On 8 Apr 2007, in the Usenet newsgroup comp.os.linux.networking, in article
<(E-Mail Removed) .com>,
(E-Mail Removed)
wrote:
>my apologies but I also posted this on alt.os.linux before
>realizing this was probably a better place...
Perhaps - even though alt.os.linux sees about a third more traffic (and
substantially more trolling).
>I can login to the router at http://10.1.1.1 and see my linux box as a
>connected DHCP client through firefox and I can even successfully ping
>addresses like www.google.com.
OK - sounds as if networking is alive
>However, when I try to navigate firefox to any web address, i get no
>action. I just sits there for ages before eventually timing out.
It really helps to look under the hood, and not just be looking at the
pretty pictures. 'tcpdump' or 'wireshark' (the former 'ethereal') may
show the problem.
>Here is the output from "sudo iwconfig wlan0"
>wlan0 IEEE 802.11g ESSID:"Jane_Is_Great"
I'm sure that Jane appreciates that sentiment, and am glad you've
changed the default settings - hopefully you are using a secure
authentication scheme (WEP can be cracked in seconds - literally, so
WPA-PSK is highly desirable).
> Mode:Managed Frequency:2.437 GHz Access Point: 00:11:95:95:FA:8C
OK
> Bit Rate:54 Mb/s Sensitivity=-200 dBm
The sensitivity number is totally bogus
> Encryption key:4321-0812-22 Security mode:restricted
Now go change the encryption key to something a hell of a lot more
robust. Because you don't have to remember the key, you could use
something like
[compton ~]$ head -2 /dev/random | mimencode
ETx/fXyDXuhL1IPMKomxiVl3WEwGrNs97hgBQnBFov0h/ww4eyJgMPvsCh86hUNexOPn3XmV
cvw71zezY/CU/D6AJGOd5LYDuy2YqNd9Rf6eCg==
[compton ~]$
pick twenty or more character out of something like that.
> Link Quality:100/100 Signal level:-71 dBm Noise level:-256 dBm
> Rx invalid nwid:0 Rx invalid crypt:0 Rx invalid frag:0
> Tx excessive retries:0 Invalid misc:0 Missed beacon:0
Noise level is also bogus - signal level not very good if real
>wlan0 Link encap:Ethernet HWaddr 00:0F:B5:85:A0:61
> inet addr:10.1.1.2 Bcast:10.255.255.255 Mask:255.0.0.0
> inet6 addr: fe80::20f:b5ff:fe85:a061/64 Scope:Link
Do you know that you need IPv6? Do you know that your upstream can
handle this and any IPv6 name queries correctly? Oz only has about 26
IPv6 blocks (compared to 5519 IPv4 blocks), and this _frequently_
causes grief when the name server doesn't respond to AAAA querues
correctly.
> UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
If you are on a PPPoE connection (only), you may want to try dropping
that MTU to 1492 and checking that any firewall on the DLink router is
not blocking ICMP Type 4 Code 4 (Fragmentation needed, but don't
fragment bit set) - a very well documented problem.
>Any ideas why everything except actually using a browser to see the
>internet seems to be working??
Networking appears alive, as does some elements of name resolution, and
ICMP pings. My next step would be to fire up a packet sniffer to see
if IPv6 is causing grief, then using a tool OTHER THAN A BROWSER works.
For example, try to use the command line version of ftp to connect to
an FTP server (Oz... ok, try ftp.planetmirror.com 203.16.234.85 or
203.16.234.86 - look in /pub/ibiblio/ which is a mirror of the sunsite
archive). Browsers - especially the "let me help you" kind like
firefox - have their own setups because they obviously know more about
networking than the kernel, and that often trips users. Badly.
Old guy