Linux Error: 113: No route to host

22852

After completeing 3.1 in the installation guide I jump down to chapter 4, but I can't get the web interface to work.
It doesn't matter how I access the URL, I've tried both http://localhost:8080/htmldb and http://realhostname:8080/htmldb/ with same result, no data at all, the connection is closed directly.
I've checked listener.log and found this:

02-NOV-2005 01:01:02 * http * (ADDRESS=(PROTOCOL=tcp)(HOST=10.8.0.22)(PORT=2556)) * handoff * http * 12518
TNS-12518: TNS:listener could not hand off client connection
TNS-12571: TNS:packet writer failure
TNS-12560: TNS:protocol adapter error
TNS-00530: Protocol adapter error
Linux Error: 113: No route to host
02-NOV-2005 01:01:23 * http * (ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=33183)) * handoff * http * 12518
TNS-12518: TNS:listener could not hand off client connection
TNS-12571: TNS:packet writer failure
TNS-12560: TNS:protocol adapter error
TNS-00530: Protocol adapter error
Linux Error: 113: No route to host
02-NOV-2005 01:02:54 * service_update * XE * 0
02-NOV-2005 01:03:01 * http * (ADDRESS=(PROTOCOL=tcp)(HOST=X.Y.Z.W)(PORT=33509)) * handoff * http * 12518
TNS-12518: TNS:listener could not hand off client connection
TNS-12571: TNS:packet writer failure
TNS-12560: TNS:protocol adapter error
TNS-00530: Protocol adapter error
Linux Error: 113: No route to host

22852

Problem located (as usual after the 3 hours it took me to find the forum and post about it).

Using netstat and lsof I found that XE not only binds to 1521 and 8080, but also to port 33172 and since iptables blocks everything it got "No route to host".
The question is if 33172 is static or just a randomly chosen port number.

tkyte-Oracle

Those will be wild card ports - generated by the system (give me any free port to use for this socket).

22852

Yup, noticed that later when I restarted Oracle.

This is a serious problem since iptables is default on, on all Linuxes, and opening the machine for all ports isn't something I would like to do.
Even if its a machine behind a company firewall, you might want to limit access with iptables

tkyte-Oracle

We could configure shared server - the dispatchers run on fixed ports (if you set it up that way).