Fail to ping

satimis · 11-28-2006, 11:08 PM

Hi folks,

Ubuntu-6.06-LAMP-server-amd64
Dynamic IP

I have satimis.homelinux.com registered with DYNDNS.ORG. I also have ddclient installed and running on this server.

$ dpkg -l | grep ddclient

Code:

ii  ddclient                                         3.6.2-6ubuntu1              Update dynamic IP address at DynDNS.org

IP address was updated on DYNDNS.ORG server whenever this server reconnected. I have it confirmed on login DYNDNS.ORG website.

But failed to ping my domain.

$ sudo ping -c 3 satimis.homelinux.com

Code:

PING satimis.homelinux.com (58.152.161.53) 56(84) bytes of data.

--- satimis.homelinux.com ping statistics ---
3 packets transmitted, 0 received, 100% packet loss, time 2001ms

iptables has been stopped.

Please advise how fix this problem.

B.R.
satimis

ScooterB · 11-29-2006, 08:00 AM

Could it be a possible firewall? Or, could it be not entered in your hosts file? I have issues with servers that are on my own network and have public IP's yet I can't get to them by www.myserver.mydomain. All of my routers are Linux and it is proabably got to do with all of them being on the same subnet as my PC but all having public IP's. I probably need to dig out the old TCP/IP Routing handbook and do some more research. Anyway, take a look at the firewall and hosts table. Then repost.

satimis · 11-29-2006, 09:27 AM

Hi ScooterB,

Tks for your advice.

Quote:

Could it be a possible firewall? Or, could it be not entered in your hosts file? I have issues with servers that are on my own network and have public IP's yet I can't get to them by www.myserver.mydomain. All of my routers are Linux and it is proabably got to do with all of them being on the same subnet as my PC but all having public IP's. I probably need to dig out the old TCP/IP Routing handbook and do some more research. Anyway, take a look at the firewall and hosts table. Then repost.

There is nothing concerning firewall, router, etc. I have firewall stopped. There is no router with only an ADSL modem between the server and broadband/Internet. The ADSL modem was supplied by ISP and no config/set is needed.

I think the major problem coming from BIND and DNS files not properly configured. Postfix can't send email because BIND can't resolve the IP address. Default page of Apache2 and Webmin failed to start on browser. Previously they can. I'm now searching documents on the overall configuration of BIND and DNS.

Tks.

B.R.
satimis

ScooterB · 11-29-2006, 09:38 AM

I'm having my own issues with BIND right now. I have fighting with the correct syntax (even though it says that it is right!). I'm trying to stop it from being recursive and when I put the statement "recursive no" in the options section, it just pukes. Anyway, I have found that BIND is very sensitive regarding white space. It somehow knows the difference between spaces and tabs and doesn't like it if they aren't right. In your zone files make sure that all the white space is tabbed. I think that everything else is okay with just regular spaces. My DNS servers are all running Slackware so yours may be different. Just a thought though.

satimis · 11-29-2006, 09:49 AM

Hi ScooterB,

Here is;
$ cat /etc/default/bind9

Code:

OPTIONS="-u bind -t /var/lib/named"
# Set RESOLVCONF=no to not run resolvconf
RESOLVCONF=yes

Quote:

In your zone files make sure that all the white space is tabbed. I think that everything else is okay with just regular spaces. My DNS servers are all running Slackware so yours may be different. Just a thought though.

Please advise which zone files? Where they reside? TIA

B.R.
satimis

chort · 11-29-2006, 07:46 PM

In the example you pasted where you tried to ping, the DNS resolution worked fine. It's showing you the correct IP address. What host were you trying to ping from, your server? If you're using NAT then it's not going to work... It would try to send the packets from your server, out to the Internet, at which point they would be routed back to you again, back through the NAT, which would result in triangular routing. Try to ping it from some place on the Internet instead (one of the DNS tools sites, or a friend's box).

The second thing is, ping is very unreliable. A lot of ISPs filter out ICMP echo requests or echo replies. The best way to test is to telnet to the port of the service you're trying to reach. For instance, if you're trying to reach an HTTP server, do $ telnet <my hostname> 80. For SMTP (e-mail) it would be $ telnet <my hostname> 25, etc...

ScooterB · 11-29-2006, 08:43 PM

That's a very good point chort. I have a friends box that I remote into and use for testing. He's on a different ISP and a different Public IP subnet so it gives me accurate data. Satimis, the zone files in Slackware are /var/named/pz/mydomain. I am not exactly sure where they are in your distro. Take alook and let us know. For a place to ping outside your network try http://www.dnsstuff.com

They are the best!

satimis · 12-04-2006, 09:42 AM

Hi folks,

"satimis.homelinux.com" may have problem.

On browser running "satimis.homelinux.com"/"www.satimis.homelinux.com" can't display the homepage.

I have registered another free domain "satimis.freeddns.com"

$ sudo ping -c 3 satimis.freeddns.com

Code:

Password:
PING satimis.freeddns.com (220.246.238.244) 56(84) bytes of data.
64 bytes from n220246238244.netvigator.com (220.246.238.244): icmp_seq=1 ttl=64 time=0.033 ms
64 bytes from n220246238244.netvigator.com (220.246.238.244): icmp_seq=2 ttl=64 time=0.033 ms
64 bytes from n220246238244.netvigator.com (220.246.238.244): icmp_seq=3 ttl=64 time=0.034 ms

--- satimis.freeddns.com ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2015ms
rtt min/avg/max/mdev = 0.033/0.033/0.034/0.004 ms

On browser running "satimis.freeddns.com" displayed the homepage.

B.R.
satimis

ScooterB · 12-04-2006, 09:52 AM

Is this the same exact machine only with a different IP and domain?

satimis · 12-04-2006, 10:11 AM

Hi ScooterB,

Quote:

Is this the same exact machine only with a different IP and domain?

Yes, you are correct.

But I failed to sent mail.

$ sudo telnet localhost 25

Code:

Password:
Trying 127.0.0.1...
Connected to localhost.localdomain.
Escape character is '^]'.
220 server1.example.com ESMTP Postfix (Ubuntu)
ehlo satimis.freeddns.com
250-server1.example.com
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-STARTTLS
250-AUTH LOGIN PLAIN
250-AUTH=LOGIN PLAIN
250 8BITMIME
mail from: satimis@satimis.freeddns.com
250 Ok
rcpt to: satimis@yahoo.com
250 Ok
data
354 End data with <CR><LF>.<CR><LF>

Subject: Test

This is a test
.
250 Ok: queued as B7F957540A5
quit (it hung here.  I have to quit)
221 Bye
Connection closed by foreign host.

$ su
Password:
# telnet localhost 25

Code:

Trying 127.0.0.1...
Connected to localhost.localdomain.
Escape character is '^]'.
220 server1.example.com ESMTP Postfix (Ubuntu)
ehlo satimis.freeddns.com
250-server1.example.com
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-STARTTLS
250-AUTH LOGIN PLAIN
250-AUTH=LOGIN PLAIN
250 8BITMIME
mail from: satimis@write.com
250 Ok
rcpt to: satimis@netvigator.com
250 Ok
data
354 End data with <CR><LF>.<CR><LF>

Subject: Test

This is a test
.
250 Ok: queued as 9A0B07540AD
quit (it hung here.  I have to quit)
221 Bye
Connection closed by foreign host.

# telnet localhost 25

Code:

Trying 127.0.0.1...
Connected to localhost.localdomain.
Escape character is '^]'.
220 server1.example.com ESMTP Postfix (Ubuntu)
ehlo freeddns.com
250-server1.example.com
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-STARTTLS
250-AUTH LOGIN PLAIN
250-AUTH=LOGIN PLAIN
250 8BITMIME
mail from satimis@writeme.com
501 Syntax: MAIL FROM: <address>
mail from: satimis@writeme.com
250 Ok
rcpt to: satimis@netvigator.com
250 Ok
data
354 End data with <CR><LF>.<CR><LF>

Subject: Test

This is a test
.
250 Ok: queued as 187B77540B0
quit (it hung here.  I have to quit)
221 Bye
Connection closed by foreign host.

# telnet localhost 25

Code:

Trying 127.0.0.1...
Connected to localhost.localdomain.
Escape character is '^]'.
220 server1.example.com ESMTP Postfix (Ubuntu)
ehlo www.satimis.freeddns.com
250-server1.example.com
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-STARTTLS
250-AUTH LOGIN PLAIN
250-AUTH=LOGIN PLAIN
250 8BITMIME
mail from: satimis@writeme.com
250 Ok
rcpt to: satimis@netvigator.com
250 Ok
data
354 End data with <CR><LF>.<CR><LF>

Subject: Test

This is a test
.
250 Ok: queued as BC62E75406A
quit (it hung here.  I have to quit)
221 Bye
Connection closed by foreign host.

I don't know whether the steps performed were wrong?

Tks.

B.R.
satimis

chort · 12-04-2006, 10:37 AM

What's wrong with the e-mail conversations? They look correct to me. The server will not terminate the connection after it accepts one message. You can start a new message with another MAIL FROM command. If you're done, you have to QUIT. Did the email never arrive at the destination? Check /var/log/maillog for errors.

satimis · 12-04-2006, 11:13 AM

Hi chort,

Quote:

Did the email never arrive at the destination?

No.

Quote:

Check /var/log/maillog for errors.

$ cat /var/log/mail.log

Code:

....
Dec  5 00:49:54 ubuntu postfix/smtp[6158]: connect to satimis.homelinux.com[58.152.183.105]: Connection timed out (port 25)
Dec  5 00:49:54 ubuntu postfix/smtp[6158]: B7F957540A5: to=<satimis@yahoo.com>, relay=none, delay=3460, status=deferred (con$Dec  5 00:49:54 ubuntu postfix/smtp[6157]: connect to satimis.homelinux.com[58.152.183.105]: Connection timed out (port 25)
Dec  5 01:06:03 ubuntu postfix/qmgr[5582]: BC62E75406A: from=<satimis@writeme.com>, size=407, nrcpt=1 (queue active)
Dec  5 01:06:34 ubuntu postfix/smtp[6214]: connect to satimis.homelinux.com[58.152.183.105]: Connection timed out (port 25)

# whois 58.152.183.105
found it is ISP

I think ISP blocks port 25. Is there any way overcoming this blockage? TIA

B.R.
satimis

ScooterB · 12-04-2006, 01:39 PM

Quote:

whois 58.152.183.105
[Querying whois.arin.net]
[whois.arin.net]

OrgName: Asia Pacific Network Information Centre
OrgID: APNIC
Address: PO Box 2131
City: Milton
StateProv: QLD
PostalCode: 4064
Country: AU

ReferralServer: whois://whois.apnic.net

NetRange: 58.0.0.0 - 58.255.255.255
CIDR: 58.0.0.0/8
NetName: APNIC-58
NetHandle: NET-58-0-0-0-1
Parent:
NetType: Allocated to APNIC
NameServer: NS1.APNIC.NET
NameServer: NS3.APNIC.NET
NameServer: NS4.APNIC.NET
NameServer: TINNIE.ARIN.NET
NameServer: NS.LACNIC.NET
NameServer: NS-SEC.RIPE.NET
Comment: This IP address range is not registered in the ARIN database.
Comment: For details, refer to the APNIC Whois Database via
Comment: WHOIS.APNIC.NET or http://www.apnic.net/apnic-bin/whois2.pl
Comment: ** IMPORTANT NOTE: APNIC is the Regional Internet Registry
Comment: for the Asia Pacific region. APNIC does not operate networks
Comment: using this IP address range and is not able to investigate
Comment: spam or abuse reports relating to these addresses. For more
Comment: help, refer to http://www.apnic.net/info/faq/abuse
RegDate: 2004-05-04
Updated: 2005-05-20

OrgTechHandle: AWC12-ARIN
OrgTechName: APNIC Whois Contact
OrgTechPhone: +61 7 3858 3100
OrgTechEmail: search-apnic-not-arin@apnic.net

# ARIN WHOIS database, last updated 2006-12-03 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.

By not having it registered could this be a problem? BTW, this isn't the ISP. Tocows is the registrar. They only work with ISPs so any DNS changes might be a problem. Just had to move a domain from them because it wouldn't let me administer it the way I thought it should be. I wanted to change the DNS servers and it didn't like it.

Quote:

whois homelinux.com
[Querying whois.internic.net]
[Redirected to whois.opensrs.net]
[Querying whois.opensrs.net]
[whois.opensrs.net]
Registrant:
Dynamic Network Services, Inc.
1 Sundial Ave. Suite 301
Manchester, NH 03103
US

Domain name: HOMELINUX.COM

Administrative Contact:
Hostmaster, DynDNS hostmaster@dyndns.com
1 Sundial Ave. Suite 301
Manchester, NH 03103
US
+1.6036684998 Fax: +1.6036686474

Technical Contact:
Hostmaster, DynDNS hostmaster@dyndns.com
1 Sundial Ave. Suite 301
Manchester, NH 03103
US
+1.6036684998 Fax: +1.6036686474

Registration Service Provider:
(DynDNS) Dynamic Network Services, Inc., support@dyndns.com
603-668-4998
603-668-6474 (fax)
http://www.dyndns.com/
Login to your account at https://www.dyndns.com/+domains/ to manage
nameservers and contacts for your domain.

Registrar of Record: TUCOWS, INC.
Record last updated on 03-Nov-2006.
Record expires on 03-Dec-2008.
Record created on 03-Dec-2001.

Domain servers in listed order:
NS4.DYNDNS.ORG
NS2.DYNDNS.ORG
NS3.DYNDNS.ORG
NS5.DYNDNS.ORG
NS.DYNDNS.ORG

Domain status: clientDeleteProhibited
clientTransferProhibited
clientUpdateProhibited

The Data in the Tucows Registrar WHOIS database is provided to you by Tucows
for information purposes only, and may be used to assist you in obtaining
information about or related to a domain name's registration record.

Tucows makes this information available "as is," and does not guarantee its
accuracy.

By submitting a WHOIS query, you agree that you will use this data only for
lawful purposes and that, under no circumstances will you use this data to:
a) allow, enable, or otherwise support the transmission by e-mail,
telephone, or facsimile of mass, unsolicited, commercial advertising or
solicitations to entities other than the data recipient's own existing
customers; or (b) enable high volume, automated, electronic processes that
send queries or data to the systems of any Registry Operator or
ICANN-Accredited registrar, except as reasonably necessary to register
domain names or modify existing registrations.

The compilation, repackaging, dissemination or other use of this Data is
expressly prohibited without the prior written consent of Tucows.

Tucows reserves the right to terminate your access to the Tucows WHOIS
database in its sole discretion, including without limitation, for excessive
querying of the WHOIS database or for failure to otherwise abide by this
policy.

Tucows reserves the right to modify these terms at any time.

By submitting this query, you agree to abide by these terms.

NOTE: THE WHOIS DATABASE IS A CONTACT DATABASE ONLY. LACK OF A DOMAIN
RECORD DOES NOT SIGNIFY DOMAIN AVAILABILITY.

I am beginning to believe that it could in fact be your DNS at homelinux. Something to check into anyway. Good luck and repost when you figure it out Bro!

satimis · 12-04-2006, 06:21 PM

Hi ScooterB and folks,

My friend can visit my homepage on his WinXP box by running on browser;

"satimis.freeddns.com:8080"

port 80 being blocked by ISP.

"satimis.homelinux.com:8080"
"www.satimis.homelinux.com:8080"

failed. I sent dyndns.org/com an email reporting the problem but without a reply.

B.R.
satimis

chort · 12-05-2006, 12:01 AM

Why is your Postfix trying to connect to it's own external IP address? Something is very wrong with your Postfix config.