Re: Can't access www.kde.org
* nate (debian-user@aphroland.org) [030426 16:43]:
> Hall Stevenson said:
>
> > Here's tcpdump with 'src or dst' added:
> >
> > 15:25:45.554696 eeyore.homeip.net.1082 > www.kde.org.www: S
> > 2534803130:2534803130(0) win 5808 <mss 1452,sackOK,timestamp 319433
> > 0,nop,wscale 0> (DF) [tos 0x10]
> > 15:25:45.727411 www.kde.org.www > eeyore.homeip.net.1082: S
> > 3013402022:3013402022(0) ack 2534803131 win 31944 <mss
> > 1452,sackOK,timestamp 131027723 319433,nop,wscale 0> (DF)
> >
> > ...and it repeats like before.
>
>
> hmm, well the destination recieves the packet and sends an acknowledgement
> but your system just stops there...very strange. according to some
> docs here:
>
> http://www-iepm.slac.stanford.edu/monitoring/passive/tcpdump.html
>
> it takes 3 segments to open a connection, your system gets 2/3rds
> of the way through and decides to stop for some reason. not sure
> what else to reccomend,
Here's what it tells me when trying a different website:
17:12:20.193649 eeyore.xxxxxx.net.1247 > www.dslreports.com.www: S
689579899:689579899(0) win 5808 <mss 1452,sackOK,timestamp 958897
0,nop,wscale 0> (DF) [tos 0x10]
17:12:20.254337 www.dslreports.com.www > eeyore.xxxxxx.net.1247: S
598577371:598577371(0) ack 689579900 win 5792 <mss 1452,sackOK,timestamp
630998227 958897,nop,wscale 0> (DF)
Is it "acting" any different here ?? This makes little sense to me...
> have you set any of the network parameters in /proc ? or is everything
> at defaults?
I haven't touched anything in there... I've looked at things, a
loooonnng time ago, but changed nothing.
> my only other suggestion at this point is compare the settings
> in /proc/sys/net/ipv4 on the "broken" system to the mandrake one.
Anything in particular ?? There's LOTS of files in there !
You mentioned my firewall... I've done an iptables -F, then -X, then -Z
and guess what ?? I can see kde.org's website !
I created this firewall script with the help of "firestarter" and then
modified it slightly. I wouldn't have a clue what to look for that's
causing KDE's website to be blocked though. :-(
Regards
Hall
Reply to: