Iptables blocking apt-get

Discussion in 'Server Operation' started by badgerbox76, Oct 12, 2008.

  1. badgerbox76

    badgerbox76 Member

    How can I fix this? My iptables polices is blocking apt-get.

    Code:
    apt-get install chkrootkit
    Reading package lists... Done
    Building dependency tree... Done
    The following NEW packages will be installed:
      chkrootkit
    0 upgraded, 1 newly installed, 0 to remove and 50 not upgraded.
    Need to get 247kB of archives.
    After unpacking 705kB of additional disk space will be used.
    Err http://us.archive.ubuntu.com dapper/main chkrootkit 0.46a-2
      Temporary failure resolving 'us.archive.ubuntu.com'
    Failed to fetch http://us.archive.ubuntu.com/ubuntu/pool/main/c/chkrootkit/chkrootkit_0.46a-2_i386.deb  Temporary failure resolving 'us.archive.ubuntu.com'
    E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing?
    
    Code:
    iptables -L
    Chain INPUT (policy ACCEPT)
    target     prot opt source               destination
    ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:ssh
    ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:www
    RETURN     tcp  --  anywhere             anywhere            tcp flags:FIN,SYN,RST,ACK/SYN limit: avg 1/sec burst 3
    syn_flood  tcp  --  anywhere             anywhere            tcp flags:FIN,SYN,RST,ACK/SYN
    ACCEPT     icmp --  anywhere             anywhere            limit: avg 1/sec burst 1
    LOG        icmp --  anywhere             anywhere            limit: avg 1/sec burst 1 LOG level warning prefix `PING-DROP:'
    DROP       icmp --  anywhere             anywhere
    ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:www
    DROP       all  --  anywhere             anywhere
    
    Chain FORWARD (policy ACCEPT)
    target     prot opt source               destination
    
    Chain OUTPUT (policy ACCEPT)
    target     prot opt source               destination
    ACCEPT     icmp --  anywhere             anywhere
    
    Chain syn_flood (1 references)
    target     prot opt source               destination
    RETURN     all  --  anywhere             anywhere            limit: avg 1/sec burst 3
    DROP       all  --  anywhere             anywhere
    
    
     
  2. chipsafts

    chipsafts New Member

    Don't see why you think it is an IPTables problem. Seems to me to either be a problem at the other end or a DNS problem.
     
  3. martinfst

    martinfst Member Moderator

    Try to ping the servers:
    Code:
    ping us.archive.ubuntu.com
    If you get a response, it's not iptables related. The error seem to indicate a DNS kind of error.
     

Share This Page