Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 7 replies
  • Subscribers 2 subscribers
  • Views 5876 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

No route to host

Seadap
Hello all,

I've been experimenting with the vn 7 vm on an ubuntu server.  I've worked out many of the kinks but now I seem to be stuck.

The trouble is that any time I try to send browser requests from a client machine I get the error "No route to host."  When I try Support >> Tools >> Ping check for Yahoo! I get : 



PING www-real.wa1.b.yahoo.com (209.131.36.158) 56(84) bytes of data.



From gaurdian (192.168.1.22): icmp_seq=2 Destination Host Unreachable



From gaurdian (192.168.1.22) icmp_seq=2 Destination Host Unreachable



From gaurdian (192.168.1.22) icmp_seq=3 Destination Host Unreachable


indicating the dns lookup succeeded but was unable to connect to the host.  Additionally, I am receiving emails from the asg saying: 

Up2Date prefetch failed: All 12 Authentication Servers failed



-- System Uptime : 0 days 21 hours 48 minutes 

System Load : 0.01 

System Version : Astaro Security Gateway Software 7.305 

Please refer to the manual for detailed instructions. 


So dns works, email is getting sent correctly but anything else seems to choke.  Where am I configured wrong?

Scott


This thread was automatically locked due to age.
Parents
  • 0
    Have you configured 'Network >> DNS'?
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    I *think* I have it configured right:

    Global Tab:
      Allowed Networks:
        Internal (Network)

    Forwarders Tab:
      DNS Forwarders:
        DNS Forwarder (my router's ip address)
        Use forwarders assigned by ISP - CHECKED
        Currently assigned forwarders: none

    Request Routing Tab:
      There are no DNS routes defined.
  • 0 in reply to Seadap
    Also, an nslookup for Yahoo! from a client machine yields:

    Server:   68.87.69.145
    Address: 68.87.69.145#53

    Non-authoritative answer:
    Yahoo!  canonical name = Yahoo!.
    Yahoo!  canonical name = www-real.wa1.b.yahoo.com.
    Name: www=real.wa1.b.yahoo.com
    Address: 209.131.36.158

    So it looks like at least the dns lookup is working properly, just that a web request finds no route to host.

    Thanks for your help!
  • 0 in reply to Seadap
    I *think* I have it configured right:

    Global Tab:
      Allowed Networks:
        Internal (Network)

    Forwarders Tab:
      DNS Forwarders:
        DNS Forwarder (my router's ip address)
        Use forwarders assigned by ISP - CHECKED
        Currently assigned forwarders: none

    Request Routing Tab:
      There are no DNS routes defined.

    DNS Forwarder  should be your isp's dns server 
    are you using router dhcp/dns ?

    Thanks
  • 0 in reply to utm_kid
    I'm using my router to forward dns requests.  Also, I tried using opendns as a forwarding dns with the same results.  I had the same thought you did about the forwarder not being correct.  Thanks for the help!
  • 0 in reply to Seadap
    SOLVED:

    The trouble is that the vm that I am using was set to make the External adapter Host only.  When I switched it to bridged mode it works.  Thanks for the help!
  • 0 in reply to Seadap
    DNS Forwarder (my router's ip address)
    You might need that if you are having the Astaro do DHCP, but probably not even then.

    Currently assigned forwarders: none
    This means you need to manually add your ISP's DNS servers.  Presently, you probably are sending DNS requests to the Root Name Servers, and that will cause browsing to be v e r y  sllllooooow.

    Good catch on that need for bridging.  I don't think I would have caught that.  If Barry comes by here, I hope he'll comment on when you don't have to use bridging in a virtual machine.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0 in reply to Seadap
    DNS Forwarder (my router's ip address)
    You might need that if you are having the Astaro do DHCP, but probably not even then.

    Currently assigned forwarders: none
    This means you need to manually add your ISP's DNS servers.  Presently, you probably are sending DNS requests to the Root Name Servers, and that will cause browsing to be v e r y  sllllooooow.

    Good catch on that need for bridging.  I don't think I would have caught that.  If Barry comes by here, I hope he'll comment on when you don't have to use bridging in a virtual machine.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data
Cookie Information Banner