Mageia forum

by **grenouille95** » Oct 17th, '25, 08:12

Fresh install of Mageia 9 on a laptop... everything is going well except that I can't manage to get access to internet despite the fact that the network since to be ok.
Here are some information:

Code: Select all: [root@localhost nadine]# rfkill ID TYPE DEVICE SOFT HARD 0 wlan ideapad_wlan débloqué débloqué 1 bluetooth ideapad_bluetooth débloqué débloqué 2 bluetooth hci0 débloqué débloqué 3 wlan phy0 débloqué débloqué

Code: Select all: [root@localhost nadine]# iwconfig lo no wireless extensions. enp3s0 no wireless extensions. wlp2s0 IEEE 802.11 ESSID:"Freebox-A0B709" Mode:Managed Frequency:5.22 GHz Access Point: 8C:97:EA:F6:A5:6C Bit Rate=433.3 Mb/s Tx-Power=22 dBm Retry short limit:7 RTS thr:off Fragment thr:off Encryption key:off Power Management:on Link Quality=58/70 Signal level=-52 dBm Rx invalid nwid:0 Rx invalid crypt:0 Rx invalid frag:0 Tx excessive retries:0 Invalid misc:7 Missed beacon:0

with the ethernet connection:

Code: Select all: [root@localhost nadine]# ip -o r default via 192.168.1.254 dev enp3s0 proto dhcp src 192.168.1.186 metric 100 default via 192.168.1.254 dev wlp2s0 proto dhcp src 192.168.1.56 metric 600 192.168.1.0/24 dev enp3s0 proto kernel scope link src 192.168.1.186 metric 100 192.168.1.0/24 dev wlp2s0 proto kernel scope link src 192.168.1.56 metric 600

I thought it may be a problem of conflict between networkmanager and net_applet and followed a tutorial to use networkmanager but it did not change anything.
Any idea?
Thanks

by **doktor5000** » Oct 17th, '25, 19:52

Hi there, looks fine so far. Connected via wireless and wired. Although one problem is that you have two default routes, which in 99% of all cases is a problem.

But you should probably add some more details on what the actual issue is.
Can you please post the output of

Code: Select all: ps -ef | grep -i net cat /etc/resolv.conf ping -c4 8.8.8.8 dig google.com

And do you want to use wireless or wired?

by **grenouille95** » Oct 17th, '25, 20:30

Thanks. Wired connection to post my answers, but no real need. Here are the outputs.

Code: Select all: [root@localhost nadine]# ps -ef | grep -i net root 6 2 0 07:51 ? 00:00:00 [kworker/R-netns] root 32 2 0 07:51 ? 00:00:00 [kworker/R-inet_] root 2699 2042 0 07:54 ? 00:00:00 /usr/libexec/webkit2gtk-4.1/WebKitNetworkProcess 7 14 root 3467 1 0 07:59 ? 00:00:02 /usr/sbin/NetworkManager --no-daemon root 4836 3172 0 20:27 pts/0 00:00:00 grep --color -i net

Code: Select all: [root@localhost nadine]# cat /etc/resolv.conf # Generated by NetworkManager nameserver fd0f:ee:b0::1 nameserver 192.168.1.254

Code: Select all: [root@localhost nadine]# ping -c4 8.8.8.8 PING 8.8.8.8 (8.8.8.8) 56(84) octets de données. 64 octets de 8.8.8.8 : icmp_seq=1 ttl=116 temps=6.24 ms 64 octets de 8.8.8.8 : icmp_seq=2 ttl=116 temps=6.20 ms 64 octets de 8.8.8.8 : icmp_seq=3 ttl=116 temps=6.50 ms 64 octets de 8.8.8.8 : icmp_seq=4 ttl=116 temps=6.25 ms --- statistiques ping 8.8.8.8 --- 4 paquets transmis, 4 reçus, 0% packet loss, time 3004ms rtt min/avg/max/mdev = 6.201/6.296/6.495/0.115 ms

Code: Select all: [root@localhost nadine]# dig google.com ;; communications error to fd0f:ee:b0::1#53: connection refused ;; communications error to fd0f:ee:b0::1#53: connection refused ;; communications error to fd0f:ee:b0::1#53: connection refused ; <<>> DiG 9.18.33 <<>> google.com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 18740 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; QUESTION SECTION: ;google.com. IN A ;; ANSWER SECTION: google.com. 138 IN A 216.58.214.174 ;; Query time: 4 msec ;; SERVER: 192.168.1.254#53(192.168.1.254) (UDP) ;; WHEN: Fri Oct 17 20:30:00 CEST 2025 ;; MSG SIZE rcvd: 55

by **isadora** » Oct 18th, '25, 08:24

Please grenouille95, next time use [CODE]-tags for command-output, thanks ahead.

by **doktor5000** » Oct 19th, '25, 13:33

So those outputs are from a point in time where the wire was still plugged? Then they're of no use for your issue.
Can you please do the following - unplug the wire, do a clean reboot, and then collect the output of the following commands (put them in a text file, and the post them later when the wire is plugged in again).

Code: Select all: nmcli dev status cat /etc/resolv.conf ping -c4 8.8.8.8 dig google.com dig -4 google.com

Related, what's the particular make/model of your router ?

by **grenouille95** » Oct 19th, '25, 22:29

Thank you once again. Here is the file. Don't know about the router (I just know there is the Freebox...). I got a notification that there are available system updates while unplugged.

by **doktor5000** » Oct 21st, '25, 09:46

Well, the Freebox refuses DNS queries, and ping does also not go through, so maybe a routing issue inside the Freebox. You may need to restart the Freebox.
Might also be an idea to check with Freebox support: https://assistance.free.fr/

by **grenouille95** » Oct 21st, '25, 11:30

Mmmmh, I will restart. But several other laptops are connected to internet (Wifi connection) via the same box without any problem.

by **grenouille95** » Oct 21st, '25, 20:31

Here are the results with another computer connected to the same Freebox without wire. Is it possible that the problem is due to Networkmanager or to a conflict between the later and net applet? I tried to uninstall networkmanager from the computer with the wifi problem, but it doesn't seem to be ok (see the previous result file).

by **grenouille95** » Oct 21st, '25, 21:21

I uninstalled Networkmanager and switched back to net applet.
If having two routes is a problem as stated above, how do I ensure that only one route is configured (automatically)?

by **doktor5000** » Oct 22nd, '25, 09:35

So your last posts are slightly confusing. I'll try to do it one by one.
- net_applet cannot be a problem because it's not running
- as net_applet is not running there cannot be a conflict with NetworkManager
- for the other box where it works, you're not using NetworkManager, only net_applet - out of curiosity, why did you start using NetworkManager in the first place and not replicate the other working setup
(another difference is that you only have an IPv4 nameserver, but with NetworkManager it seems you did not switch the connection globally to IPv6: ignore and get an IPv6 nameserver as your primary one)
- you uninstalled Networkmanager and switched back to net applet - but what is the result, does it work now or ... ?

by **grenouille95** » Oct 22nd, '25, 09:58

I think net_applet was used after installing mageia. I switched to NM because it was not possible to get a working connection and I thought NM may make it work.
It still does not work with net_applet after uninstalling NM.

by **doktor5000** » Oct 22nd, '25, 20:02

Well if you want to fix it, some more details would be required

Code: Select all: ip -o a ip -o r export LC_ALL=C cat /etc/resolv.conf ping -c4 8.8.8.8 dig google.com dig -4 google.com

by **grenouille95** » Oct 22nd, '25, 20:22

Here you go.

Code: Select all: [nadine@localhost ~]$ ip -o a 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever 1: lo inet6 ::1/128 scope host noprefixroute \ valid_lft forever preferred_lft forever 3: wlp2s0 inet 192.168.1.56/24 brd 192.168.1.255 scope global wlp2s0\ valid_lft forever preferred_lft forever 3: wlp2s0 inet6 2a01:e0a:8c7:20b0:36de:1aff:fe87:f3c5/64 scope global dynamic mngtmpaddr proto kernel_ra \ valid_lft 86303sec preferred_lft 86303sec 3: wlp2s0 inet6 fe80::36de:1aff:fe87:f3c5/64 scope link proto kernel_ll \ valid_lft forever preferred_lft [nadine@localhost ~]$ ip -o r default via 192.168.1.254 dev wlp2s0 169.254.0.0/16 dev wlp2s0 scope link metric 1003 192.168.1.0/24 dev wlp2s0 proto kernel scope link src 192.168.1.56 [nadine@localhost ~]$ export LC_ALL=c bash: avertissement :setlocale : LC_ALL : impossible de changer le paramètre de langue (c) [nadine@localhost ~]$ cat /etc/resolv.conf nameserver 192.168.1.254 [nadine@localhost ~]$ ping -c4 8.8.8.8 PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data. From 192.168.1.56 icmp_seq=1 Destination Host Unreachable ping: sendmsg: Operation not permitted From 192.168.1.56 icmp_seq=2 Destination Host Unreachable ping: sendmsg: Operation not permitted From 192.168.1.56 icmp_seq=3 Destination Host Unreachable ping: sendmsg: Operation not permitted From 192.168.1.56 icmp_seq=4 Destination Host Unreachable ping: sendmsg: Operation not permitted --- 8.8.8.8 ping statistics --- 4 packets transmitted, 0 received, +4 errors, 100% packet loss, time 3027ms [nadine@localhost ~]$ dig -4 google.com ;; communications error to 192.168.1.254#53: connection refused ;; communications error to 192.168.1.254#53: connection refused ;; communications error to 192.168.1.254#53: connection refused ; <<>> DiG 9.18.33 <<>> -4 google.com ;; global options: +cmd ;; no servers could be reached [nadine@localhost ~]$ dig google.com ;; communications error to 192.168.1.254#53: connection refused ;; communications error to 192.168.1.254#53: connection refused ;; communications error to 192.168.1.254#53: connection refused ; <<>> DiG 9.18.33 <<>> google.com ;; global options: +cmd ;; no servers could be reached

Edited by Germ. Please use code tags!

by **doktor5000** » Oct 23rd, '25, 19:45

So for the IP and routing part that looks fine. Can you also post the output from

Code: Select all: iwconfig

by **grenouille95** » Oct 23rd, '25, 20:58

Code: Select all: [nadine@localhost ~]$ iwconfig lo no wireless extensions. enp3s0 no wireless extensions. wlp2s0 IEEE 802.11 ESSID:"Freebox-A0B709" Mode:Managed Frequency:2.412 GHz Access Point: 8C:97:EA:F6:A5:68 Bit Rate=72.2 Mb/s Tx-Power=22 dBm Retry short limit:7 RTS thr:off Fragment thr:off Power Management:on Link Quality=70/70 Signal level=-40 dBm Rx invalid nwid:0 Rx invalid crypt:0 Rx invalid frag:0 Tx excessive retries:0 Invalid misc:0 Missed beacon:0

by **doktor5000** » Oct 23rd, '25, 22:24

Well from the perspective of the Mageia client everything is fine.
You are connected to your Freebox wifi AP with full link quality, you have an IP and default route. But your Freebox does not respond to DNS queries and does not forward ICMP traffic outside.

Do you have an additional firewall active? Please post the output as root of

Code: Select all: iptables -L -v -n

by **grenouille95** » Oct 24th, '25, 00:52

Code: Select all: [root@localhost nadine]# iptables -L -n -v Chain INPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 2184 222K Ifw 0 -- * * 0.0.0.0/0 0.0.0.0/0 0 0 net-fw 0 -- enp3s0 * 0.0.0.0/0 0.0.0.0/0 2184 222K ACCEPT 0 -- lo * 0.0.0.0/0 0.0.0.0/0 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type BROADCAST 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type ANYCAST 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type MULTICAST 0 0 LOG 0 -- * * 0.0.0.0/0 0.0.0.0/0 limit: up to 1/sec burst 10 mode srcip LOG flags 0 level 6 prefix "INPUT REJECT " 0 0 reject 0 -- * * 0.0.0.0/0 0.0.0.0/0 [goto] Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type BROADCAST 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type ANYCAST 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type MULTICAST 0 0 LOG 0 -- * * 0.0.0.0/0 0.0.0.0/0 limit: up to 1/sec burst 10 mode srcip LOG flags 0 level 6 prefix "FORWARD REJECT " 0 0 reject 0 -- * * 0.0.0.0/0 0.0.0.0/0 [goto] Chain OUTPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 fw-net 0 -- * enp3s0 0.0.0.0/0 0.0.0.0/0 2184 222K ACCEPT 0 -- * lo 0.0.0.0/0 0.0.0.0/0 4 9164 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type BROADCAST 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type ANYCAST 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type MULTICAST 297 21581 LOG 0 -- * * 0.0.0.0/0 0.0.0.0/0 limit: up to 1/sec burst 10 mode srcip LOG flags 0 level 6 prefix "OUTPUT REJECT " 2184 161K reject 0 -- * * 0.0.0.0/0 0.0.0.0/0 [goto] Chain Ifw (1 references) pkts bytes target prot opt in out source destination 0 0 RETURN 0 -- * * 0.0.0.0/0 0.0.0.0/0 match-set ifw_wl src 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 match-set ifw_bl src 0 0 IFWLOG 0 -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID,NEWpsd weight-threshold: 10 delay-threshold: 10000 lo-ports-weight: 2 hi-ports-weight: 1 IFWLOG prefix 'SCAN' Chain dynamic (1 references) pkts bytes target prot opt in out source destination Chain fw-net (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT 0 -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED 0 0 ACCEPT 0 -- * * 0.0.0.0/0 0.0.0.0/0 Chain logdrop (0 references) pkts bytes target prot opt in out source destination 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 Chain logflags (7 references) pkts bytes target prot opt in out source destination 0 0 LOG 0 -- * * 0.0.0.0/0 0.0.0.0/0 limit: up to 1/sec burst 10 mode srcip LOG flags 4 level 6 prefix "logflags DROP " 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 Chain logreject (0 references) pkts bytes target prot opt in out source destination 0 0 reject 0 -- * * 0.0.0.0/0 0.0.0.0/0 Chain net-fw (1 references) pkts bytes target prot opt in out source destination 0 0 dynamic 0 -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID,NEW,UNTRACKED 0 0 tcpflags 6 -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 0 -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type BROADCAST 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type ANYCAST 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type MULTICAST 0 0 LOG 0 -- * * 0.0.0.0/0 0.0.0.0/0 limit: up to 1/sec burst 10 mode srcip LOG flags 0 level 6 prefix "net-fw DROP " 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 Chain reject (4 references) pkts bytes target prot opt in out source destination 0 0 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match src-type BROADCAST 0 0 DROP 0 -- * * 224.0.0.0/4 0.0.0.0/0 0 0 DROP 2 -- * * 0.0.0.0/0 0.0.0.0/0 0 0 REJECT 6 -- * * 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset 2184 161K REJECT 17 -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 0 0 REJECT 1 -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-unreachable 0 0 REJECT 0 -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited Chain sha-lh-1e7b60d720e42d3796ef (0 references) pkts bytes target prot opt in out source destination Chain sha-rh-24ead224bbe451e7b336 (0 references) pkts bytes target prot opt in out source destination Chain shorewall (0 references) pkts bytes target prot opt in out source destination 0 0 0 -- * * 0.0.0.0/0 0.0.0.0/0 recent: SET name: %CURRENTTIME side: source mask: 255.255.255.255 Chain tcpflags (1 references) pkts bytes target prot opt in out source destination 0 0 logflags 6 -- * * 0.0.0.0/0 0.0.0.0/0 [goto] tcp flags:0x3F/0x29 0 0 logflags 6 -- * * 0.0.0.0/0 0.0.0.0/0 [goto] tcp flags:0x3F/0x00 0 0 logflags 6 -- * * 0.0.0.0/0 0.0.0.0/0 [goto] tcp flags:0x06/0x06 0 0 logflags 6 -- * * 0.0.0.0/0 0.0.0.0/0 [goto] tcp flags:0x05/0x05 0 0 logflags 6 -- * * 0.0.0.0/0 0.0.0.0/0 [goto] tcp flags:0x03/0x03 0 0 logflags 6 -- * * 0.0.0.0/0 0.0.0.0/0 [goto] tcp flags:0x19/0x09 0 0 logflags 6 -- * * 0.0.0.0/0 0.0.0.0/0 [goto] tcp spt:0 flags:0x17/0x02

by **doktor5000** » Oct 24th, '25, 17:07

So the personal firewall is still active. Can you try to disable it temporarily and then check again if internet works? See https://doc.mageia.org/mcc/9/en/content ... akfirewall (and at the final step check ALL available interfaces)

Please also post

Code: Select all: cat /etc/shorewall/interfaces

by **grenouille95** » Oct 24th, '25, 20:14

I chose "everything (no firewall)" and the connection works perfectly (no wire and I am posting this reply.

Code: Select all: [root@localhost nadine]# cat /etc/shorewall/interfaces # # Shorewall -- /etc/shorewall/interfaces # # For information about entries in this file, type "man shorewall-interfaces" # # The manpage is also online at # https://shorewall.org/manpages/shorewall-interfaces.html # ############################################################################### #ZONE INTERFACE OPTIONS net enp3s0 detect net wlp2s0 detect

by **grenouille95** » Oct 24th, '25, 20:23

I then selected a few options. It still works. It still works after reboot. Sounds like a solved problem, doesn't it?

by **doktor5000** » Oct 24th, '25, 20:53

Well if it works for you, sure.
Although you may want to post a screenshot what you selected in the firewall and in the summary screen.

by **grenouille95** » Oct 24th, '25, 22:04

A big thank you Herr Doktor. Here is the last choice I made, I don't know if it is a good selection.

by **doktor5000** » Oct 25th, '25, 17:14

Looks fine.

Mageia forum

Network ok but no internet

Network ok but no internet

Re: Network ok but no internet

Re: Network ok but no internet

Re: Network ok but no internet

Re: Network ok but no internet

Re: Network ok but no internet

Re: Network ok but no internet

Re: Network ok but no internet

Re: Network ok but no internet

Re: Network ok but no internet

Re: Network ok but no internet

Re: Network ok but no internet

Re: Network ok but no internet

Re: Network ok but no internet

Re: Network ok but no internet

Re: Network ok but no internet

Re: Network ok but no internet

Re: Network ok but no internet

Re: Network ok but no internet

Re: Network ok but no internet

Re: Network ok but no internet

Re: Network ok but no internet

Re: Network ok but no internet

Re: Network ok but no internet

Who is online