Some IP do not answer

pppplus

Verified User
Joined
Dec 19, 2008
Messages
528
Hi
In a VPS, I have a lot of IP.
But I have 5 of them that do not work, and I do not find why.

I try : /sbin/service startips start
But this not solve my problem.

I restart container, I delete IP, then add them again.

And no idea to find a solution.

Thanks for your help.
 
Proxmox 1 -> openvz

I have a lot of IP on this server, and it is very strange, these 5 IPs are installed as the other. In this container, I have 62 IPs - 57 work, 5 do not work.

Thanks for your help.

For example, some IP, maybe it can help you :
178.33.189.200 does not work
178.33.189.201 works
178.33.189.201 does not work
178.33.189.201 does not work
 
What is your subnet assigned for it (full list of subnet with netmask)? How do you split it (full list of subnets with netmask)? Are you sure, that the IPS you are trying to give to your VPS are not reserved for specials needs: broadcast, network?
 
Hi

All my IPs come from block of 4 IPs. I split them in manager of my provider, so none of this IP are reserved, they are like single IP.

After, I install them with
# vzctl set xxx --ipadd xxx.xxx.xxx.xxx --save

Then add them in Directadmin with netmask 255.255.255.255, and give them to reseller, and users.

All IP have settings like this (in /path/to/container/etc/sysconfig/network-scripts):
DEVICE=venet0:13
ONBOOT=yes
IPADDR=IP.AD.DR.ES
NETMASK=255.255.255.255

And in /path/to/container/usr/local/directadmin/data/admin/ips
gateway=
netmask=255.255.255.255
ns=
reseller=resellername
status=owned
value=i176ip134


Many thanks for your help
 
All my IPs come from block of 4 IPs.

Not quite sure, that it's clear for me, if you hesitate to publish it here in public, you might want to send a PM to me.
What I want to see, is a subnet as how you have it from your provider:

subnet/netmask

Additionally make sure, you're not blocking the IPs on your OpenVZ node with iptables.
 
I just test something :

From main server, I ping reverse :
All IP answer

From another server, I ping reverse :
Ip do not answer.


So, IP seems to be well installed, but access from extern ping is forbidden. I find nothing blocking them...

How is it possible to test specific IP in firewall ?
 
If you can not ping the IPs from outside, then they might be not fully routed by your provider. To do a quick test IP, try:

Code:
iptables-save | grep 11.22.33.44

if you see nothing it does not mean, that IP is not blocked. Just try to stop iptables and check if the IPs can be ping`ed.
 
I have this :

178.33.189.202 does not work
Code:
 iptables-save | grep 178.33.189.202
-A FORWARD -d 178.33.189.202/32 -j ACCEPT
-A FORWARD -s 178.33.189.202/32 -j ACCEPT

178.33.189.201 works
Code:
 iptables-save | grep 178.33.189.201
-A FORWARD -d 178.33.189.201/32 -j ACCEPT
-A FORWARD -s 178.33.189.201/32 -j ACCEPT
 
Forwards are OK. I'd still like to see your subnets. I don't see any other possible reason.

These are result from tracing:

Code:
# traceroute 178.33.189.201
...
...
...
 4   80.81.193.209 (80.81.193.209) 6.515ms  * 6.689ms
 5   91.121.131.197 (91.121.131.197) 15.737ms 14.910ms 14.509ms
 6   178.33.100.26 (178.33.100.26) 14.148ms  * 14.397ms
 7   46.105.108.78 (46.105.108.78) 13.660ms 14.327ms 13.879ms
 8   178.33.189.201 (178.33.189.201) 14.101ms 13.900ms 14.639ms

and

Code:
# traceroute 178.33.189.202
...
...
...
 4   *  *  *
 5   178.33.100.242 (178.33.100.242) 14.803ms 16.235ms 15.665ms
 6   94.23.122.237 (94.23.122.237) 14.175ms  *  *
 7   *  *  *
 8   *  *  *
 9   *  *  *
 10   *  *  *
 11   *  *  *

IPs in 5th hop differ. Did you check with your Data Center?
 
Thanks ! You're right !!
Ip are not routed to my server !!

Thanks for your help, I do not think to verify this.
I was too much sure it was ok!
 
Read paragraph six of this discussion of Occam's Razor (ucr.edu) :). The paragraph which begins The most useful statement. UCR.EDU, the site hosting this page, is the domain of a univesity less than 0.25 mile from my office.

My own understanding of Occam's Razor is even simpler: When there are multiple theories for any observation, the simplest is most likely correct.

While I used to know an Endowed Professor of Political Science at the University (he's since passed away) and also two Computer Science students here as visiting scholars from China who've finished their Doctorate degrees and moved away by now, in spite of the impression you might get from my avator (at least as of the date of posting this), I've never known anyone at the University's physics department.

Jeff
 
Yes, sometimes, it is so simple... that we do not think about it.

My problem has been solved 20 mn ago only !! :mad:
Sometimes, OVH is very bad... on specific problems

A new time, many thanks to zEitEr who find clearly the problem.
 
But it is fixed, and that, after all is said and done, good even if not perfect.

I often find the most obvious solution is the one I forget to consider as well.

And I forgot my most important connection to the University; Beginning twenty-one years ago I was a Sr. Analyst at a mortgage company owned and run by a gent named A. Gary Anderson for whom the A. Gary Anderson Graduate School of Management was named. He was an incredible mentor, and was responsible for both introducing to many brilliant people and also for teaching me that a giving nature and spirt would help me in business far beyond it's cost and effort.
 
Back
Top