networking question

[Chris Fadrowski]

I have a new itanium server that i am setting up. It's running 11.23 HPUX.. My problem is, i can't get outside of our network. I can ping anything inside but not outside like www.yahoo.com by name or IP.. i checked my /etc/hosts which includes

192.168.x.x gw_host

and my nsswitch.conf which includes

hosts: files, DNS

i should be getting out.. what am i missing? It's not the firewall, i have access for that.

[Geoff Wild]

What does traceroute reveal?

How about? netstat -rn

What is in? /etc/resolv.conf


Rgds...Geoff

[Chris Fadrowski]

during a traceroute, it never leaves the the local server (itself). i get this;

traceroute: Warning: www.yahoo.com has multiple addresses; using 216.109.118.73
traceroute to www.yahoo.com (216.109.118.73), 30 hops max, 40 byte packets
1 hostname (192.168.3.21) 0.067 ms !N 0.020 ms !N 0.019 ms !N

Netstat -m is not supported in 11.23 (reading from a core file is no longer supported) is the message i get.

and /etc/rsolv.conf is correct with my DNS and name servers.

my netconf file is also the same as the other unix servers that can get out.

[Scot Bean]

Check your browser settings, especially for proxy, if needed at your site.

[Chris Fadrowski]

i won't be using a browser on this server, however, i punched a hole in my firewall for this server so i know it should be bypassing the proxy.

[Sridhar Bhaskarla · Accepted solution]

Hi Chris,

Looks like your default gateway is not setup on the system as it is trying to use your local interface.

Try 'netstat -rn' (it's "r" and "n") and you should see an entry with 'default' string. If you don't have it then add it using the command

route add default gw_host 1

and then try.

Adjust your netconf file with the ROUTE entries. Examples are given in there.

-Sri

[Todd McDaniel_1]

What does your /etc/rc.config.d/netconf say?

Do you have a gateway setup with route hop set at 1 or with your HOST as the gateway and hop set to 0?

INTERFACE_NAME[0]=lan0
IP_ADDRESS[0]=132.201.xx.xx
SUBNET_MASK[0]=255.255.255.224
BROADCAST_ADDRESS[0]=""
INTERFACE_STATE[0]=""
DHCP_ENABLE[0]=0

ROUTE_GATEWAY[0]=132.201.yy.yy
ROUTE_COUNT[0]=1
ROUTE_DESTINATION[0]=default

[Geoff Wild]

actually - it's netstat -rn ( r n )

Are you running ipfilter on the 11.23 server?

Can you actually get to you firewall?

Rgds...Geoff

[Chris Fadrowski]

netconf file

INTERFACE_NAME[0]=lan0
IP_ADDRESS[0]=192.168.3.21
SUBNET_MASK[0]=255.255.255.0
BROADCAST_ADDRESS[0]=192.168.255.255
INTERFACE_STATE[0]=""
DHCP_ENABLE[0]=0


ROUTE_DESTINATION[0]=default
ROUTE_MASK[0]=""
ROUTE_GATEWAY[0]=192.168.1.1
ROUTE_COUNT[0]=1
ROUTE_ARGS[0]=""

it does look like it can't find the gateway after doing netstat -rn.. it was looking to 127.0.0.1

i did the route add and now everything works. I just don't recall having to do this in the past. I would config the netconf file and it would work. thanks to all ..

[Steven E. Protter]

Chris that default gateway in your netconf file must be reachable.

You have to be able to ping it in order for it to work and have that NIC be the first place traceroutes and other internet traffic go.

SEP

[rick jones]

if your router will not respond to ICMP echo requests (pings), then you have to disable dead gateway detection via ndd - ip_ire_gw_probe to 0.

And based on your 192.168.X.X stuff, I presume your gateway is also a NAT.

[Todd McDaniel_1]

Chris,

Correct me if Im wrong isnt your gateway address wrong?

INTERFACE_NAME[0]=lan0
IP_ADDRESS[0]=192.168.3.21
SUBNET_MASK[0]=255.255.255.0
BROADCAST_ADDRESS[0]=192.168.255.255
INTERFACE_STATE[0]=""
DHCP_ENABLE[0]=0


ROUTE_GATEWAY[0]=192.168.1.1


Shouldnt it be 192.168."3".1, where there is a 3 instead of a 1???

[Todd McDaniel_1]

sorry didnt see you got your solution...

No points on my last post or this one.

[Chris Fadrowski]

actually the gateway is not wrong, we are using class B subnet. with 172 addressing.