On 25/08/14, Reco (recoverym4n@gmail.com) wrote:
> Date: Mon, 25 Aug 2014 22:13:41 +0400
> From: Reco <recoverym4n@gmail.com>
> To: debian-user@lists.debian.org
> Subject: Re: No localhost - I'm stumped
> X-Spam-Status: No, score=-11.2 required=4.0 tests=DKIM_SIGNED,DKIM_VALID,
> DKIM_VALID_AU,DKIM_VERIFIED,FREEMAIL_FROM,LDOSUBSCRIBER,LDO_WHITELIST,
> T_TO_NO_BRKTS_FREEMAIL autolearn=unavailable version=3.3.2
>
> Hi.
>
> On Mon, 25 Aug 2014 12:09:59 -0400
> John <JohnRChamplin@wowway.com> wrote:
>
> > ... But alas, nothing from it solved my problem. ...
>
> Probably won't do you any good, since you have a basic kernel facility
> (ip routing) in a broken state.
>
> Can you please post the output of (run it all as root):
I've separated the various items with ---------- to make them easier to find.
> 1) iptables-save
iptables-save
# Generated by iptables-save v1.4.21 on Tue Aug 26 15:41:11 2014
*mangle
:PREROUTING ACCEPT [19424:11674255]
:INPUT ACCEPT [18400:11319703]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [17345:4202761]
:POSTROUTING ACCEPT [17393:4208427]
COMMIT
# Completed on Tue Aug 26 15:41:11 2014
# Generated by iptables-save v1.4.21 on Tue Aug 26 15:41:11 2014
*nat
:PREROUTING ACCEPT [1166:401489]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [2108:130276]
:POSTROUTING ACCEPT [0:0]
-A POSTROUTING -j MASQUERADE
COMMIT
# Completed on Tue Aug 26 15:41:11 2014
# Generated by iptables-save v1.4.21 on Tue Aug 26 15:41:11 2014
*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [17315:4187744]
-A INPUT -s 127.0.0.0/8 -d 127.0.0.0/8 -i lo -j ACCEPT
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p tcp -m tcp --dport 22 -m state --state NEW -j ACCEPT
-A INPUT -p tcp -m tcp --dport 25 -m state --state NEW -j ACCEPT
-A INPUT -m state --state INVALID,NEW -j DROP
-A FORWARD -j REJECT --reject-with icmp-port-unreachable
COMMIT
# Completed on Tue Aug 26 15:41:11 2014
----------------------------------------------------------------
>
> 2) strace ping -c2 localhost
strace ping -c2 localhost
execve("/bin/ping", ["ping", "-c2", "localhost"], [/* 36 vars */]) = 0
brk(0) = 0xe6d000
access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fddf9e77000
access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=103146, ...}) = 0
mmap(NULL, 103146, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fddf9e5d000
close(3) = 0
access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
open("/lib/x86_64-linux-gnu/libcap.so.2", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0p\26\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=18888, ...}) = 0
mmap(NULL, 2114224, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fddf9a54000
mprotect(0x7fddf9a58000, 2093056, PROT_NONE) = 0
mmap(0x7fddf9c57000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7fddf9c57000
close(3) = 0
access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
open("/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0P\34\2\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=1729984, ...}) = 0
mmap(NULL, 3836480, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fddf96ab000
mprotect(0x7fddf984a000, 2097152, PROT_NONE) = 0
mmap(0x7fddf9a4a000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x19f000) = 0x7fddf9a4a000
mmap(0x7fddf9a50000, 14912, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fddf9a50000
close(3) = 0
access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
open("/lib/x86_64-linux-gnu/libattr.so.1", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\240\24\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=18672, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fddf9e5c000
mmap(NULL, 2113896, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fddf94a6000
mprotect(0x7fddf94aa000, 2093056, PROT_NONE) = 0
mmap(0x7fddf96a9000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7fddf96a9000
close(3) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fddf9e5b000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fddf9e5a000
arch_prctl(ARCH_SET_FS, 0x7fddf9e5b700) = 0
mprotect(0x7fddf9a4a000, 16384, PROT_READ) = 0
mprotect(0x7fddf96a9000, 4096, PROT_READ) = 0
mprotect(0x7fddf9c57000, 4096, PROT_READ) = 0
mprotect(0x609000, 4096, PROT_READ) = 0
mprotect(0x7fddf9e79000, 4096, PROT_READ) = 0
munmap(0x7fddf9e5d000, 103146) = 0
brk(0) = 0xe6d000
brk(0xe8e000) = 0xe8e000
capget({_LINUX_CAPABILITY_VERSION_3, 0}, NULL) = 0
capget({_LINUX_CAPABILITY_VERSION_3, 0}, {CAP_CHOWN|CAP_DAC_OVERRIDE|CAP_DAC_READ_SEARCH|CAP_FOWNER|CAP_FSETID|CAP_KILL|CAP_SETGID|CAP_SETUID|CAP_SETPCAP|CAP_LINUX_IMMUTABLE|CAP_NET_BIND_SERVICE|CAP_NET_BROADCAST|CAP_NET_ADMIN|CAP_NET_RAW|CAP_IPC_LOCK|CAP_IPC_OWNER|CAP_SYS_MODULE|CAP_SYS_RAWIO|CAP_SYS_CHROOT|CAP_SYS_PTRACE|CAP_SYS_PACCT|CAP_SYS_ADMIN|CAP_SYS_BOOT|CAP_SYS_NICE|CAP_SYS_RESOURCE|CAP_SYS_TIME|CAP_SYS_TTY_CONFIG|CAP_MKNOD|CAP_LEASE|CAP_AUDIT_WRITE|CAP_AUDIT_CONTROL|CAP_SETFCAP, CAP_CHOWN|CAP_DAC_OVERRIDE|CAP_DAC_READ_SEARCH|CAP_FOWNER|CAP_FSETID|CAP_KILL|CAP_SETGID|CAP_SETUID|CAP_SETPCAP|CAP_LINUX_IMMUTABLE|CAP_NET_BIND_SERVICE|CAP_NET_BROADCAST|CAP_NET_ADMIN|CAP_NET_RAW|CAP_IPC_LOCK|CAP_IPC_OWNER|CAP_SYS_MODULE|CAP_SYS_RAWIO|CAP_SYS_CHROOT|CAP_SYS_PTRACE|CAP_SYS_PACCT|CAP_SYS_ADMIN|CAP_SYS_BOOT|CAP_SYS_NICE|CAP_SYS_RESOURCE|CAP_SYS_TIME|CAP_SYS_TTY_CONFIG|CAP_MKNOD|CAP_LEASE|CAP_AUDIT_WRITE|CAP_AUDIT_CONTROL|CAP_SETFCAP, 0}) = 0
capget({_LINUX_CAPABILITY_VERSION_3, 0}, NULL) = 0
capset({_LINUX_CAPABILITY_VERSION_3, 0}, {0, CAP_NET_ADMIN|CAP_NET_RAW, 0}) = 0
prctl(PR_SET_KEEPCAPS, 1) = 0
getuid() = 0
setuid(0) = 0
prctl(PR_SET_KEEPCAPS, 0) = 0
getuid() = 0
geteuid() = 0
capget({_LINUX_CAPABILITY_VERSION_3, 0}, NULL) = 0
capget({_LINUX_CAPABILITY_VERSION_3, 0}, {0, CAP_NET_ADMIN|CAP_NET_RAW, 0}) = 0
capset({_LINUX_CAPABILITY_VERSION_3, 0}, {CAP_NET_RAW, CAP_NET_ADMIN|CAP_NET_RAW, 0}) = 0
socket(PF_INET, SOCK_RAW, IPPROTO_ICMP) = 3
capget({_LINUX_CAPABILITY_VERSION_3, 0}, NULL) = 0
capget({_LINUX_CAPABILITY_VERSION_3, 0}, {CAP_NET_RAW, CAP_NET_ADMIN|CAP_NET_RAW, 0}) = 0
capset({_LINUX_CAPABILITY_VERSION_3, 0}, {0, CAP_NET_ADMIN|CAP_NET_RAW, 0}) = 0
getpid() = 11818
open("/etc/resolv.conf", O_RDONLY|O_CLOEXEC) = 4
fstat(4, {st_mode=S_IFREG|0644, st_size=23, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fddf9e76000
read(4, "nameserver 192.168.1.1\n", 4096) = 23
read(4, "", 4096) = 0
close(4) = 0
munmap(0x7fddf9e76000, 4096) = 0
uname({sys="Linux", node="ctoo", ...}) = 0
stat("/etc/resolv.conf", {st_mode=S_IFREG|0644, st_size=23, ...}) = 0
open("/etc/resolv.conf", O_RDONLY|O_CLOEXEC) = 4
fstat(4, {st_mode=S_IFREG|0644, st_size=23, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fddf9e76000
read(4, "nameserver 192.168.1.1\n", 4096) = 23
read(4, "", 4096) = 0
close(4) = 0
munmap(0x7fddf9e76000, 4096) = 0
uname({sys="Linux", node="ctoo", ...}) = 0
socket(PF_LOCAL, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 4
connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
close(4) = 0
socket(PF_LOCAL, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 4
connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
close(4) = 0
open("/etc/nsswitch.conf", O_RDONLY|O_CLOEXEC) = 4
fstat(4, {st_mode=S_IFREG|0644, st_size=497, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fddf9e76000
read(4, "# /etc/nsswitch.conf\n#\n# Example"..., 4096) = 497
read(4, "", 4096) = 0
close(4) = 0
munmap(0x7fddf9e76000, 4096) = 0
open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 4
fstat(4, {st_mode=S_IFREG|0644, st_size=103146, ...}) = 0
mmap(NULL, 103146, PROT_READ, MAP_PRIVATE, 4, 0) = 0x7fddf9e5d000
close(4) = 0
access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
open("/lib/x86_64-linux-gnu/libnss_files.so.2", O_RDONLY|O_CLOEXEC) = 4
read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\240\"\0\0\0\0\0\0"..., 832) = 832
fstat(4, {st_mode=S_IFREG|0644, st_size=47712, ...}) = 0
mmap(NULL, 2144392, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0x7fddf929a000
mprotect(0x7fddf92a5000, 2093056, PROT_NONE) = 0
mmap(0x7fddf94a4000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0xa000) = 0x7fddf94a4000
close(4) = 0
mprotect(0x7fddf94a4000, 4096, PROT_READ) = 0
munmap(0x7fddf9e5d000, 103146) = 0
open("/etc/host.conf", O_RDONLY|O_CLOEXEC) = 4
fstat(4, {st_mode=S_IFREG|0644, st_size=9, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fddf9e76000
read(4, "multi on\n", 4096) = 9
read(4, "", 4096) = 0
close(4) = 0
munmap(0x7fddf9e76000, 4096) = 0
open("/etc/hosts", O_RDONLY|O_CLOEXEC) = 4
fstat(4, {st_mode=S_IFREG|0644, st_size=270, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fddf9e76000
read(4, "#\n127.0.0.1 localhost loca"..., 4096) = 270
read(4, "", 4096) = 0
close(4) = 0
munmap(0x7fddf9e76000, 4096) = 0
socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 4
connect(4, {sa_family=AF_INET, sin_port=htons(1025), sin_addr=inet_addr("127.0.0.1")}, 16) = 0
getsockname(4, {sa_family=AF_INET, sin_port=htons(35443), sin_addr=inet_addr("127.0.0.1")}, [16]) = 0
close(4) = 0
setsockopt(3, SOL_RAW, ICMP_FILTER, ~(ICMP_ECHOREPLY|ICMP_DEST_UNREACH|ICMP_SOURCE_QUENCH|ICMP_REDIRECT|ICMP_TIME_EXCEEDED|ICMP_PARAMETERPROB), 4) = 0
setsockopt(3, SOL_IP, IP_RECVERR, [1], 4) = 0
setsockopt(3, SOL_SOCKET, SO_SNDBUF, [324], 4) = 0
setsockopt(3, SOL_SOCKET, SO_RCVBUF, [65536], 4) = 0
getsockopt(3, SOL_SOCKET, SO_RCVBUF, [131072], [4]) = 0
fstat(1, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 4), ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fddf9e76000
write(1, "PING localhost (127.0.0.1) 56(84"..., 49PING localhost (127.0.0.1) 56(84) bytes of data.
) = 49
setsockopt(3, SOL_SOCKET, SO_TIMESTAMP, [1], 4) = 0
setsockopt(3, SOL_SOCKET, SO_SNDTIMEO, "\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 16) = 0
setsockopt(3, SOL_SOCKET, SO_RCVTIMEO, "\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 16) = 0
rt_sigaction(SIGINT, {0x4043d0, [], SA_RESTORER|SA_INTERRUPT, 0x7fddf96e0480}, NULL, 8) = 0
rt_sigaction(SIGALRM, {0x4043d0, [], SA_RESTORER|SA_INTERRUPT, 0x7fddf96e0480}, NULL, 8) = 0
rt_sigaction(SIGQUIT, {0x4043c0, [], SA_RESTORER|SA_INTERRUPT, 0x7fddf96e0480}, NULL, 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
ioctl(1, SNDCTL_TMR_TIMEBASE or SNDRV_TIMER_IOCTL_NEXT_DEVICE or TCGETS, {B38400 opost isig icanon echo ...}) = 0
ioctl(1, TIOCGWINSZ, {ws_row=34, ws_col=130, ws_xpixel=0, ws_ypixel=0}) = 0
sendmsg(3, {msg_name(16)={sa_family=AF_INET, sin_port=htons(0), sin_addr=inet_addr("127.0.0.1")}, msg_iov(1)=[{"\10\0\252\322.*\0\1\7\343\374S\0\0\0\0Q\370\n\0\0\0\0\0\20\21\22\23\24\25\26\27"..., 64}], msg_controllen=0, msg_flags=0}, 0) = 64
recvmsg(3, 0x7fff10445b40, 0) = -1 EAGAIN (Resource temporarily unavailable)
sendmsg(3, {msg_name(16)={sa_family=AF_INET, sin_port=htons(0), sin_addr=inet_addr("127.0.0.1")}, msg_iov(1)=[{"\10\0\221\323.*\0\2\10\343\374S\0\0\0\0i\366\n\0\0\0\0\0\20\21\22\23\24\25\26\27"..., 64}], msg_controllen=0, msg_flags=0}, 0) = 64
setitimer(ITIMER_REAL, {it_interval={0, 0}, it_value={10, 0}}, NULL) = 0
recvmsg(3, 0x7fff10445b40, 0) = -1 EAGAIN (Resource temporarily unavailable)
recvmsg(3, 0x7fff10445b40, 0) = -1 EAGAIN (Resource temporarily unavailable)
recvmsg(3, 0x7fff10445b40, 0) = -1 EAGAIN (Resource temporarily unavailable)
recvmsg(3, 0x7fff10445b40, 0) = -1 EAGAIN (Resource temporarily unavailable)
recvmsg(3, 0x7fff10445b40, 0) = -1 EAGAIN (Resource temporarily unavailable)
recvmsg(3, ^CProcess 11818 detached
<detached ...>
--- localhost ping statistics ---
2 packets transmitted, 0 received, 100% packet loss, time 999ms
--------------------------------------------------------------------------------
>
> 3) strace ping6 -c2 ip6-localhost
I've left this one out, since I recompiled the kernel without ip6 support. "ping6 localhost" had produced a result and my thinking was to force whatever it was to use ip4 again. Was that a mistake
------------------------------------------------------------------------------->
> 4) sysctl --system
sysctl --system
* Applying /etc/sysctl.d/99-sysctl.conf ...
net.ipv4.icmp_echo_ignore_all = 0
net.ipv4.icmp_echo_ignore_broadcasts = 0
net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.all.rp_filter = 1
net.ipv4.ip_forward = 1
net.ipv4.conf.all.secure_redirects = 1
vm.swappiness = 1
vm.vfs_cache_pressure = 50
* Applying /etc/sysctl.conf ...
net.ipv4.icmp_echo_ignore_all = 0
net.ipv4.icmp_echo_ignore_broadcasts = 0
net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.all.rp_filter = 1
net.ipv4.ip_forward = 1
net.ipv4.conf.all.secure_redirects = 1
vm.swappiness = 1
vm.vfs_cache_pressure = 50
I had earlier tried, without success, with the default sysctrl.conf, which enables nothing.
-----------------------------------------------------------------------------
> 5) ip ro l
ip ro l
default via 192.168.1.1 dev wlan0
192.168.1.0/24 dev wlan0 proto kernel scope link src 192.168.1.104
--------------------------------------------------------------------------
> 6) ip -6 ro l
ip -6 ro l
default via 192.168.1.1 dev wlan0
192.168.1.0/24 dev wlan0 proto kernel scope link src 192.168.1.104
I'm very grateful to you for hanging in, whatever the result.
--
JohnRChamplin@wowway.com
====================================================
GPG key 1024D/99421A63 2005-01-05
EE51 79E9 F244 D734 A012 1CEC 7813 9FE9 9942 1A63
gpg --keyserver subkeys.pgp.net --recv-keys 99421A63
Attachment:
signature.asc
Description: Digital signature