Unable to get access to internet from redhat 9 server

[crveni]

I have configured a redhat 9 server & would like to run the redhat up2date program. When I do the follwing appears in the error log


[Tue Dec 16 12:01:36 2003] up2date A protocol error occurred: Proxy Error ( The
ISA Server denies the specified Uniform Resource Locator (URL). ) , attempt #5,
[Tue Dec 16 12:13:33 2003] up2date A protocol error occurred: Proxy Error ( The
ISA Server denies the specified Uniform Resource Locator (URL). ) , attempt #1,
[Tue Dec 16 12:13:38 2003] up2date A protocol error occurred: Proxy Error ( The
ISA Server denies the specified Uniform Resource Locator (URL). ) , attempt #2,
[Tue Dec 16 12:13:43 2003] up2date A protocol error occurred: Proxy Error ( The
ISA Server denies the specified Uniform Resource Locator (URL). ) , attempt #3,
[Tue Dec 16 12:13:48 2003] up2date A protocol error occurred: Proxy Error ( The
ISA Server denies the specified Uniform Resource Locator (URL). ) , attempt #4,
[Tue Dec 16 12:13:53 2003] up2date A protocol error occurred: Proxy Error ( The
ISA Server denies the specified Uniform Resource Locator (URL). ) , attempt #5,

The proxy server has been configured to allow all ip traffic to the server. The gateway is configured correctly. The firewall iptables has been turned off.

This problem seems to be a general internet access as a traceroute to

http://www.bbc.co.uk

comes back with unknown host.

Any ideas?

 

[thedaver]

"The Proxy Server" is on which box?
"The gateway" is on which box?
"The firewall iptables has been turned off" on which box?
What are the internal IPs?
What is the result of a ping to

http://www.cisco.com?

What is the result of a 'dig

http://www.cisco.com'?

Give us something to work with please!

Surfinbox.com Business Internet Services - National Dialup, DSL, T-1 and more.

http://www.surfinbox.com/business/

 

[crveni]

The proxy server is on a win2000 running MS ISA proxy server box.(172.17.1.6)

The gateway is a cisco hardware firewall.(177.17.254.254)

The firewall iptables have been turned of the redhat9 server

Ip details are of redhat server

ifconfig -a
eth0 Link encap:Ethernet HWaddr 00:50:BA:07:7E:74
inet addr:172.17.1.27 Bcast:172.17.255.255 Mask:255.255.0.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:30203003 errors:0 dropped:0 overruns:0 frame:0
TX packets:264709 errors:5 dropped:0 overruns:0 carrier:5
collisions:119464 txqueuelen:100
RX bytes:2420085767 (2307.9 Mb) TX bytes:21598445 (20.5 Mb)
Interrupt:10 Base address:0xc400


The results of the dig to

http://www.cisco.com

dig

http://www.cisco.com

; <<>> DiG 9.2.1 <<>>

http://www.cisco.com

;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9007
;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;

http://www.cisco.com.

IN A

;; AUTHORITY SECTION:
. 3600 IN SOA nikmaster.nikken.co.uk. admin.nikken.co.uk. 34 900 600 86400 3600

;; Query time: 3 msec
;; SERVER: 172.17.1.4#53(172.17.1.4)
;; WHEN: Tue Dec 16 14:27:14 2003
;; MSG SIZE rcvd: 94

The ping

http://www.cisco.com

ping

http://www.cisco.com

ping: unknown host

http://www.cisco.com

Apologies for the lack of initial detail

 

[thedaver]

what is the output of 'route -n' on the rh9 box?

Surfinbox.com Business Internet Services - National Dialup, DSL, T-1 and more.

http://www.surfinbox.com/business/

 

[crveni]

The output is

route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0
172.17.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0
127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo
0.0.0.0 172.17.254.254 0.0.0.0 UG 0 0 0 eth0

There is no mention of the ip address in the routing.

 

[thedaver]

You have a typo or a bad routing command.

You wrote &quot;The gateway is a cisco hardware firewall. (177.17.254.254)&quot;

Route -n said &quot;0.0.0.0 172.17.254.254 0.0.0.0 UG 0 0 0 eth0&quot;

Either you typo'd the gateway description or misconfigged the default GW for the route. Please check.


Surfinbox.com Business Internet Services - National Dialup, DSL, T-1 and more.

http://www.surfinbox.com/business/

 

[crveni]

That was a typo from myself is should be 172.17.254.254

The default gateway in /etc/sysconfig/network is

more /etc/sysconfig/network
NETWORKING=yes
HOSTNAME=nikstar
GATEWAY=172.17.254.254
[root@nikstar root]#

Route -n said &quot;0.0.0.0 172.17.254.254 0.0.0.0 UG 0 0 0 eth0&quot;

should allow traffic to go through as it is the default gateway command option. I noticed that the subnet was not defined in the above line.

 

[crveni]

this is the current listing

[root@nikstar root]# route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0
172.17.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0
127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo
0.0.0.0 172.17.254.254 0.0.0.0 UG 0 0 0 eth0

 

[crveni]

I have got it partly working I altered the nameserver to point to the proxy server. I just now need to allow access through the firewall.

Thanks