<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
On 5/6/2010 2:35 PM, Gavin Carr wrote:
<blockquote cite="mid:20100506183544.GZ7070@openfusion.com.au"
type="cite">
<pre wrap="">Is one of your dns servers broken?
On Thu, May 06, 2010 at 09:31:22PM +0300, Jussi Hirvi wrote:
</pre>
<blockquote type="cite">
<pre wrap="">I have a strange problem, where some clients see the website on my
server and some do not. It is not about the iptables, and seems to be
not about tcp wrapper. Still it is something within the box.
More details:
- the problem is only with some clients, with no geographical connection
between them; other clients see the website just fine
- the problem-clients get timeout with their browser
</pre>
</blockquote>
</blockquote>
<br>
<blockquote cite="mid:20100506183544.GZ7070@openfusion.com.au"
type="cite">
<blockquote type="cite">
<pre wrap=""><b>- they get timeout also when they try a numerical ip address</b>
</pre>
</blockquote>
</blockquote>
<br>
<blockquote cite="mid:20100506183544.GZ7070@openfusion.com.au"
type="cite">
<blockquote type="cite">
<pre wrap="">- but they see another machine in the same subnet just fine (when they
browse by ip number), so the problem has to be inside this webserver
box, right?
- port 80 (not ssl)
Switching off iptables does not help. The files hosts.allow and
hosts.deny are empty, so I guess it's not the tcp wrapper.
</pre>
</blockquote>
</blockquote>
<br>
Notice the op posted they get timeouts even when going directly to a
numerical address (if the apache server is configured to respond to
*:80 it should at least display something)<br>
<br>
Try using telnet from a client machine that can not connect.<br>
<br>
e.g. telnet host.name.here 80<br>
<br>
or <br>
<br>
telnet xx.xxx.xxx.xxx 80<br>
<br>
Try a few times and see if you're getting a timeout or if it connects
every time. Run tcpdump on the apache server while sending the
connection requests and see if the connection attempts show up at all.
If they do not, then it's a network problem.<br>
<br>
<pre class="moz-signature" cols="72">--
Ryan Manikowski
]] Devision Media Services LLC [[
<a class="moz-txt-link-abbreviated" href="http://www.devision.us">www.devision.us</a>
<a class="moz-txt-link-abbreviated" href="mailto:ryan@devision.us">ryan@devision.us</a> | 716.771.2282</pre>
</body>
</html>