looks like you cant route out to the internet. can you ping 8.8.8.8 directly from the ssvm?
On Tue, Apr 30, 2013 at 3:09 PM, Carlos Reategui <create...@gmail.com>wrote: > The SSVM in my rebuilt setup does not appear to be able to connect to the > DNS servers. > > root@s-1-VM:~# /usr/local/cloud/systemvm/ssvm-check.sh > ================================================ > First DNS server is 172.30.20.176 > PING 172.30.20.176 (172.30.20.176): 56 data bytes > 64 bytes from 172.30.20.176: icmp_seq=0 ttl=127 time=0.714 ms > 64 bytes from 172.30.20.176: icmp_seq=1 ttl=127 time=0.681 ms > --- 172.30.20.176 ping statistics --- > 2 packets transmitted, 2 packets received, 0% packet loss > round-trip min/avg/max/stddev = 0.681/0.698/0.714/0.000 ms > Good: Can ping DNS server > ================================================ > ERROR: DNS not resolving download.cloud.com > resolv.conf follows > nameserver 172.30.20.176 > nameserver 172.30.20.175 > nameserver 172.30.20.176 > nameserver 172.30.20.175 > > root@s-1-VM:~# nslookup cloud.com > ;; connection timed out; no servers could be reached > > root@s-1-VM:~# nslookup > > server 8.8.8.8 > Default server: 8.8.8.8 > Address: 8.8.8.8#53 > > download.cloud.com > ;; connection timed out; no servers could be reached > > > > root@s-1-VM:~# iptables -L -n > Chain INPUT (policy DROP) > target prot opt source destination > ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp > dpt:443 > ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp > dpt:80 > ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp > dpt:3922 > ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state > RELATED,ESTABLISHED > ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state > RELATED,ESTABLISHED > ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state > RELATED,ESTABLISHED > ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state > RELATED,ESTABLISHED > ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 > DROP icmp -- 0.0.0.0/0 0.0.0.0/0 icmp type 13 > ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 > ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp > dpt:3922 > > Chain FORWARD (policy DROP) > target prot opt source destination > > Chain OUTPUT (policy ACCEPT) > target prot opt source destination > REJECT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp > dpt:80 reject-with icmp-port-unreachable > REJECT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp > dpt:443 reject-with icmp-port-unreachable > > Chain HTTP (0 references) > target prot opt source destination > > > Where should I look next? > > thanks > Carlos >
