Solved

DNS Request timed out, never reaching webfront.

Posted on 2008-10-01
4
625 Views
Last Modified: 2008-10-10
Hello experts!

I'm in a sticky situation and hope you guys can help me out. This is what it looks like:
At my company we are running a webfront with Apache 2. The purpose of this is to redirect the user to a CGI server for exectuion of the dynamic webpages. My problem is that there is no response from the webfront! A ping to the DNS resolves the ip-address but gives no other response.

I can verify this because the Apache access.log in the /srv/log/httpd/ directory shows nothing, which in my book tells me that no traffic is let through.
I can also see that the conf files for the site have not been altered for over a year and everything worked fine last friday. =(
Of course I tried to access it from different domains, all with the same result: time out.

This is my first job and I would really like to fix this problem so I can get some respect around here. =)
I know some of you will ask if there are some firewall settings screwing everything up. But since I am a regular mortal developer I have to access to check these.

So any kind of tips would really be appreciated!
And please ask me if anything is unclear and I will do my best to answer.

Best regards Jide
0
Comment
Question by:jide85
  • 2
  • 2
4 Comments
 
LVL 13

Accepted Solution

by:
Rowley earned 500 total points
ID: 22614849
if you're unable to establish a tcp connection there's not much you can do apart from ensure that the service is up and running, the network interfaces are up and correctly configured and the server is listening for connections.

use:
- "ps -ef | grep httpd" to check apache is running
- "netstat -an | grep LISTEN | grep 80" to check what interfaces are listening on HTTP
- ifconfig -a to verify all interfaces are up and running
- check the web server can get past its default gateway..."ping www.google.com" or "telnet www.google.com 80" if icmp is blocked.

If everything else is working...its a networking issue, likely to be a firewall.
0
 
LVL 1

Author Comment

by:jide85
ID: 22622007
Thank you Rowley. This is what I concluded:

"ps -ef | grep "httpd" returns:
root      2309     1  0  2007 ?        00:00:25 /opt/hp-httpd/2/sbin/httpd2.worker -d /opt/hp-httpd/2/conf/shared_front-80 -f httpd.conf -D ALIAS -D CACHE -D DEFLATE -D DIR -D ENV -D EXPIRES -D HEADERS -D LOG_CONFIG -D MEM_CACHE -D MIME -D NEGOTIATION -D PROXY -D PROXY_CONNECT -D PROXY_HTTP -D REWRITE -D SETENVIF -D UNIQUE_ID -D IP_FORWARDING -D INCLUDE -D AUTH_BASIC -D AUTHN_FILE -D AUTHZ_USER -D AUTHN_DEFAULT -D AUTHZ_DEFAULT -D AUTHZ_HOST -D AUTHZ_GROUPFILE -D AUTH_DIGEST -E /srv/log/httpd/shared_front-80/startuperror.log
apache    7980  2309  0 04:02 ?        00:00:00 /opt/hp-httpd/2/sbin/httpd2.worker -d /opt/hp-httpd/2/conf/shared_front-80 -f httpd.conf -D ALIAS -D CACHE -D DEFLATE -D DIR -D ENV -D EXPIRES -D HEADERS -D LOG_CONFIG -D MEM_CACHE -D MIME -D NEGOTIATION -D PROXY -D PROXY_CONNECT -D PROXY_HTTP -D REWRITE -D SETENVIF -D UNIQUE_ID -D IP_FORWARDING -D INCLUDE -D AUTH_BASIC -D AUTHN_FILE -D AUTHZ_USER -D AUTHN_DEFAULT -D AUTHZ_DEFAULT -D AUTHZ_HOST -D AUTHZ_GROUPFILE -D AUTH_DIGEST -E /srv/log/httpd/shared_front-80/startuperror.log
apache    7981  2309  0 04:02 ?        00:00:00 /opt/hp-httpd/2/sbin/httpd2.worker -d /opt/hp-httpd/2/conf/shared_front-80 -f httpd.conf -D ALIAS -D CACHE -D DEFLATE -D DIR -D ENV -D EXPIRES -D HEADERS -D LOG_CONFIG -D MEM_CACHE -D MIME -D NEGOTIATION -D PROXY -D PROXY_CONNECT -D PROXY_HTTP -D REWRITE -D SETENVIF -D UNIQUE_ID -D IP_FORWARDING -D INCLUDE -D AUTH_BASIC -D AUTHN_FILE -D AUTHZ_USER -D AUTHN_DEFAULT -D AUTHZ_DEFAULT -D AUTHZ_HOST -D AUTHZ_GROUPFILE -D AUTH_DIGEST -E /srv/log/httpd/shared_front-80/startuperror.log
apache    7982  2309  0 04:02 ?        00:00:00 /opt/hp-httpd/2/sbin/httpd2.worker -d /opt/hp-httpd/2/conf/shared_front-80 -f httpd.conf -D ALIAS -D CACHE -D DEFLATE -D DIR -D ENV -D EXPIRES -D HEADERS -D LOG_CONFIG -D MEM_CACHE -D MIME -D NEGOTIATION -D PROXY -D PROXY_CONNECT -D PROXY_HTTP -D REWRITE -D SETENVIF -D UNIQUE_ID -D IP_FORWARDING -D INCLUDE -D AUTH_BASIC -D AUTHN_FILE -D AUTHZ_USER -D AUTHN_DEFAULT -D AUTHZ_DEFAULT -D AUTHZ_HOST -D AUTHZ_GROUPFILE -D AUTH_DIGEST -E /srv/log/httpd/shared_front-80/startuperror.log

So the apache seems to be running.

netstat -an | grep LISTEN | grep "80" gave me:
tcp        0      0 :::80                       :::*                        LISTEN
So even this looks like it is working.

ifconfig -a:
command not found
I guess this is because our service/hardware provider won't let us do this (?).

ping ww.google.com & GET http://www.google.com
Both returned satisfying results.


Well I guess all this concludes that there is a firewal issue. I have reported the problem and if any one has something more to add please feel free. Or else it's a waiting game. =)

Thanks Rowley.
//Jide
0
 
LVL 13

Assisted Solution

by:Rowley
Rowley earned 500 total points
ID: 22622060
You'll find the ifconfig command in /sbin or /usr/sbin.

Just check your can't telnet to your own website on port 80. Chances are you'll get "connection refused" or "could not open connection to the host..."

One other thing, make sure you are resolving the address correctly!
0
 
LVL 1

Author Comment

by:jide85
ID: 22687050
Still no result.
But thanks a lot Rowley, I now know how to better search for these kinds of errors.
I'll post the answer, if it ever shows up.
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
Strange addresses from DHCP 8 70
Change local server setting in php 6 59
Configure WPAD via DNS 3 50
DNS Name Pointing 6 26
I wrote this article to explain some important DNS concepts that should be known to avoid some typical configuration errors I often see in forums. I assume that what is described here is the typical behavior of Microsoft DNS client. I don't know …
Occasionally you run into the website or two that will not resolve properly using your own DNS servers.  Some people simply set up global forwarders for their DNS server.  I don’t recommend doing this because it can cause problems resolving addresse…
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…
This video explains how to create simple products associated to Magento configurable product and offers fast way of their generation with Store Manager for Magento tool.

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now