after their reply I will post the result here.
thanks sofar .

this is the greatest forum.
 
Old 08-30-2007, 05:50 PM   #6
gilead
Senior Member
 
Registered: Dec 2005
Location: Brisbane, Australia
Distribution: Slackware64 14.0
Posts: 4,141

Rep: Reputation: 168Reputation: 168
If it is your ISP and they can tell you what ports they do allow, I'd change the port that your SSH daemon is running on from 22 to whatever they provide. For example, since sshd_config supports multiple port entries you could have:
Code:
Port 22
Port 443
You can also use the Listen directive to specify the IP address as well as the port.
 
Old 08-31-2007, 01:34 AM   #7
turalo
Member
 
Registered: Sep 2005
Location: NL
Distribution: linux, windows,
Posts: 115

Original Poster
Rep: Reputation: 19
no that's not the issiu

No, thats not the problem, our ISP's in Netherlands do not block anything, we don't have that kind of problems in NL, it's democracy :-). the problem is in the gateway, cause I can use ssh default port to another IP addresses, it's only giving me problems with this IP address. not with others. so in first place I was thinking that it's in the computer the problem, maybe some firewall, than I formated the disk and installed fresh Linux centos 4. after that I only set the static IP and checked if all firewall stuff is turned off. so after that I still wasn't able to login, than I made the trace after the suggestion of 'gilead' and saw that traffic never goes further than the gateway of my ISP, so that's the problem, cause in case of some block I can see that my machine blocks, and because I know that I do ssh to others, there is no block by ISP, there is just some problem with gateway.
 
Old 08-31-2007, 08:24 AM   #8
turalo
Member
 
Registered: Sep 2005
Location: NL
Distribution: linux, windows,
Posts: 115

Original Poster
Rep: Reputation: 19
Thumbs up solved

Hi guys, my problem is solved, seems that my ISP's gateway was blocking the IP. sombody requested the IP to be blocked from our company, years before, so that was when we had some special server on that IP, now it's removed form black list. so I'm able to acces it.
thanks to gilead for advising, it was not so hard, I'm doing that kind of stuff not for the first time, but somehow I didnot do any trace when I got this problem, thanks for advise and help.

regards.
 
Old 08-31-2007, 02:06 PM   #9
gilead
Senior Member
 
Registered: Dec 2005
Location: Brisbane, Australia
Distribution: Slackware64 14.0
Posts: 4,141

Rep: Reputation: 168Reputation: 168
I'm glad you were able to solve the problem - congratulations
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
df - 1k-blocks ddzc Linux - Software 3 04-26-2007 08:38 AM
One Debian Box Blocks Second from Network arew264 Linux - Networking 6 02-11-2006 09:07 PM
Linux box with eth0 to cable modem and eth1 to Windows box videojeff Linux - Networking 23 03-03-2005 07:58 PM
Password Message Box when accessing linux box from Window Machine mikeccs Linux - Networking 1 08-04-2004 05:47 AM
XP Box won't connect to internet thru RH9 Box (firewall/dhcpd), it can only ping fire Rhapsodic Linux - Networking 4 07-10-2004 03:02 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 04:43 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration