Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 3 > General

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 3rd June 2010, 17:14
Thomas Jensen Thomas Jensen is offline
Senior Member
 
Join Date: Apr 2009
Posts: 127
Thanks: 5
Thanked 1 Time in 1 Post
Default Some users can't load any websites

Hi all

Today the phone started ringing, and then again and again. I have no clue why, but some of my users can't access my websites. They report that the browser just keeps loading forever. I've made one them do a ping, to check DNS, and nothing wrong there.

So far I've restarted apache and clamav, but still facing problems. Some users have no problems at all, and i don't either. The apache log doesn't show anything unusual.

Thanks in advance!
Reply With Quote
Sponsored Links
  #2  
Old 3rd June 2010, 18:28
ivomendonca ivomendonca is offline
Banned
 
Join Date: Sep 2009
Posts: 132
Thanks: 10
Thanked 14 Times in 8 Posts
Default

Quote:
Originally Posted by Thomas Jensen View Post
Hi all

Today the phone started ringing, and then again and again. I have no clue why, but some of my users can't access my websites. They report that the browser just keeps loading forever. I've made one them do a ping, to check DNS, and nothing wrong there.

So far I've restarted apache and clamav, but still facing problems. Some users have no problems at all, and i don't either. The apache log doesn't show anything unusual.

Thanks in advance!
Maybe got banned verify iptables.
Sometimes I have the same problem, from my isp(home) e see all my sites but from other isp dont resolve any domain.
Reply With Quote
  #3  
Old 3rd June 2010, 18:40
Thomas Jensen Thomas Jensen is offline
Senior Member
 
Join Date: Apr 2009
Posts: 127
Thanks: 5
Thanked 1 Time in 1 Post
Default

Okay.. Can you be more specific? What should i try? It's lots of users..
I've been in contact with one of them, and he had no problem reaching a FTP account.

Last edited by Thomas Jensen; 3rd June 2010 at 18:42.
Reply With Quote
  #4  
Old 3rd June 2010, 18:57
ivomendonca ivomendonca is offline
Banned
 
Join Date: Sep 2009
Posts: 132
Thanks: 10
Thanked 14 Times in 8 Posts
Default

Quote:
Originally Posted by Thomas Jensen View Post
Okay.. Can you be more specific? What should i try? It's lots of users..
I've been in contact with one of them, and he had no problem reaching a FTP account.
Cant help you, maybe change mydns to powerdns! i dont realy know maybe a problem in your resolv.conf (ip inside is blacklist)
Reply With Quote
  #5  
Old 3rd June 2010, 18:59
Thomas Jensen Thomas Jensen is offline
Senior Member
 
Join Date: Apr 2009
Posts: 127
Thanks: 5
Thanked 1 Time in 1 Post
Default

I use an external DNS server, but it isn't the DNS, as one of the users has already tried to make a ping and got the right IP
Reply With Quote
  #6  
Old 3rd June 2010, 20:36
damir damir is offline
Senior Member
 
Join Date: Jun 2006
Posts: 375
Thanks: 11
Thanked 51 Times in 42 Posts
Default

Ask a customer to do a traceroute to your webserver IP.

*nix:

traceroute ip.add.re.ss or domain

Windows:

Start/Run, type cmd and than type:

tracert ip.add.re.ss or domain

Try to visit the sites from different ISP's, it could be a routing problem.
Reply With Quote
  #7  
Old 4th June 2010, 00:03
Thomas Jensen Thomas Jensen is offline
Senior Member
 
Join Date: Apr 2009
Posts: 127
Thanks: 5
Thanked 1 Time in 1 Post
Default

Okay, I've done that, but there seems to be no problem at all..
Reply With Quote
  #8  
Old 4th June 2010, 12:16
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,741 Times in 2,575 Posts
Default

Maybe it's a firewall issue? What's the output of
Code:
iptables -L
? Do you use fail2ban?
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #9  
Old 4th June 2010, 14:18
Thomas Jensen Thomas Jensen is offline
Senior Member
 
Join Date: Apr 2009
Posts: 127
Thanks: 5
Thanked 1 Time in 1 Post
Default

The output:
Quote:
server1:~# iptables -L
Chain INPUT (policy DROP)
target prot opt source destination
fail2ban-ssh tcp -- anywhere anywhere multiport dports ssh
DROP tcp -- anywhere loopback/8
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
ACCEPT all -- anywhere anywhere
DROP all -- BASE-ADDRESS.MCAST.NET/4 anywhere
PUB_IN all -- anywhere anywhere
PUB_IN all -- anywhere anywhere
PUB_IN all -- anywhere anywhere
PUB_IN all -- anywhere anywhere
DROP all -- anywhere anywhere

Chain FORWARD (policy DROP)
target prot opt source destination
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
DROP all -- anywhere anywhere

Chain OUTPUT (policy ACCEPT)
target prot opt source destination
PUB_OUT all -- anywhere anywhere
PUB_OUT all -- anywhere anywhere
PUB_OUT all -- anywhere anywhere
PUB_OUT all -- anywhere anywhere

Chain INT_IN (0 references)
target prot opt source destination
ACCEPT icmp -- anywhere anywhere
DROP all -- anywhere anywhere

Chain INT_OUT (0 references)
target prot opt source destination
ACCEPT icmp -- anywhere anywhere
ACCEPT all -- anywhere anywhere

Chain PAROLE (11 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere

Chain PUB_IN (4 references)
target prot opt source destination
ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
ACCEPT icmp -- anywhere anywhere icmp echo-reply
ACCEPT icmp -- anywhere anywhere icmp time-exceeded
ACCEPT icmp -- anywhere anywhere icmp echo-request
PAROLE tcp -- anywhere anywhere tcp dpt:ftp
PAROLE tcp -- anywhere anywhere tcp dpt:ssh
PAROLE tcp -- anywhere anywhere tcp dpt:smtp
PAROLE tcp -- anywhere anywhere tcp dpt:domain
PAROLE tcp -- anywhere anywhere tcp dpt:www
PAROLE tcp -- anywhere anywhere tcp dptop3
PAROLE tcp -- anywhere anywhere tcp dpt:imap2
PAROLE tcp -- anywhere anywhere tcp dpt:https
PAROLE tcp -- anywhere anywhere tcp dpt:mysql
PAROLE tcp -- anywhere anywhere tcp dpt:http-alt
PAROLE tcp -- anywhere anywhere tcp dpt:webmin
ACCEPT udp -- anywhere anywhere udp dpt:domain
DROP icmp -- anywhere anywhere
DROP all -- anywhere anywhere

Chain PUB_OUT (4 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere

Chain fail2ban-ssh (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere
Yes i use fail2ban.
Reply With Quote
  #10  
Old 5th June 2010, 12:53
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,741 Times in 2,575 Posts
 
Default

Can you switch off your firewall and fail2ban for testing purposes? Do the problems still exist then?
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
libWand.so.10 error Taxick Installation/Configuration 8 3rd May 2009 01:27
Problem with Clamav + samba configuration wammy28 HOWTO-Related Questions 8 31st January 2009 19:12
Cacti and ISPConfig: Monitoring Tool VMartins Tips/Tricks/Mods 11 9th August 2008 18:37
Junk mail and spamassassin... sthompson Installation/Configuration 4 27th December 2006 16:11
Howto suggestion suse PhP ver 4 + Ver 5 wwparrish Suggest HOWTO 11 7th August 2006 13:29


All times are GMT +2. The time now is 19:02.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.