Click to See Complete Forum and Search --> : Can't ping outside world (firewall?)


Gates1026
08-07-2003, 12:01 PM
Ultimately I want to be able to connect to my work vpn through my internet connection at home. I am running a fresh install of RedHat 9.0 with a cable internet connection. I had the setup running from a dialup connection about 2 months ago. Everything worked just peachy until I moved, but right now I can not connect to the vpn or ping anything. It looks like it is sending out packets but getting nothing back. I have no firewall on my computer or router to work through

The network setup I use now runs through the apartments that I live in. They are all set up on a network that then runs out through the ISP. All IPs inside the network are Dynamic.

The problem I am having is that I cant ping anything in the outside world. I can get to any web pages or ftp sites on the internet. I can ping the loopback and my ip given through ifconfig. I can not even ping the DNS servers given to me through DHCP.

Is there anything I am missing or maybe is there a firewall that is blocking my ICMP requests? I emailed the people in charge of the network but they told me they dont know of any firewall that would block my connection.

Any thoughts on this would be greatly appreciated
:)

DMR
08-07-2003, 02:21 PM
I can get to any web pages or ftp sites on the internet. Given that, it certainly sounds like ICMP requests are being firewalled. Are you absolutely positive that you don't have iptables/ipchains enabled? I think Redhat likes to do that by default.

Open a terminal window and type:

service iptables stop
or
service ipchains stop

and see what you get.

Is there someone else in the complex who would be willing to tell you their IP so that you could try pinging that?

bwkaz
08-07-2003, 08:11 PM
Can you talk to the target machine if you use traceroute?

traceroute uses UDP packets, not ICMP. If you can, then it sounds even more like a firewall issue...

DMR
08-07-2003, 08:19 PM
Originally posted by bwkaz
Can you talk to the target machine if you use traceroute?

traceroute uses UDP packets, not ICMP. If you can, then it sounds even more like a firewall issue... Good point Bryan.

:)

Gates1026
08-07-2003, 10:08 PM
Sorry it took me so long to get back to you..........but I really really do appreciate your responses. Here is what I found with the traceroute command that I ran to www.google.com

[root@Ryan sbin]# /usr/sbin/traceroute google.com
traceroute: Warning: google.com has multiple addresses; using 216.239.53.100
traceroute to google.com (216.239.53.100), 30 hops max, 38 byte packets
1 172.16.1.1 (172.16.1.1) 2.183 ms 1.142 ms 0.965 ms
2 * * *
3 * * *
4 * * *
5 * * *
6 * * *
7 * * *
8 * * *
9 * * *
10 * * *
11 * * *
12 * * *
13 * * *
14 * * *
15 *

Do you think there is a possibility of a proxy server that I dont know about sitting in the way? I thought this was very strange. I am somewhat of an beginner at the networking business. Any responses would be very much appreciated.