Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

My EC2 instance is blocking all outbound connections.

wget http://www.google.com  ==> Hangs
ping google.com ==>hangs
ssh user@anyserver ==>hangs

I ran : sudo iptables -F to eliminate all rules to no avail

AWS Management console shows Security Group for that instance has Inbound rule allowing ssh and port 80. Can't find anything about Outbound rules there.

Rebooted instance, no change.

If anyone knows how to diagnose or fix, please help.

Adding info:

[ec2-user@ip-10-112-62-73 ~]$ ifconfig
eth0      Link encap:Ethernet  HWaddr 12:31:3D:06:31:BB  
          inet addr:10.112.62.73  Bcast:10.112.63.255  Mask:255.255.254.0
          inet6 addr: fe80::1031:3dff:fe06:31bb/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:1933 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1764 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:164075 (160.2 KiB)  TX bytes:343256 (335.2 KiB)
          Interrupt:9 

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:8 errors:0 dropped:0 overruns:0 frame:0
          TX packets:8 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:672 (672.0 b)  TX bytes:672 (672.0 b)


[ec2-user@ip-10-112-62-73 ~]$ ip route show
10.112.62.0/23 dev eth0  proto kernel  scope link  src 10.112.62.73 
default via 10.112.62.1 dev eth0 
share|improve this question
    
What if you ping 8.8.8.8? Where are your DNS servers? –  SmallClanger Apr 5 '12 at 16:42
    
ping 8.8.8.8 ==> Hangs –  Fraggle Apr 5 '12 at 16:45
    
Public DNS (from AWS Console): ec2-174-129-153-180.compute-1.amazonaws.com –  Fraggle Apr 5 '12 at 16:46
    
Private DNS: ip-10-112-62-73.ec2.internal –  Fraggle Apr 5 '12 at 16:46
    
log entries for your NIC? iptables -L? –  Bart Silverstrim Apr 5 '12 at 16:48

1 Answer 1

I just resolved this issue on my EC2 instance. I had to update the security group configuration, adding:

  1. An Outbound rule for all HTTP TCP traffic on port 80, from destination 0.0.0.0/0
  2. An Outbound rule for all HTTPS TCP traffic on port 443, from destination 0.0.0.0/0

I probably removed these accidentally while troubleshooting a different problem.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.