My server ping keeps disconnecting
However my ssh & website is smooth running!
When i type "service iptables stop", the ping runs just smoothly.
I have CSF installed in the server, like any other server using default configurations. I believe it has something to do with selinux? (or not?)
15ms ping vs 40ms ping vs 170ms ping
Which you think is still acceptable for a website?
Is anyone here using SElinux on a web server?
If so, how hard was that to setup?
I am not expert in linux box.... Actually I have found a problem in my machine, our clients are not able to access their sites from server, when I checked the system log it was related to Permission Denied. Someone told me to disable SELinux enforcing, Now after that my problem resolved.
But I am curious that what exactly Selinux is and what kind of issue it may create for my box if I disable it?
I am having quite a challenge getting openvz to work on centos 5 with a adaptec RAID card.
The driver likes the plain jane kernel..but then...
Configuration [OpenVZ (2.6.18-8.1.14.el5.028stab045.1)]
***NOTICE: /boot/vmlinuz-2.6.18-8.1.14.el5.028stab045.1 is not a kernel. Skipping.
There is also another issue not being able to disable Selinux.
I have tried the normal routes and even attempted disabling it in rc.sysinit..still...this "security framework" is able to load it..and cause problems.
Openvz and SeLinux don't get along..even a little bit.
So..those are the two probably seperate issues...that prevent the poor server from booting.
I can't get SELinux to let httpd load the IonCube module for PHP. I've given the CentOS 5 forum a try (here: http://www.centos.org/modules/newbb/...15403&forum=42), talked with WHMCS's support (the app I'm using that needs it), and even opened a ticket with IonCube. Unfortunately nobody seems to know how to tell SELinux to let httpd "exec" modules.
I'm running CentOS 5, and the error I'm getting in /var/log/messages is:
Jul 23 10:15:30 host kernel: audit(1216833330.905:1249): avc: denied { execheap } for pid=22055 comm="httpd" scontext=root:system_r:httpd_t:s0 tcontext=root:system_r:httpd_t:s0 tclass=process
I can disable SELinux and it works fine (setenforce 0), but that's not the solution I'm looking for. Can someone please tell me how to do this the *right* way?
Has anyone wrote custom SELinux policies for their cpanel server?
View 1 Replies View RelatedIs it possible to make these two work together? I can't seem to find any way to let Apache read /home/<username>/public_html without disabling selinux entirely.
I know you can do "chcon -t httpd_sys_content_t -R $HOME/public_html", but it seems like it would be a pain when adding users, especially if someone decides to delete their public_html and make a new directory.
Is it possible to create an exception to let httpd do whatever it wants?
I have changed the maildir in Plesk according to [URL] ..... Everything works like a charm, however selinux doesn't allow access to the new directory. That means we get a permission denied and no mail is received at the server anymore.
Old location: /var/qmail/mailnames/
New location: /mnt/bigstorage/mailnames/
tail -f /var/log/maillog:
Mar 2 13:38:42 srv2 postfix-local[5983]: postfix-local: from=example@example.com, to=example@example.com, dirname=/mnt/bigstorage/mailnames/
Mar 2 13:38:42 srv2 postfix-local[5983]: cannot chdir to mailnames dir /mnt/bigstorage/mailnames: Permission denied
If we disable selinux, everything works, however this is not the best practice.
How can I fix this error without disabling selinux?
Specs: centOS 6.6 (Final) with Plesk 11.5.30 #48
In the last updates I get this warning:
Updating: selinux-policy-targeted-3.7.19-260.el6.noarch 128/373
libsemanage.semanage_direct_commit: WARNING: genhomedircon is disabled.
See /etc/selinux/semanage.conf if you need to enable it.
/etc/selinux/targeted/contexts/files/file_contexts: Invalid argument
libsemanage.semanage_install_active: setfiles returned error code 1.
semodule: Failed!Click to expand...
I am trying to install Automation, and I keep getting an error after the "Getting SELinux" step, here is a log of the process so far:
Code:
[INFO]: Checking current user privileges...
[INFO]: Checking critical environment requirements...
[INFO]: Determining OS parameters...
[INFO]: Detected OS: CentOS-5-x86_64
[INFO]: Getting SELinux state...
[ERROR]: Unexpected error: ''
[Code] ....
I have tried running the installation on a different server and the same issue came up...
My server DC technician change the cable to another switch in another rack. all in sudden, my server went 'offline'.
the weird thing is,
I can ping the server IP
When I plug my KVM,
I can ping google.com from my server
But when I lynx google.com, it keep saying
HTTP requests sent; waiting for response._
When I open my putty and SSH, it keep waiting.
When I try to ssh from another server, it keep waiting
$ ssh school@xxx.xxx.xxx.xx
[nothing happen]
$ ping xxx.xxx.xxx.xx
PING xxx.xxx.xxx.xx (xxx.xxx.xxx.xx) 56(84) bytes of data.
64 bytes from xxx.xxx.xxx.xx: icmp_seq=1 ttl=63 time=1.10 ms
64 bytes from xxx.xxx.xxx.xx: icmp_seq=2 ttl=63 time=0.864 ms
64 bytes from xxx.xxx.xxx.xx: icmp_seq=3 ttl=63 time=0.854 ms
- I can ping my server from MS DOS
- I can ping my server from Iptools.com
- I can ping my server from another server
But..
- I cannot ssh into my server
- I cannot ssh into my server from another server
Inside my server..
- I can ping google.com, yahoo.com, other servers
- But I cannot lynx and open all websites
When I restart network, it shows [refer attachment] captured from my KVM
PING
Whats that?
after my server down, i ask for reboot then the server up again.
but i cant access SSH via my main ip, but i can access SSH via second ip. when i ping main ip, all is request time, but my second ip can ping.
ok main ip cannot use, so i use second ip the main problem come i cant do yum update kernel, will show this error
Quote:
Setting up Update Process
Setting up repositories
Cannot find a valid baseurl for repo: update
Error: Cannot find a valid baseurl for repo: update
when i try run socks5 proxy in my server, it running, but when i use it for my personal pc, the socks5 it not run....just show proxy is offline.
when i do wget some direct links
it always show, but never download
Quote:
[root@xxxx ~]# wget ftp://ftp.is.co.za/mirror/centos/4.4...4E.12.i386.rpm
--11:39:24-- ftp://ftp.is.co.za/mirror/centos/4.4...4E.12.i386.rpm
=> `squid-2.5.STABLE6-3.4E.12.i386.rpm'
Resolving ftp.is.co.za...
so i try to go check resolv.conf, but don have problem, my other 2 same server also dont have problem with this dns server.
I just moved from PowerVPS to EuroVPS, being located in Europe myself, and was of course hoping for much better ping times. Also EuroVPS advertise themselves with a 30ms ping to most of Europe.
Anyway after my VPS was installed I compared the pings:EuroVPS (85.17.48.162) average ping: 335ms
PowerVPS (69.65.106.19) average ping: 129ms
335ms is of course ridiculously high, and after writing them a support ticket they told me it's probably a latency problem with my ISP
Can you please post the ping you get for 85.17.48.162 (preferably people located in Europe)?
I have configured Nagios on my network 10+ Servers (Linux+Windows) now when i check through http://localhost/nagios everything is ok but only ping command is giving following message :-
Unknown
bin/ping -n -U -w 10 -c 5 x.x.x.x
CRITICAL - Could not interpret output from ping command
and mail me "server down " message
So what is the issue ?
I am able to run this command through command line
./check_ping -H {server} -w 100.0,20% -c 500,50% -p 5
PING OK - Packet loss = 0%
./check_ping -H x.x.x.x -w 300.0,80% -c 500.0,100% -p 5
PING OK - Packet loss = 0%
I'm running my own OpenVZ server with a few VPS's running on it and have a small network issue.
I can't ping any VE from the HN. All the other networking is working ok (strangely I can ping the HN from the VE) apart from this. It's a simple setup with one network card connected to the internet.
OpenVZ the latest stable version running on CentOS 5.2
I'm pretty sure it's not a firewall problem but is something to do with arp or routing and one of the settings in sysctl.conf
Has anyone else seen this?
Does it matter?
I did a few tests
Pinging lunarpages.com [74.50.4.210] with 32 bytes of data:
Average = 191ms
Pinging hostmonster.com [74.220.195.150] with 32 bytes of data:
Average = 191ms
Pinging godaddy.com [97.74.104.201] with 32 bytes of data:
Average = 175ms
Pinging rackspace.com [72.32.191.88] with 32 bytes of data:
Average = 150ms
Pinging siteground.com [209.85.102.36] with 32 bytes of data:
Average = 148ms
Pinging hostgator.com [74.54.219.185] with 32 bytes of data:
Average = 147ms
Pinging ipowerweb.com [66.96.130.200] with 32 bytes of data:
Average = 113ms
The pages load really fast @ ipowerweb
i've only ever used pings to test if a host is up or down.
But what other information am i looking for in ping tests. For e.g., the time in ms the TTL etc etc?
How can i test pinging my server from different locations around the world?
i install one xen guest ( centos5)
i run yum update and result is :
-bash-3.1# yum update
Loading "installonlyn" plugin
Setting up Update Process
Setting up repositories
Could not retrieve mirrorlist http://mirrorlist.centos.org/?releas...86&repo=extras error was
[Errno 4] IOError: <urlopen error (-3, 'Temporary failure in name resolution')>
Error: Cannot find a valid baseurl for repo: extras
i use of middle config :
/etc/sysconfig/network-scripts/ifcfg-eth0 TYPE=Ethernet
DEVICE=eth0
BOOTPROTO=static
BROADCAST=192.168.0.255
IPADDR=192.168.0.13
IPV6ADDR=
IPV6PREFIX=
NETMASK=255.255.255.0
NETWORK=192.168.0.0
ONBOOT=yes /etc/sysconfig/network
NETWORKING=yes
HOSTNAME=myhost.l3i.ca
GATEWAY=192.168.0.1 /etc/resolv.conf (DNS resolver)
nameserver 4.2.2.1
nameserver 4.2.2.2
My sites are up when I go to http and there is no slowdown but my monitors (panopta and pingdom) say that there is an outage in ping (only in ping, http is up). I tried pinging the server and there are packet loss up to 100% but the site is still up. I also used other online pinging tools (all-nettools.com, dnsstuff.com, etc.) and host unreachable.
I tried contacting the provider but they say there are no network problem at this time. So I found this other site that's also hosted on the same provider and I can access their site but fails on ping.
i think 216.245.208.x and 216.245.215.x DOWN, but limestonenetworks tell me :"problems well outside of our network, and I would highly suggest contacting your ISP for support on this matter" ....
View 9 Replies View RelatedMust an IP address have to be pingable for apache to be seen.
I've set up an apache server at home and I noticed that if I block ping requests, no one can see i externally.
If I enable ping requests people can visit my site/server.
I have 2 CPanel servers. I wanted to transfer multiple accounts via WHM but it gives me error that I cannot SSH into the other server.
I tried to ping the 2nd server from 1st server and it gives me:
root@s [~]# ping xxx.xxx.xxx.7
PING xxx.xxx.xxx.7 (xxx.xxx.xxx.7) 56(84) bytes of data.
ping: sendmsg: Operation not permitted
ping: sendmsg: Operation not permitted
ping: sendmsg: Operation not permitted
ping: sendmsg: Operation not permitted
cping: sendmsg: Operation not permitted
I added both server IP into allowed list inside my APF firewall on each server as well.
I rebooted both server earlier before, but it is still not solving my problem.
Can I have some of you ping 24fans.net and let me know what your results are? Also where you're located would be good.
My ISP is being crappy and my dsl line is basically down ever few minutes. They're supposed to fix it tomorrow.
My current results are:
Reply from 70.84.145.91: bytes=32 time=66ms TTL=51
Reply from 70.84.145.91: bytes=32 time=59ms TTL=51
Reply from 70.84.145.91: bytes=32 time=65ms TTL=51
Reply from 70.84.145.91: bytes=32 time=58ms TTL=51
This doesn't really have anything to do with my dsl being crappy, but rather I'm just curious as to what kind of responses people are getting around the world.
I have a problem with my server, that i can't not ping
Quote:
[root@server apf-0.9.6-2]# ping yahoo.com
ping: unknown host yahoo.com
But i can log in the ssh. i just installed apf, i check conf.apf to made sure there are port 80, but it still can't ping.
So I'm wondering what if anything I can do to get a better ping from my 1and1 server.
It's located in Wayne, PA and my ping floats around 70ms and I'm in South Lake Tahoe, CA. I only ask because there are servers with Peer1 hosted in New York, NY that give me a ping around 20ms.
Thanks for any help or advice.
Its a Windows Server 2008 Web Box.
A website,which i can't access,but i used the ping and tracert instruct. the result tell me the IP and route is right.later,a use a Proxy site to access that site,it can. who knows the reason?
View 1 Replies View RelatedI installed net query tool from this site
http://virtech.org/tools/
They say in order for ping and trace to work, you must chmod those executables on the server itself to 755. Is this safe or a security risk? The odd thing is, ping and trace works fine from dnsstuff.com or any other network tool site.
What is the location of those executables?
I have two servers both in a same vlan. Both may access Internet and be acceessed from Internet I setup db server and web server internal IP each as follows:
step 1: on web server:
vi /etc/sysconfig/network-scripts/ifcfg-eth0:0
add following:
DEVICE=eth0:0
BOOTPROTO=static
BROADCAST=192.168.1.255
IPADDR=192.168.1.5
NETMASK=255.255.255.248
NETWORK=192.168.1.0/24
ONBOOT=yes
TYPE=Ethernet
save and /etc/init.d/network restart
step 2: on db server:
vi /etc/sysconfig/network-scripts/ifcfg-eth0:0
add following:
DEVICE=eth0:0
BOOTPROTO=static
BROADCAST=192.168.1.255
IPADDR=192.168.1.10
NETMASK=255.255.255.248
NETWORK=192.168.1.0/24
ONBOOT=yes
TYPE=Ethernet
save and /etc/init.d/network restart
I used ifconfig to check both status, both of them are up. both of them may ping google, but when I try to ping their each other through internal IP, nothing returns.
I used command tracert to follow, found all packages were sent to Internet rather than an internal IP.
My host tells me to do it by making NAT, I have no idea on it. Anyone may help me out on how to do with NAT?
Should I block ping request to my servers from WAN?
View 12 Replies View Related