Fórum Ubuntu CZ/SK
Ostatní => Archiv => Téma založeno: kopancek 22 Května 2007, 18:00:20
-
Dobry den, mam ubuntu 6.10 uz celkom dlhsi cas a zrazu mi prestal behat internet..
Pripojeny som cez standardnu sietovku Realtek na router, IP mam pevne nastavenu, ale neslo ani ked som skusal dhcp.
Co ma najviac prekvapuje je, ze icq protokol bezi bez problemov (gaim),
ale ked skusim spustit mozillu tak nenajde ani google, takisto je to aj s inymi programami
/spravca balikov a podobne/,
dalsia vec je ze ked skusim ping na nejaku adresu tak
nestrati ani 1 packet, fakt neviem co s tym moze byt..
tu je vypis z ifconfig, ak pomozete budem rad, lebo nejak sa mi nechce to cele prekopavat
kvoli takejto chybe (a jednak na to nemam ani cas..)
eth1 Link encap:Ethernet HWaddr 00:11:09:62:C1:57
inet addr:192.168.1.34 Bcast:192.168.1.255 Mask:255.255.255.0
inet6 addr: fe80::211:9ff:fe62:c157/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:557 errors:0 dropped:0 overruns:0 frame:0
TX packets:431 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:123243 (120.3 KiB) TX bytes:34414 (33.6 KiB)
Interrupt:193 Base address:0x6e00
-
To vypada bud na problem s routovanim nebo nameserverem. Nejaky firewall nainstalovany nemate?
-
Me se to stavalo taky casto. Zrestartuj router, pokud to bude delat znova, zresetuj a nastav nanovo. Tam stejne krome ip adresy nic nezadavas, vsechno by melo byt defaultni. Taky vyzkousej pingy. Napred na kartu, pak na router, pokud budes pingat na router, tak jeste do netu na nejakou adresu. Me to vzdycky pomohlo. Pokud jsem nepingal, tak bylo neco spatne...:)
-
No hlavne bych se opravdu podival na to, jake DNS pouzivate - prvne v linuxu (/etc/resolv.conf) a nasledne na routeru. Jestlize jede ICQ (pripojuje se na IP) a pingy na IP vam jedou vporadku, je to problem DNSka
-
No najvacsi problem je v tom ze k routeru nemam pristup takze ani neviem co je na nom nastavene, ale v tom problem nevidim, pretoze cez okna to slape s tym istym nastavenim..a ping mi funguje jak na router tak aj na vsetky adresy ktore som skusal (www.google.sk, seznam.cz a ostatne, vsetko pinglo bez problemov..) Takze na problem s dns to nevidim...
Firewall pouzivam klasicky firehol, jeho konfiguraciu som uz pozeral a zdala sa mi v poriadku (blokovane
bolo to co aj predtym, to co som chcel aby bolo bloknute..)
-
1) a zkousel jste i jiny prohlizec ...
zkuste konzolovy elinks ci jiny, jestli to v nem pujde
2) nezapnul jste si v danem prohlizeci pristup na web pres nejakou proxy?
-
pripadne vypnout podporu ipv6 v ubuntu!
-
iny prehliadac som neskusal (opera mi z neviemakehodovodu nejde vobec ani nainstalovat), ale ako som vyssie napisal, nechce fungovat ani apt-get (na server sa udajne pripoji ale nic nestiahne) takze neviem ci bude problem v prehliadaci..ziadne proxy som nenastavoval, a aj kebyze ho v mozille nastavim tak sa mi nezda ze by to malo vadit inym aplikaciam..
-
No este kebyze ste napisali blbcovi ako ja ze kde sa ta podpora ipv6 vypina..
-
zada se dotaz do vyhledavani a postupuje se podle nalezeneho postupu
GRRRRRRRRRRRRRR :( :( :( :(
-
momentalne nemam pristup k uvedenemu stroju, tak ked vyskusam ze co to urobilo tak sa ozvem, kazdopadne dakujem za kazdu pomoc, ak som niekoho nastval svojou hlupostou, ospravedlnujem sa, ale uz Einstein povedal ze rozdiel medzi genialitou a hlupostou je, ze genialita ma svoje hranice..
-
...ak som niekoho nastval svojou hlupostou, ospravedlnujem sa...
Ne hlouposti (naprosto si nedovolim soudit inteligenci zadneho uzivatele zdejsiho fora), ale lenosti.
-
Co se tyce toho DNS, to ze to pres wokna slape nic neznamena, muzete mit LOKALNE nastaveny spatny DNS server - tedy pokud jste ho vubec nastavoval.
-
Tak som vypol ipv6 a stale nic..Stale rovnako..
Ping na router aj na vzdialene servre (google.com, seznam.cz) bezi, bezi aj gaim, ale akonahle chcem nieco stiahnut cez apt-get alebo otvorit stranku cez firefox tak nenajde nic..
-
napiske v konzoli:
sudo route
a poslete sem vypis.
-
napiske v konzoli:
sudo route
a poslete sem vypis.
napisal som a tu je vypis:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
192.168.1.0 * 255.255.255.0 U 0 0 0 eth1
192.168.0.0 * 255.255.255.0 U 0 0 0 eth0
default 192.168.1.1 0.0.0.0 UG 0 0 0 eth1
default 192.168.0.1 0.0.0.0 UG 0 0 0 eth0
-
este doplnim ze eth1 je vonkajsia a eth0 vnutorna sietovka
-
Podle mne by default gateway mel byt jen jeden a to adresa toho routeru.
Ze mate jeste vnitrni sit jste puvodne nepsal.
-
Pavelp: jop, souhlasim
-
Tak som to nastavil aby brana bola len 1 (nepamatam sa ze by som to niekedy nastavoval inac) ale stale to nejde, tu je vypis prikazu route + ping na www.google.sk
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
192.168.1.0 * 255.255.255.0 U 0 0 0 eth1
192.168.0.0 * 255.255.255.0 U 0 0 0 eth0
default 192.168.1.1 0.0.0.0 UG 0 0 0 eth1
milan@PC1:~$ ping www.google.sk
PING www.l.google.com (209.85.129.104) 56(84) bytes of data.
64 bytes from fk-in-f104.google.com (209.85.129.104): icmp_seq=1 ttl=243 time=58.7 ms
64 bytes from fk-in-f104.google.com (209.85.129.104): icmp_seq=2 ttl=243 time=98.0 ms
64 bytes from fk-in-f104.google.com (209.85.129.104): icmp_seq=3 ttl=243 time=85.8 ms
--- www.l.google.com ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2004ms
rtt min/avg/max/mdev = 58.788/80.885/98.062/16.408 ms
-
Chtel jsem se zeptat, pres co mate nakonfigurovanou kartu??? Ja totiz v networkingu musel zadavat jeste solo DNS adresu, takze jednu pri nastaveni sitove karty a druhou jeste jeste do zalozky DNS, pochopitelne tu samu. Taky bych doporucoval restart routeru, delal jsem to tak, ze jsem vypnul zasuvky v celem dome na par sekund, ale to jsem mel router vedle v zamcenem pokoji...:)
-
Chtel jsem se zeptat, pres co mate nakonfigurovanou kartu???
Kartu mam nakonfigurovanu od instalacie ubuntu, teraz sa tam zjavil nejaky network manazer, tak som ho pouzil na odstranenie tej druhej brany
Ja totiz v networkingu musel zadavat jeste solo DNS adresu, takze jednu pri nastaveni sitove karty a druhou jeste jeste do zalozky DNS, pochopitelne tu samu.
Mam v networkingu nastavene aj 2 DNS adresy, 195.168.1.2 a este nieco ine,
Taky bych doporucoval restart routeru, delal jsem to tak, ze jsem vypnul zasuvky v celem dome na par sekund, ale to jsem mel router vedle v zamcenem pokoji...
Ako som uz vyssie pisal k routeru nemam pristup, je zamknuty na streche, stara sa onho
provider, takze dufam ze keby na nom nastala chyba, vsimol by si pri kontrole:)
-
Tady uz je to hledani duchu. Sit nejde, ac by mela jit. Mozne je uplne vsechno. Opravdu nemate nejaky firewall? Nenastavil jste pri instalaci, nebo jindy aby se do internetu pristupovalo pres proxy server, ktery neexistuje ? Nastaveni site uz bude dobre, chyba je spise nekde "okolo".
-
Chtel jsem se zeptat, pres co mate nakonfigurovanou kartu???
Kartu mam nakonfigurovanu od instalacie ubuntu, teraz sa tam zjavil nejaky network manazer, tak som ho pouzil na odstranenie tej druhej brany
Ja totiz v networkingu musel zadavat jeste solo DNS adresu, takze jednu pri nastaveni sitove karty a druhou jeste jeste do zalozky DNS, pochopitelne tu samu.
Mam v networkingu nastavene aj 2 DNS adresy, 195.168.1.2 a este nieco ine,
Taky bych doporucoval restart routeru, delal jsem to tak, ze jsem vypnul zasuvky v celem dome na par sekund, ale to jsem mel router vedle v zamcenem pokoji...
Ako som uz vyssie pisal k routeru nemam pristup, je zamknuty na streche, stara sa onho
provider, takze dufam ze keby na nom nastala chyba, vsimol by si pri kontrole:)
To mate opravdu nastavene ty adresy co tady pisete, nebo je to chyba. DNS adresa by mela byt adresa routeru(bezne pri domaci siti), takze by mela zacinat 192.168.1.neco(pokud je sitova maska co uvadite). Mate me tam ta 195 na zacatku. Ale jak jsem, psal, me se stalo to same, ale nejel mi net uplne, pouze restart a pak se zkusit prihlasit a nakonfigurovat router znova, pokud to nepobezi...
-
gargy2002: trochu jsem to asi nepochopil? Nevim, proc by mela byt 192.168.1.xxx, kdyz privatni IP adresy jsou definovane jako
192.168.0.0/16, 172.16.0.0/12, 10.0.0.0/8
tj. 192.168.xxx.xxx, 10.xxx.xxx.xxx a 172.16.xxx.xxx
-
gargy2002: trochu jsem to asi nepochopil? Nevim, proc by mela byt 192.168.1.xxx, kdyz privatni IP adresy jsou definovane jako
192.168.0.0/16, 172.16.0.0/12, 10.0.0.0/8
tj. 192.168.xxx.xxx, 10.xxx.xxx.xxx a 172.16.xxx.xxx
Ako som uz vyssie pisal router je od providera, na nom je siet s adresami 192.168.1.xxx. Doma mam este vlastnu malu siet (vnutornu) kde som si nastavil 192.168.0.xxx aby to bolo rozne, takze v tom problem nevidim...
DNS adresa by mela byt adresa routeru(bezne pri domaci siti)
To mam tak nastavene preto lebo v oknach to mam rovnako..Pokial viem tak by to mali byt verejne DNS servre, ale mozem este skusit prenastavit DNS na adresu routeru, kazdopadne dakujem za vsetky rady ktore mi tu boli poskytnute
Nastaveni site uz bude dobre, chyba je spise nekde "okolo".
Ale bojim sa ze chyba sa uz nenajde..Ak niekto nevie robit zazraky :D:D
-
Oni ty verejne DNS servery jsou nekdy sazka do loterie. Zkuste zjistit DNS Vaseho providera, zkontrolujte /etc/resolv.conf. Poradi nameserveru je dulezite. Zkuste ping na adresu routeru, pripadne traceroute, nebo tracepath (nainstalovat) nekam ven .
Zkuste se pripojit telnetem na nejaky znamy www server na port 80 a napiste "get". Uvidite, jestli odpovi. Zkuste nejake jine sluzby, SSH, FTP.
-
Oni ty verejne DNS servery jsou nekdy sazka do loterie. Zkuste zjistit DNS Vaseho providera, zkontrolujte /etc/resolv.conf. Poradi nameserveru je dulezite. Zkuste ping na adresu routeru, pripadne traceroute, nebo tracepath (nainstalovat) nekam ven .
Zkuste se pripojit telnetem na nejaky znamy www server na port 80 a napiste "get". Uvidite, jestli odpovi. Zkuste nejake jine sluzby, SSH, FTP.
Tak som skusal telnet na www.google.com - bez odozvy, neslo ani ssh, ani ftp, ani scp..
Ping na router bezi bez problemov stale, ako aj predtym, takisto stale bezi ping na domeny (seznam.cz, google.com).
-
Ja nevim. ICMP prochazi, TCP ne. Nedokazu urcit pricinu. Mate tam packet fitering a nevite o tom. Placam nesmysly. Jen tak zesrandy: # iptables -L vypise co ?
-
gargy2002: trochu jsem to asi nepochopil? Nevim, proc by mela byt 192.168.1.xxx, kdyz privatni IP adresy jsou definovane jako
192.168.0.0/16, 172.16.0.0/12, 10.0.0.0/8
tj. 192.168.xxx.xxx, 10.xxx.xxx.xxx a 172.16.xxx.xxx
Psal jsem , jak to mam nakonfigurovane tady(UK), pokazde jsem mel konfiguraci jak jsem psal, pokud ma ale adresy od poskytovatele primo, tak je mozne, ze jsou jine. Ja mam pripojeni do baraku a router si uz konfiguruju sam, takze jsem pocital, ze ma neco podobneho. Zkousel jsem poradit, taky jsem mel problemy se sitovyma maskama a DNS, ale ted si router nakonfiguruju po svem, pokud jsem nekoho zmatl, tak se omlouvam, jsem jeste sitovej lamer...
-
gargy2002: to nebyl zadny utok na vas :) Spis mne zajimalo, jak jste dosel k myslence, ze to musi byt 192.168.1.1 :) Je pravdou, ze pred par lety se samotna 0 v IP adrese nepouzivala, ale dneska je to bezna zalezitost i kdyz je pravdou, ze radeji saham do rozsahu 192.168.1.xxx pripadne 10.0.0.xxx
kopancek: Zkuste pingovat na vic IP adres, napriklad tyto: 66.249.93.147, 194.212.158.134, 194.212.158.134 a treba 194.228.3.140
Jestli projde ping na vsechny, zkuste na kazdou IP pouzit prikaz "telnet IPADRESA 80" a nasledne prikaz "get", pokud i na toto odpovi, je sit jako takova vporadku a problem je spise treba hledat jinde.
-
Ja nevim. ICMP prochazi, TCP ne. Nedokazu urcit pricinu. Mate tam packet fitering a nevite o tom. Placam nesmysly. Jen tak zesrandy: # iptables -L vypise co ?
Vypise to toto ale neni to cele /v terminali sa mi zobrazi len isty pocet riadkov a som lama a neviem to obist../
target prot opt source destination
ACCEPT udp -- anywhere anywhere udp spt:domain state ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spt:domain state ESTABLISHED
Chain in_external_icmp_c3 (1 references)
target prot opt source destination
ACCEPT icmp -- anywhere anywhere state ESTABLISHED
Chain in_external_icq_c6 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spt:aol dpts:32768:61000 state ESTABLISHED
Chain in_external_jabber_c7 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spt:xmpp-client dpts:32768:61000 state ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spt:5223 dpts:32768:61000 state ESTABLISHED
Chain in_external_ping_c4 (1 references)
target prot opt source destination
ACCEPT icmp -- anywhere anywhere state ESTABLISHED icmp echo-reply
Chain in_external_ssh_s1 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:ssh state NEW,ESTABLISHED
Chain in_external_telnet_c5 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spt:telnet dpts:32768:61000 state ESTABLISHED
Chain in_external_webcache_c8 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spt:webcache dpts:32768:61000 state ESTABLISHED
Chain in_internal (1 references)
target prot opt source destination
DROP all -- anywhere anywhere state INVALID
pr_internal_fragments all -f anywhere anywhere
pr_internal_nosyn tcp -- anywhere anywhere state NEW tcp flags:!FIN,SYN,RST,ACK/SYN
pr_internal_icmpflood icmp -- anywhere anywhere icmp echo-request
pr_internal_synflood tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN
pr_internal_malxmas tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,PSH,ACK,URG
pr_internal_malnull tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/NONE
pr_internal_malbad tcp -- anywhere anywhere tcp flags:FIN,SYN/FIN,SYN
pr_internal_malbad tcp -- anywhere anywhere tcp flags:SYN,RST/SYN,RST
pr_internal_malbad tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,ACK,URG
pr_internal_malbad tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,PSH,URG
in_internal_dns_s1 all -- anywhere anywhere
in_internal_netbios_ns_s2 all -- anywhere anywhere
in_internal_netbios_dgm_s3 all -- anywhere anywhere
in_internal_netbios_ssn_s4 all -- anywhere anywhere
in_internal_samba_s5 all -- anywhere anywhere
in_internal_squid_s6 all -- anywhere anywhere
in_internal_icmp_s7 all -- anywhere anywhere
in_internal_ping_s8 all -- anywhere anywhere
in_internal_all_c9 all -- anywhere anywhere
in_internal_irc_c10 all -- anywhere anywhere
in_internal_ftp_c11 all -- anywhere anywhere
ACCEPT all -- anywhere anywhere state RELATED
LOG all -- anywhere anywhere limit: avg 1/sec burst 5 LOG level warning prefix `''IN-internal':''
DROP all -- anywhere anywhere
Chain in_internal2external (1 references)
target prot opt source destination
in_internal2external_all_s1 all -- anywhere anywhere
in_internal2external_irc_s2 all -- anywhere anywhere
in_internal2external_ftp_s3 all -- anywhere anywhere
ACCEPT all -- anywhere anywhere state RELATED
Chain in_internal2external_all_s1 (1 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere state NEW,ESTABLISHED
Chain in_internal2external_ftp_s3 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:ftp state NEW,ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:ftp-data state ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:1024:65535 state RELATED,ESTABLISHED
Chain in_internal2external_irc_s2 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:ircd state NEW,ESTABLISHED
Chain in_internal_all_c9 (1 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere state ESTABLISHED
Chain in_internal_dns_s1 (1 references)
target prot opt source destination
ACCEPT udp -- anywhere anywhere udp dpt:domain state NEW,ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp dpt:domain state NEW,ESTABLISHED
Chain in_internal_ftp_c11 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spt:ftp dpts:32768:61000 state ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spt:ftp-data dpts:32768:61000 state RELATED,ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:32768:61000 state ESTABLISHED
Chain in_internal_icmp_s7 (1 references)
target prot opt source destination
ACCEPT icmp -- anywhere anywhere state NEW,ESTABLISHED
Chain in_internal_irc_c10 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spt:ircd dpts:32768:61000 state ESTABLISHED
Chain in_internal_netbios_dgm_s3 (1 references)
target prot opt source destination
ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpt:netbios-dgm state NEW,ESTABLISHED
ACCEPT udp -- anywhere anywhere udp spt:netbios-dgm dpt:netbios-dgm state NEW,ESTABLISHED
Chain in_internal_netbios_ns_s2 (1 references)
target prot opt source destination
ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpt:netbios-ns state NEW,ESTABLISHED
ACCEPT udp -- anywhere anywhere udp spt:netbios-ns dpt:netbios-ns state NEW,ESTABLISHED
Chain in_internal_netbios_ssn_s4 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:netbios-ssn state NEW,ESTABLISHED
Chain in_internal_ping_s8 (1 references)
target prot opt source destination
ACCEPT icmp -- anywhere anywhere state NEW,ESTABLISHED icmp echo-request
Chain in_internal_samba_s5 (1 references)
target prot opt source destination
ACCEPT udp -- anywhere anywhere udp spt:netbios-ns dpt:netbios-ns state NEW,ESTABLISHED
ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpt:netbios-ns state NEW,ESTABLISHED
ACCEPT udp -- anywhere anywhere udp spt:netbios-dgm dpt:netbios-dgm state NEW,ESTABLISHED
ACCEPT udp -- anywhere anywhere udp spts:1024:65535 dpt:netbios-dgm state NEW,ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:netbios-ssn state NEW,ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:microsoft-ds state NEW,ESTABLISHED
Chain in_internal_squid_s6 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpt:3128 state NEW,ESTABLISHED
Chain out_external (1 references)
target prot opt source destination
out_external_ssh_s1 all -- anywhere anywhere
out_external_dns_c2 all -- anywhere anywhere
out_external_icmp_c3 all -- anywhere anywhere
out_external_ping_c4 all -- anywhere anywhere
out_external_telnet_c5 all -- anywhere anywhere
out_external_icq_c6 all -- anywhere anywhere
out_external_jabber_c7 all -- anywhere anywhere
out_external_webcache_c8 all -- anywhere anywhere
ACCEPT all -- anywhere anywhere state RELATED
LOG all -- anywhere anywhere limit: avg 1/sec burst 5 LOG level warning prefix `''OUT-external':''
DROP all -- anywhere anywhere
Chain out_external_dns_c2 (1 references)
target prot opt source destination
ACCEPT udp -- anywhere anywhere udp dpt:domain state NEW,ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp dpt:domain state NEW,ESTABLISHED
Chain out_external_icmp_c3 (1 references)
target prot opt source destination
ACCEPT icmp -- anywhere anywhere state NEW,ESTABLISHED
Chain out_external_icq_c6 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spts:32768:61000 dpt:aol state NEW,ESTABLISHED
Chain out_external_jabber_c7 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spts:32768:61000 dpt:xmpp-client state NEW,ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spts:32768:61000 dpt:5223 state NEW,ESTABLISHED
Chain out_external_ping_c4 (1 references)
target prot opt source destination
ACCEPT icmp -- anywhere anywhere state NEW,ESTABLISHED icmp echo-request
Chain out_external_ssh_s1 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spt:ssh dpts:1024:65535 state ESTABLISHED
Chain out_external_telnet_c5 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spts:32768:61000 dpt:telnet state NEW,ESTABLISHED
Chain out_external_webcache_c8 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spts:32768:61000 dpt:webcache state NEW,ESTABLISHED
Chain out_internal (1 references)
target prot opt source destination
out_internal_dns_s1 all -- anywhere anywhere
out_internal_netbios_ns_s2 all -- anywhere anywhere
out_internal_netbios_dgm_s3 all -- anywhere anywhere
out_internal_netbios_ssn_s4 all -- anywhere anywhere
out_internal_samba_s5 all -- anywhere anywhere
out_internal_squid_s6 all -- anywhere anywhere
out_internal_icmp_s7 all -- anywhere anywhere
out_internal_ping_s8 all -- anywhere anywhere
out_internal_all_c9 all -- anywhere anywhere
out_internal_irc_c10 all -- anywhere anywhere
out_internal_ftp_c11 all -- anywhere anywhere
ACCEPT all -- anywhere anywhere state RELATED
LOG all -- anywhere anywhere limit: avg 1/sec burst 5 LOG level warning prefix `''OUT-internal':''
DROP all -- anywhere anywhere
Chain out_internal2external (1 references)
target prot opt source destination
out_internal2external_all_s1 all -- anywhere anywhere
out_internal2external_irc_s2 all -- anywhere anywhere
out_internal2external_ftp_s3 all -- anywhere anywhere
ACCEPT all -- anywhere anywhere state RELATED
Chain out_internal2external_all_s1 (1 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere state ESTABLISHED
Chain out_internal2external_ftp_s3 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spt:ftp dpts:1024:65535 state ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spt:ftp-data dpts:1024:65535 state RELATED,ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spts:1024:65535 dpts:1024:65535 state ESTABLISHED
Chain out_internal2external_irc_s2 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spt:ircd dpts:1024:65535 state ESTABLISHED
Chain out_internal_all_c9 (1 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere state NEW,ESTABLISHED
Chain out_internal_dns_s1 (1 references)
target prot opt source destination
ACCEPT udp -- anywhere anywhere udp spt:domain state ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spt:domain state ESTABLISHED
Chain out_internal_ftp_c11 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spts:32768:61000 dpt:ftp state NEW,ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spts:32768:61000 dpt:ftp-data state ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spts:32768:61000 dpts:1024:65535 state RELATED,ESTABLISHED
Chain out_internal_icmp_s7 (1 references)
target prot opt source destination
ACCEPT icmp -- anywhere anywhere state ESTABLISHED
Chain out_internal_irc_c10 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spts:32768:61000 dpt:ircd state NEW,ESTABLISHED
Chain out_internal_netbios_dgm_s3 (1 references)
target prot opt source destination
ACCEPT udp -- anywhere anywhere udp spt:netbios-dgm dpts:1024:65535 state ESTABLISHED
ACCEPT udp -- anywhere anywhere udp spt:netbios-dgm dpt:netbios-dgm state ESTABLISHED
Chain out_internal_netbios_ns_s2 (1 references)
target prot opt source destination
ACCEPT udp -- anywhere anywhere udp spt:netbios-ns dpts:1024:65535 state ESTABLISHED
ACCEPT udp -- anywhere anywhere udp spt:netbios-ns dpt:netbios-ns state ESTABLISHED
Chain out_internal_netbios_ssn_s4 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spt:netbios-ssn dpts:1024:65535 state ESTABLISHED
Chain out_internal_ping_s8 (1 references)
target prot opt source destination
ACCEPT icmp -- anywhere anywhere state ESTABLISHED icmp echo-reply
Chain out_internal_samba_s5 (1 references)
target prot opt source destination
ACCEPT udp -- anywhere anywhere udp spt:netbios-ns dpt:netbios-ns state NEW,ESTABLISHED
ACCEPT udp -- anywhere anywhere udp spt:netbios-ns dpts:1024:65535 state NEW,ESTABLISHED
ACCEPT udp -- anywhere anywhere udp spt:netbios-dgm dpt:netbios-dgm state ESTABLISHED
ACCEPT udp -- anywhere anywhere udp spt:netbios-dgm dpts:1024:65535 state ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spt:netbios-ssn dpts:1024:65535 state ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spt:microsoft-ds dpts:1024:65535 state ESTABLISHED
Chain out_internal_squid_s6 (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp spt:3128 dpts:1024:65535 state ESTABLISHED
Chain pr_external_fragments (1 references)
target prot opt source destination
LOG all -- anywhere anywhere limit: avg 1/sec burst 5 LOG level warning prefix `'PACKET FRAGMENTS:''
DROP all -- anywhere anywhere
Chain pr_external_icmpflood (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere limit: avg 10/sec burst 10
LOG all -- anywhere anywhere limit: avg 1/sec burst 5 LOG level warning prefix `'ICMP FLOOD:''
DROP all -- anywhere anywhere
Chain pr_external_malbad (4 references)
target prot opt source destination
LOG all -- anywhere anywhere limit: avg 1/sec burst 5 LOG level warning prefix `'MALFORMED BAD:''
DROP all -- anywhere anywhere
Chain pr_external_malnull (1 references)
target prot opt source destination
LOG all -- anywhere anywhere limit: avg 1/sec burst 5 LOG level warning prefix `'MALFORMED NULL:''
DROP all -- anywhere anywhere
Chain pr_external_malxmas (1 references)
target prot opt source destination
LOG all -- anywhere anywhere limit: avg 1/sec burst 5 LOG level warning prefix `'MALFORMED XMAS:''
DROP all -- anywhere anywhere
Chain pr_external_nosyn (1 references)
target prot opt source destination
LOG all -- anywhere anywhere limit: avg 1/sec burst 5 LOG level warning prefix `'NEW TCP w/o SYN:''
DROP all -- anywhere anywhere
Chain pr_external_synflood (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere limit: avg 10/sec burst 10
LOG all -- anywhere anywhere limit: avg 1/sec burst 5 LOG level warning prefix `'SYN FLOOD:''
DROP all -- anywhere anywhere
Chain pr_internal_fragments (1 references)
target prot opt source destination
LOG all -- anywhere anywhere limit: avg 1/sec burst 5 LOG level warning prefix `'PACKET FRAGMENTS:''
DROP all -- anywhere anywhere
Chain pr_internal_icmpflood (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere limit: avg 10/sec burst 10
LOG all -- anywhere anywhere limit: avg 1/sec burst 5 LOG level warning prefix `'ICMP FLOOD:''
DROP all -- anywhere anywhere
Chain pr_internal_malbad (4 references)
target prot opt source destination
LOG all -- anywhere anywhere limit: avg 1/sec burst 5 LOG level warning prefix `'MALFORMED BAD:''
DROP all -- anywhere anywhere
Chain pr_internal_malnull (1 references)
target prot opt source destination
LOG all -- anywhere anywhere limit: avg 1/sec burst 5 LOG level warning prefix `'MALFORMED NULL:''
DROP all -- anywhere anywhere
Chain pr_internal_malxmas (1 references)
target prot opt source destination
LOG all -- anywhere anywhere limit: avg 1/sec burst 5 LOG level warning prefix `'MALFORMED XMAS:''
DROP all -- anywhere anywhere
Chain pr_internal_nosyn (1 references)
target prot opt source destination
LOG all -- anywhere anywhere limit: avg 1/sec burst 5 LOG level warning prefix `'NEW TCP w/o SYN:''
DROP all -- anywhere anywhere
Chain pr_internal_synflood (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere limit: avg 10/sec burst 10
LOG all -- anywhere anywhere limit: avg 1/sec burst 5 LOG level warning prefix `'SYN FLOOD:''
DROP all -- anywhere anywhere
-
Jestli projde ping na vsechny, zkuste na kazdou IP pouzit prikaz "telnet IPADRESA 80" a nasledne prikaz "get", pokud i na toto odpovi, je sit jako takova vporadku a problem je spise treba hledat jinde.
Ako som uz vyssie pisal telnet je bez odozvy, a nezalezi ci zadam priamo nazov servera alebo IPadresu..
Ale vysledky pingov su tu:
PING 66.249.93.147 (66.249.93.147) 56(84) bytes of data.
64 bytes from 66.249.93.147: icmp_seq=1 ttl=240 time=149 ms
64 bytes from 66.249.93.147: icmp_seq=2 ttl=240 time=117 ms
64 bytes from 66.249.93.147: icmp_seq=3 ttl=240 time=52.9 ms
--- 66.249.93.147 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2005ms
rtt min/avg/max/mdev = 52.974/106.824/149.652/40.230 ms
PING 194.212.158.134 (194.212.158.134) 56(84) bytes of data.
64 bytes from 194.212.158.134: icmp_seq=1 ttl=53 time=36.8 ms
64 bytes from 194.212.158.134: icmp_seq=2 ttl=53 time=75.8 ms
64 bytes from 194.212.158.134: icmp_seq=3 ttl=53 time=132 ms
--- 194.212.158.134 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2007ms
rtt min/avg/max/mdev = 36.872/81.835/132.831/39.407 ms
PING 194.228.3.140 (194.228.3.140) 56(84) bytes of data.
64 bytes from 194.228.3.140: icmp_seq=1 ttl=54 time=93.2 ms
64 bytes from 194.228.3.140: icmp_seq=2 ttl=54 time=128 ms
64 bytes from 194.228.3.140: icmp_seq=3 ttl=54 time=55.8 ms
64 bytes from 194.228.3.140: icmp_seq=4 ttl=54 time=102 ms
--- 194.228.3.140 ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3010ms
rtt min/avg/max/mdev = 55.889/94.992/128.659/26.065 ms
-
Merlin, vporadku, nic se nedeje, ja radsi jednoduchost.
Taky bych chtel rict, ze neco podobneho jsem zazil tady v UK. Znamej si zvysoval rychlost z 2mbps na 8mbps, zavolal providerovi, ten mu jenom poslal sms, ze probehla zmena rychlosti pripojeni, ale vysledek byl, ze net nesel vubec. Preinstalil jsem jeho modem, ale jedine co slo, bylo ICQ, a aktualizace programu, ale normalne internet nejel. Asi 14 dni byl bez netu, ale ve finale zavolal znova a zjistil, ze chyba byla na strane providera, nejaky spatny protokol(patrne v DNS), nebo co(moje english tehdy byla o neco mizernejsi, nez dnes). Takze by to chtelo zavolat providerovi, pokud to kolega neudelal...
-
Merlin, vporadku, nic se nedeje, ja radsi jednoduchost.
Taky bych chtel rict, ze neco podobneho jsem zazil tady v UK. Znamej si zvysoval rychlost z 2mbps na 8mbps, zavolal providerovi, ten mu jenom poslal sms, ze probehla zmena rychlosti pripojeni, ale vysledek byl, ze net nesel vubec. Preinstalil jsem jeho modem, ale jedine co slo, bylo ICQ, a aktualizace programu, ale normalne internet nejel. Asi 14 dni byl bez netu, ale ve finale zavolal znova a zjistil, ze chyba byla na strane providera, nejaky spatny protokol(patrne v DNS), nebo co(moje english tehdy byla o neco mizernejsi, nez dnes). Takze by to chtelo zavolat providerovi, pokud to kolega neudelal...
Takze po porade se znamym to vidim tak, ze nejlepsi reseni je kontaktovat providera, je mozne, ze je problem u neho...
-
No este skusim pustit liveCD a zistit ci tam net bezi, a ked budem mat cas tak mozno aj reinstalaciu celeho systemu..kazdopadne dakujem za vsetku pomoc ktoru ste mi poskytli:)
-
Hmm tak na liveCD to bezproblemov bezi cez DHCP, na nainstalovanom systeme to nebezi ani cez staticku IP, ani cez DHCP.. no nic no, preinstalujem a uvidim..az budem mat cas..
-
No konecne. ODINSTALUJETE firewall !!!
Pak udelejte testy.
Ten stroj by mel routovat do te domaci site ?
co vypise # cat /proc/sys/net/ipv4/ip_forward ?
-
No konecne. ODINSTALUJETE firewall !!!
Pak udelejte testy.
Ten stroj by mel routovat do te domaci site ?
co vypise # cat /proc/sys/net/ipv4/ip_forward ?
Tak som odinstaloval firehol a uz to zrazu ide..Nechapem..Nemal som blokovane ani http ani ftp ani scp ani ssh ani skoro nic a aj tak to neslo..Tak teraz neviem ci ho sem mam zas davat..
Ten stroj by mal routovat do domacej siete, ano
cat /proc/sys/net/ipv4/ip_forward
predtym vypisalo 1 po odinstalovani 0, cize uz to asi routovat nebude, mam pravdu?
Kazdopadne dakujem za spojazdnenie:)
-
Ano, ne. :-)
Tusim, ze uz se tu nekolikrat psalo, ze firehol na 7.04 nejde. Hotove firewally nepouzivam, takze podrobnosti nevim.
-
Ano, ne. :-)
lol tak toto som nepochopil:)
A pouzivam 6.10 takze tam by mal ist..Ked siel doteraz..
-
Ano, mate pravdu, nebude routovat.
Ale predavani paketu muzete zapnout "rucne" jednoduchym prikazem pro iptables a
prikazem # echo 1 > /proc/sys/net/ipv4/ip_forward
-
Ano, mate pravdu, nebude routovat.
Aha dik:) neva, to si uz zvladnem nastavit, aj tak to moc nepouzivam, este raz dik:)