NethServer Version: release 7.3.1611 (Final)
Module: Network
Hello together,
after installing nethserver on a STRATO VPS I am not able to access the www.
The db network shows following output.
db networks show
ppp0=xdsl-disabled
AuthType=auto
FwInBandwidth=
FwOutBandwidth=
Password=
name=PPPoE
provider=xDSL provider
role=red
user=
How can i fix this problem?
Thanks in advance for your help.
regards
digitalfrosch
Hi Ben,
if you did a interactive install and did custom settings to the interface, you have to check the box “always connect to this network” in general settings of the inferace during installation process. Maybe this is your Problem.
Hi Ralf,
thanks for your suggest. I’m new in the nethserver community and i am not sure if i can do an interactive install installation on my vps over the console.?
i installed it via:
yum update
yum localinstall -y http://mirror.nethserver.org/nethserver/nethserver-release-7.rpm
nethserver-install
Afterwarlds i was not able to access anything from the vps. I was able to solf a part of the problem with adding the default the route:
route add default gw X.X.X.X venet0
Furthermore the shorewall will not start. 
hopefully this information can help to get an better overview. 
Thanks in advance for your help.
You should run yum update as the last step, after nethserver-install.
I don’t know if it will fix the problem.
I’d bet on some custom setup found in strato. You could try to capture vps configuration before running nethserver-install.
Maybe: cat /etc/sysconfig/network-scripts/ifcfg-eth*
Hi,
I did a new installation and the yum update at the end. So in the folder of the network there are only following files:
network-scripts]# ls
ifcfg-lo
ifdown-isdn
ifup-bnep
ifup-ppp
ifcfg-venet0
ifdown-post
ifup-eth
ifup-routes
ifcfg-venet0:0
ifdown-ppp
ifup-ippp
ifup-sit
ifdown
ifdown-routes
ifup-ipv6
ifup-tunnel
ifdown-bnep
ifdown-sit
ifup-isdn
ifup-wireless
ifdown-eth
ifdown-tunnel
ifup-plip
init.ipv6-global
ifdown-ippp
ifup
ifup-plusb
network-functions
ifdown-ipv6
ifup-aliases
ifup-post
network-functions-ipv6
the cat of the venet* shows following:
cat /etc/sysconfig/network-scripts/ifcfg-venet*
DEVICE=venet0
BOOTPROTO=static
ONBOOT=yes
IPADDR=127.0.0.1
NETMASK=255.255.255.255
BROADCAST=0.0.0.0
ARPCHECK="no"
GATEWAYDEV="venet0"
IPV6INIT="yes"
IPV6_DEFAULTDEV="venet0"
DEVICE=venet0:0
ONBOOT=yes
IPADDR=X:X:X:X
NETMASK=255.255.255.255
ARPCHECK=“no”
So i am able to update via the console. But in the web admin panel no network device is shown and the shorewall will not start. Here the log:
Apr 18 20:36:20 Processing /etc/shorewall/params …
Apr 18 20:36:20 Processing /etc/shorewall/shorewall.conf…
Apr 18 20:36:20 Compiling /etc/shorewall/zones…
Apr 18 20:36:20 Compiling /etc/shorewall/interfaces…
Apr 18 20:36:20 Interface “- ppp+ optional” Validated
Apr 18 20:36:20 Determining Hosts in Zones…
Apr 18 20:36:20 fw (firewall)
Apr 18 20:36:20 loc (ipv4)
Apr 18 20:36:20 WARNING: *** loc is an EMPTY ZONE ***
Apr 18 20:36:20 net (ipv4)
Apr 18 20:36:20 WARNING: *** net is an EMPTY ZONE ***
Apr 18 20:36:20 Locating Action Files…
Apr 18 20:36:20 Compiling /etc/shorewall/policy…
Apr 18 20:36:20 Policy for fw to net is ACCEPT using chain fw2net
Apr 18 20:36:20 Policy for fw to loc is ACCEPT using chain fw2loc
Apr 18 20:36:20 Policy for loc to fw is REJECT using chain loc2fw
Apr 18 20:36:20 Policy for net to fw is DROP using chain net2fw
Apr 18 20:36:20 Policy for net to loc is DROP using chain net2loc
Apr 18 20:36:20 Policy for net to fw is DROP using chain net2all
Apr 18 20:36:20 Policy for net to loc is DROP using chain net2all
Apr 18 20:36:20 Policy for fw to loc is REJECT using chain all2all
Apr 18 20:36:20 Policy for fw to net is REJECT using chain all2all
Apr 18 20:36:20 Policy for loc to fw is REJECT using chain all2all
Apr 18 20:36:20 Policy for loc to net is REJECT using chain all2all
Apr 18 20:36:20 Policy for net to fw is REJECT using chain all2all
Apr 18 20:36:20 Policy for net to loc is REJECT using chain all2all
Apr 18 20:36:20 Running /etc/shorewall/initdone…
Apr 18 20:36:20 Compiling TCP Flags filtering…
Apr 18 20:36:20 Compiling Kernel Route Filtering…
Apr 18 20:36:20 Compiling Martian Logging…
Apr 18 20:36:20 Compiling MAC Filtration – Phase 1…
Apr 18 20:36:20 Chain ppp+_iop deleted
Apr 18 20:36:20 Chain ppp+_fop deleted
Apr 18 20:36:20 Compiling /etc/shorewall/rules…
Apr 18 20:36:20 …Expanding Macro /usr/share/shorewall/macro.Ping…
Apr 18 20:36:20 Rule “PARAM - - icmp 8” Compiled
Apr 18 20:36:20 …End Macro /usr/share/shorewall/macro.Ping
Apr 18 20:36:20 Rule “Ping/ACCEPT net fw” Compiled
Apr 18 20:36:20 …Expanding Macro /usr/share/shorewall/macro.Ping…
Apr 18 20:36:20 Rule “PARAM - - icmp 8” Compiled
Apr 18 20:36:20 …End Macro /usr/share/shorewall/macro.Ping
Apr 18 20:36:20 Rule “Ping/ACCEPT loc fw” Compiled
Apr 18 20:36:20 …Expanding Macro /usr/share/shorewall/macro.DNS…
Apr 18 20:36:20 Rule “PARAM - - udp 53” Compiled
Apr 18 20:36:20 Rule “PARAM - - tcp 53” Compiled
Apr 18 20:36:20 …End Macro /usr/share/shorewall/macro.DNS
Apr 18 20:36:20 Rule “DNS/ACCEPT fw net” Compiled
Apr 18 20:36:20 Rule “ACCEPT loc fw udp 123” Compiled
Apr 18 20:36:20 Rule “ACCEPT loc fw tcp 53” Compiled
Apr 18 20:36:20 Rule “ACCEPT loc fw udp 53” Compiled
Apr 18 20:36:20 Rule “ACCEPT loc fw udp 67” Compiled
Apr 18 20:36:20 Rule “ACCEPT loc fw udp 69” Compiled
Apr 18 20:36:20 Rule “ACCEPT loc fw tcp 80” Compiled
Apr 18 20:36:20 Rule “ACCEPT net fw tcp 80” Compiled
Apr 18 20:36:20 Rule “ACCEPT loc fw tcp 443” Compiled
Apr 18 20:36:20 Rule “ACCEPT net fw tcp 443” Compiled
Apr 18 20:36:20 Rule “ACCEPT loc fw tcp 980” Compiled
Apr 18 20:36:20 Rule “ACCEPT net fw tcp 980” Compiled
Apr 18 20:36:20 Rule “ACCEPT loc fw tcp 22” Compiled
Apr 18 20:36:20 Rule “ACCEPT net fw tcp 22” Compiled
Apr 18 20:36:20 Compiling /etc/shorewall/conntrack…
Apr 18 20:36:20 Conntrack rule “CT:helper:amanda:PO - - udp 10080” Compiled
Apr 18 20:36:20 Conntrack rule “CT:helper:amanda:PO - - udp 10080” Compiled
Apr 18 20:36:20 Conntrack rule “CT:helper:ftp:PO - - tcp 21” Compiled
Apr 18 20:36:20 Conntrack rule “CT:helper:ftp:PO - - tcp 21” Compiled
Apr 18 20:36:20 Conntrack rule “CT:helper:RAS:PO - - udp 1719” Compiled
Apr 18 20:36:20 Conntrack rule “CT:helper:RAS:PO - - udp 1719” Compiled
Apr 18 20:36:20 Conntrack rule “CT:helper:Q.931:PO - - tcp 1720” Compiled
Apr 18 20:36:20 Conntrack rule “CT:helper:Q.931:PO - - tcp 1720” Compiled
Apr 18 20:36:20 Conntrack rule “CT:helper:irc:PO - - tcp 6667” Compiled
Apr 18 20:36:20 Conntrack rule “CT:helper:irc:PO - - tcp 6667” Compiled
Apr 18 20:36:20 Conntrack rule “CT:helper:netbios-ns:PO - - udp 137” Compiled
Apr 18 20:36:20 Conntrack rule “CT:helper:netbios-ns:PO - - udp 137” Compiled
Apr 18 20:36:20 Conntrack rule “CT:helper:pptp:PO - - tcp 1723” Compiled
Apr 18 20:36:20 Conntrack rule “CT:helper:pptp:PO - - tcp 1723” Compiled
Apr 18 20:36:20 Conntrack rule “CT:helper:sane:PO - - tcp 6566” Compiled
Apr 18 20:36:20 Conntrack rule “CT:helper:sane:PO - - tcp 6566” Compiled
Apr 18 20:36:20 Conntrack rule “CT:helper:sip:PO - - udp 5060” Compiled
Apr 18 20:36:20 Conntrack rule “CT:helper:sip:PO - - udp 5060” Compiled
Apr 18 20:36:20 Conntrack rule “CT:helper:snmp:PO - - udp 161” Compiled
Apr 18 20:36:20 Conntrack rule “CT:helper:snmp:PO - - udp 161” Compiled
Apr 18 20:36:20 Conntrack rule “CT:helper:tftp:PO - - udp 69” Compiled
Apr 18 20:36:20 Conntrack rule “CT:helper:tftp:PO - - udp 69” Compiled
Apr 18 20:36:20 Compiling MAC Filtration – Phase 2…
Apr 18 20:36:20 Applying Policies…
Apr 18 20:36:20 Policy ACCEPT from fw to loc using chain fw2loc
Apr 18 20:36:20 Policy ACCEPT from fw to net using chain fw2net
Apr 18 20:36:20 Compiling /usr/share/shorewall/action.Reject for chain Reject…
Apr 18 20:36:20 …Expanding Macro /usr/share/shorewall/macro.AllowICMPs…
Apr 18 20:36:20 Rule “PARAM - - icmp fragmentation-needed” Compiled
Apr 18 20:36:20 Rule “PARAM - - icmp time-exceeded” Compiled
Apr 18 20:36:20 …End Macro /usr/share/shorewall/macro.AllowICMPs
Apr 18 20:36:20 Compiling /usr/share/shorewall/action.Broadcast for chain Broadcast…
Apr 18 20:36:20 …Expanding inline action /usr/share/shorewall/action.Invalid…
Apr 18 20:36:20 …End inline action /usr/share/shorewall/action.Invalid
Apr 18 20:36:20 …Expanding Macro /usr/share/shorewall/macro.SMB…
Apr 18 20:36:20 Rule “PARAM - - udp 135,445” Compiled
Apr 18 20:36:20 Rule " PARAM - - udp 137:139" Compiled
Apr 18 20:36:20 Rule “PARAM - - udp 1024: 137” Compiled
Apr 18 20:36:20 Rule “PARAM - - tcp 135,139,445” Compiled
Apr 18 20:36:20 …End Macro /usr/share/shorewall/macro.SMB
Apr 18 20:36:20 …Expanding Macro /usr/share/shorewall/macro.DropUPnP…
Apr 18 20:36:20 Rule “PARAM - - udp 1900” Compiled
Apr 18 20:36:20 …End Macro /usr/share/shorewall/macro.DropUPnP
Apr 18 20:36:20 …Expanding inline action /usr/share/shorewall/action.NotSyn…
Apr 18 20:36:20 Rule “DROP - - ;;+ -p 6 ! --syn” Compiled
Apr 18 20:36:20 …End inline action /usr/share/shorewall/action.NotSyn
Apr 18 20:36:20 …Expanding Macro /usr/share/shorewall/macro.DropDNSrep…
Apr 18 20:36:20 Rule “PARAM - - udp - 53” Compiled
Apr 18 20:36:20 …End Macro /usr/share/shorewall/macro.DropDNSrep
Apr 18 20:36:20 Policy REJECT from loc to fw using chain loc2fw
Apr 18 20:36:20 Policy REJECT from loc to net using chain loc2net
Apr 18 20:36:20 Compiling /usr/share/shorewall/action.Drop for chain Drop…
Apr 18 20:36:20 …Expanding Macro /usr/share/shorewall/macro.AllowICMPs…
Apr 18 20:36:20 Rule “PARAM - - icmp fragmentation-needed” Compiled
Apr 18 20:36:20 Rule “PARAM - - icmp time-exceeded” Compiled
Apr 18 20:36:20 …End Macro /usr/share/shorewall/macro.AllowICMPs
Apr 18 20:36:20 …Expanding inline action /usr/share/shorewall/action.Invalid…
Apr 18 20:36:20 …End inline action /usr/share/shorewall/action.Invalid
Apr 18 20:36:20 …Expanding Macro /usr/share/shorewall/macro.SMB…
Apr 18 20:36:20 Rule “PARAM - - udp 135,445” Compiled
Apr 18 20:36:20 Rule " PARAM - - udp 137:139" Compiled
Apr 18 20:36:20 Rule “PARAM - - udp 1024: 137” Compiled
Apr 18 20:36:20 Rule “PARAM - - tcp 135,139,445” Compiled
Apr 18 20:36:20 …End Macro /usr/share/shorewall/macro.SMB
Apr 18 20:36:20 …Expanding Macro /usr/share/shorewall/macro.DropUPnP…
Apr 18 20:36:20 Rule “PARAM - - udp 1900” Compiled
Apr 18 20:36:20 …End Macro /usr/share/shorewall/macro.DropUPnP
Apr 18 20:36:20 …Expanding inline action /usr/share/shorewall/action.NotSyn…
Apr 18 20:36:20 Rule “DROP - - ;;+ -p 6 ! --syn” Compiled
Apr 18 20:36:20 …End inline action /usr/share/shorewall/action.NotSyn
Apr 18 20:36:20 …Expanding Macro /usr/share/shorewall/macro.DropDNSrep…
Apr 18 20:36:20 Rule “PARAM - - udp - 53” Compiled
Apr 18 20:36:20 …End Macro /usr/share/shorewall/macro.DropDNSrep
Apr 18 20:36:20 Policy DROP from net to fw using chain net2fw
Apr 18 20:36:20 Policy DROP from net to loc using chain net2loc
Apr 18 20:36:20 Generating Rule Matrix…
Apr 18 20:36:20 Handling complex zones…
Apr 18 20:36:20 Entering main matrix-generation loop…
Apr 18 20:36:20 Finishing matrix…
Apr 18 20:36:20 Chain loc2fw deleted
Apr 18 20:36:20 Chain fw2loc deleted
Apr 18 20:36:20 Chain loc2net deleted
Apr 18 20:36:20 Chain fw2net deleted
Apr 18 20:36:20 Chain loc_frwd deleted
Apr 18 20:36:20 Chain ppp+_in deleted
Apr 18 20:36:20 Chain net2loc deleted
Apr 18 20:36:20 Chain Drop deleted
Apr 18 20:36:20 Chain net2fw deleted
Apr 18 20:36:20 Chain net_frwd deleted
Apr 18 20:36:20 Creating iptables-restore input…
Apr 18 20:36:20 Compiling /etc/shorewall/stoppedrules…
Apr 18 20:36:20 Shorewall configuration compiled to /var/lib/shorewall/.start
Apr 18 20:36:20 Starting Shorewall…
Apr 18 20:36:20 Initializing…
Apr 18 20:36:20 Processing /etc/shorewall/init …
Apr 18 20:36:20 Processing /etc/shorewall/tcclear …
Apr 18 20:36:20 Setting up Route Filtering…
Apr 18 20:36:20 Setting up Martian Logging…
Apr 18 20:36:20 Setting up Proxy ARP…
Apr 18 20:36:20 Preparing iptables-restore input…
Apr 18 20:36:20 Running /sbin/iptables-restore …
Apr 18 20:36:20 ERROR: iptables-restore Failed. Input is in /var/lib/shorewall/.iptables-restore-input
Apr 18 20:36:20 Processing /etc/shorewall/stop …
Apr 18 20:36:20 Processing /etc/shorewall/tcclear …
Apr 18 20:36:20 Preparing iptables-restore input…
Apr 18 20:36:20 Running /sbin/iptables-restore…
Apr 18 20:36:20 IPv4 Forwarding Enabled
Apr 18 20:36:20 Processing /etc/shorewall/stopped …
Apr 18 20:36:21 Processing /etc/shorewall/params …
Any idea what could be the problem?
Thanks in advance.
We need the ifcfg* files before NethServer installation.
I think you will find something in ifcfg-venet0:0.
Please, also capture the output of ip ad (clean vps, before nethserver install).
Hi,
please find below the config files and the output from ip ad after a clean set up of the VPS (nethserver is not yet installed):
cat ifcfg*
DEVICE=lo
IPADDR=127.0.0.1
NETMASK=255.0.0.0
NETWORK=127.0.0.0
If you’re having problems with gated making 127.0.0.0/8 a martian,
you can change this to something else (255.255.255.255, for example)
BROADCAST=127.255.255.255
ONBOOT=yes
NAME=loopback
DEVICE=venet0
BOOTPROTO=static
ONBOOT=yes
IPADDR=127.0.0.1
NETMASK=255.255.255.255
BROADCAST=0.0.0.0
ARPCHECK="no"
GATEWAYDEV="venet0"
IPV6INIT="yes"
IPV6_DEFAULTDEV=“venet0”
DEVICE=venet0:0
ONBOOT=yes
IPADDR=1.2.3.4
NETMASK=255.255.255.255
ARPCHECK=“no”
ip ad
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: venet0: <BROADCAST,POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN
link/void
inet 127.0.0.1/32 scope host venet0
inet 1.2.3.4/32 brd 1.2.3.4 scope global venet0:0
Thanks for your help in advance.
Hello,
i tried the following command. But it is not the final solution and i am not shure if it is the right way.?
db networks set venet0 ethernet role red ipaddr XXX …
Any idea how to fix this issue?
Thanks in advance.
What I see is, that the netmask is /32. So there is only 1 IP available, also for broadcast. Does this work? I really don’t know.
The command to change the interface settings is signal-event interface-update after you changed the db values.
Hi,
canceled the order for the VPS and ordered another one from a different company. now the interface is shown and everything looks fine.