Why would this happen?

[Woody1&2]

Why would I keep getting the following error with firefox?

ERROR
The requested URL could not be retrieved

While trying to retrieve the URL: http://fishandgame.idaho.gov/

The following error was encountered:

* Read Error

The system returned:

(104) Connection reset by peer

An error condition occurred while reading data from the network. Please retry your request.

Your cache administrator is webmaster.
Generated Wed, 10 Oct 2007 20:38:48 GMT by smoothwall (squid/2.6.STABLE13)

I am getting this from a fairly new install on Ubuntu, using Firefox. I try to visit the specific web site from my old Cent box, and it works fine. I also can access it from the winblows box using firefox.

[Jackal]

Why would I keep getting the following error with firefox?



I am getting this from a fairly new install on Ubuntu, using Firefox. I try to visit the specific web site from my old Cent box, and it works fine. I also can access it from the winblows box using firefox.

Well, it's coming from your proxy server, so networking is working from your IP to the proxy server, are you only getting it from that box? Can you ping the web url from the Ubuntu box?

If not it's definately the proxy server, clear your browser cache for grins too.

If the Ubuntu box is mobile, plug it in somewhere else on the network and retry, if using dhcp for IP, get a new IP address and retry, or try static with the IP currently used by the Cent box (unplug the Cent box from the network before you fire up the Ubuntu with the static IP - otherwise that proxy server is likely to "flip out on ya".

[Woody1&2]

Okay, I have a Smoothwall firewall between me and my internet. Precisely, here is the layout:
cablemodem> VoIP box for phone> Smoothwall> unmanaged switch > computers

I have tried removing all, and putting the Ubuntu box on the net directly, but I still get the same problem. It is like they are blocking me specifically. That doesn't make sense though, since a winblows box on my network gets the site fine. I never had a problem before I installed Ubuntu, getting to the site. I tried turning the proxy off as well.... I am ready to pull my hair out.

[Ned Slider]

This is a strange one

I tried pinging them, but they don't respond to pings so that doesn't help much (btw, website works fine from my CentOS box)

$ ping fishandgame.idaho.gov
PING fishandgame.idaho.gov (164.165.66.83) 56(84) bytes of data.

--- fishandgame.idaho.gov ping statistics ---
3 packets transmitted, 0 received, 100% packet loss, time 1998ms

$ nslookup fishandgame.idaho.gov

Non-authoritative answer:
Name:   fishandgame.idaho.gov
Address: 164.165.66.83

But an nmap probe of port 80 (with no pings) shows connectivity:

# nmap -sS -p 80 -P0 fishandgame.idaho.gov

Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2007-10-12 11:24 BST
Interesting ports on h66-83.state.id.us (164.165.66.83):
PORT   STATE SERVICE
80/tcp open  http

Nmap finished: 1 IP address (1 host up) scanned in 0.525 seconds

Don't really know what to suggest next. Maybe you can capture packets for a failed connection attempt in Wireshark and we can take a look to see if we can figure out where it's all going wrong from the packet capture.

[Woody1&2]

I agree, strange one. I might have to go back to Cent if I don't figure this one out! I will give the packet capture a try tonight.....

[Ned Slider]

What about a Ubuntu LiveCD - same problem or does it work from that?

And I assume all other websites are working fine, just this one site??

[Woody1&2]

I am typing this from a Feisty live CD. The Fish and Game web site is the only one I have come across that I remember that won't load. On the live CD I still get the same error..... I have cleared the cache, and also turned off the proxy server. No luck.... I am going to restart with the HD install, and capture packets next.... I have to get the kids something to eat first..... Stand by for results.....

[Jackal]

ok can you get to the IP address from your Ubuntu install http://164.165.66.83 , also can you telnet 164.165.66.83 80 ?

also try tracert to that IP, see what hop it's dying at.

I get replies up until 66.192.249.194 then it dies, but I can get to the website, so the must have ICMP echo's turned off at that IP.

[Woody1&2]

Figured out it wasn't installed by default... I am installing Wireshark at the moment....

[Woody1&2]

Okay... I still haven't figured it out, but it's no big deal for now. It's just an annoyance.... Kind of like when you were a kid, and your kid brother was always following you around.... I am going to try a Knoppix CD just for grins. I know it works fine with CentOS....

[Jackal]

using the OSI model or better still the TCP/IP model, the O/S shouldn't be a factor at all. I would almost suggest a vmware install of windows xp.

Clear the ARP cache on your switch, and your proxy server.

I mean your getting on the internet, so one site blocked to one machine has to be a MAC address conflict somewhere, your switch cares not what O/S is running on that box, nor does your proxy server, all they care about is the NIC's MAC trying to get to a specific URL,

Does Linux have an equivilant command to ipconfig /flushdns ? I don't know, you can just do arp <enter> to see what's in the cache.

Can you put a different NIC in the box?

[Jackal]

well, actually let me eat crow, I can't get to it from my Ubuntu box, but the Cent box plugged into the same Cisco router/switch hits it fine.

Ubuntu FF 2.0.0.6 (Fiesty Server)
CentOS FF 1.5.0.12

Maybe it's the FF version ? Wierd.

[Ned Slider]

well, actually let me eat crow, I can't get to it from my Ubuntu box, but the Cent box plugged into the same Cisco router/switch hits it fine.

Ubuntu FF 2.0.0.6 (Fiesty Server)
CentOS FF 1.5.0.12

Maybe it's the FF version ? Wierd.

It's not the Firefox version (unless it's just something weird/specific with v2.0.0.6) as I hit it fine with FF 2.0.0.7. My SeaMonkey and konqueror both have no trouble either.

But at least we now know it's not something weird with Woody's setup

[Jackal]

Yeah, I know there is a setting in KDE control center internet browser, where you can turn off browser ID, on my Cent box it's off, I don't know where to do it on the Ubuntu box

Edit:

Well, that's apparently NOT it anyway, just turned it ON on the CentBox and it still hits it fine, what a whacky deal!

[Ned Slider]

^^ No, it's not a browser ID (User Agent) issue as I can hit the page fine using wget passing pretty much any user-agent.