LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 04-04-2001, 05:04 PM   #1
enzoweb
LQ Newbie
 
Registered: Feb 2001
Posts: 6

Rep: Reputation: 0

I've just installed Clarkconnect, and plugged in my cable modem. I've also installed BPALogin which is required for my ISP (Telstra BigPond Advanced).

I'm getting various messages - "no route to host", "network is unreachable", "ping check failed", "100% packet loss"

My routing table looks OK, the last line has the default gateway specified as the Telstra gateway, the Metric is 1 and it is bound to the correct interface card (I have 2 NICs).

However, a PING will result in
10.12.1.0 (or something like that) Packet filtered
10.12.1.0 Packet Filtered
10.12.1.0 Packet Filtered
etc.
A CTRL-C will reveal 100% packet loss.

The DNS is working because if I ping ftp.cdrom.com it replies:
Ping wcuarchive.cdrom.com(204.43.23.2)
(I can't remember the exact IP), so it is resolving the name OK.

If I try to FTP I get
ftp: connect : no route to host.

There's nothing in any of the logs I can see which help.
My /etc/resolv.conf has my nameserver and IP address in it.

How can I find out where it's going wrong? /var/log/messages and netwatchd only tell me "ping failed" or "network is unreachable", which I already know.

TIA
 
Old 04-04-2001, 05:08 PM   #2
enzoweb
LQ Newbie
 
Registered: Feb 2001
Posts: 6

Original Poster
Rep: Reputation: 0
PS

Oh yeah, the firewall is set up to allow http,ftp pop3 and a couple of others on the correct ports.

I also couldn't discover the ipchains command to allow all, which I wanted to test to see if it was the firewall causing the problem. I did an ipchains -F and it set the default as REJECT.

If anyone can post the syntax to "allow all" it would save me having to look .

Thanks.
 
Old 04-06-2001, 09:42 AM   #3
raz
Member
 
Registered: Apr 2001
Location: London
Posts: 408

Rep: Reputation: 31
enzoweb,

Don't block all ICMP messages, they are needed by the network for working out fragmentation sizes etc etc.
Only block icmp types, 5,8,9,10,13,17
accept icmp types, 0,3,4,12,15,18,14

To test if your ipchains is the problem try this:

ipchains -F
# Hello world come and hack me its a free for all.
ipchains -P input ACCEPT
ipchains -P output ACCEPT
ipchains -P forward ACCEPT
# firewall rules
# sets timeout vaules for FIN flags etc..
ipchains -M -S 7200 10 60
# NAT setting for MASQing
ipchains -A forward -s your_subnet_range/0 -j MASQ
# example ipchains -A forward -s 10.40.50.0/0 -j MASQ

/Raz
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Pan :: "No route to host" error tireseas Linux - Networking 3 05-02-2005 09:47 PM
"No route to host" on RH 8.0 + W2K LAN szatki Linux - Networking 8 02-19-2004 12:30 PM
could "no route to host" be caused by non-crossover cable? brandonweinberg Linux - Networking 13 01-31-2004 09:47 AM
cant send email, "no route to host" nef Linux - Software 8 09-23-2003 04:05 PM
Permanently set "route add" -host and default gw sacants Linux - Newbie 1 07-18-2003 04:04 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 11:21 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration