Error map

Port forwarding not working (CGNAT / double NAT) Networking: Port forwarding configured but the port stays closed — carrier-grade NAT (CGNAT) or double NAT

Networking · layer 2, Network

Open the full error page →

Centre: this error. First ring: errors it is linked with (12). Outer ring: what those are linked with. Colours show the layer of a request each error belongs to. Click any dot to re-centre the map on it; hover to follow its connections. The centre dot opens the error page.

Port forwarding not working (CGNAT / double NAT) — Networking: Port forwarding configured but the port stays closed — carrier-grade NAT (CGNAT) or double NAT (Networking)Port forwar…ssh port 22 Connection timed out — ssh: connect to host x port 22: Connection timed out (Linux)ssh port 22 Connect…Native VLAN mismatch / wrong VLAN, no connectivity — Networking: %CDP-4-NATIVE_VLAN_MISMATCH / device on the wrong VLAN can't reach the gateway (Networking)Native VLAN mismatc…nc/telnet hangs: firewall DROP vs REJECT — Networking: nc -vz hangs then times out — firewall silently DROPs packets (REJECT would answer "Connection refused") (Networking)nc/telnet hangs: fi…NAT gateway SNAT port exhaustion (ErrorPortAllocation) — Networking: NAT gateway ErrorPortAllocation / SNAT port exhaustion — intermittent outbound connection timeouts (Networking)NAT gateway SNAT po…Idle connections silently dropped by firewall/NAT — Networking: Connection works, then fails after being idle — firewall/NAT idle timeout dropped the TCP session (use keepalive) (Networking)Idle connections si…UDP RcvbufErrors / packet receive errors — Networking: netstat -su: packet receive errors, receive buffer errors — UDP datagrams dropped by a full socket buffer (Networking)UDP RcvbufErrors / …DHCPDISCOVER: no free leases — Networking: dhcpd: DHCPDISCOVER from aa:bb:cc:dd:ee:ff via eth0: network 192.168.1.0/24: no free leases (Networking)DHCPDISCOVER: no fr…SFP link down / Loss of Signal (LOS) — Networking: Interface down — SFP transceiver Loss of Signal / no receive light (Networking)SFP link down / Los…arp -a shows (incomplete) — Networking: `arp -n` shows (incomplete) / Destination Host Unreachable — no ARP reply from the next hop (Networking)arp -a shows (incom…MAC flapping / broadcast storm (spanning tree loop) — Networking: %SW_MATM-4-MACFLAP_NOTIF: Host is flapping between ports / broadcast storm (Networking)MAC flapping / broa…Public IP/domain unreachable from inside the LAN (NAT hairpin) — Networking: Server reachable from the internet but not from inside the LAN via its public IP — NAT loopback / hairpin NAT not working (Networking)Public IP/domain un…Wi-Fi keeps disconnecting (weak signal, -80 dBm) — Networking: Wi-Fi keeps disconnecting / signal -80 dBm / wlan0: deauthenticating by local choice (reason=3) (Networking)Wi-Fi keeps disconn…1020 — Cloudflare Error 1020: Access Denied (Cloudflare)1020port 22 timed out — ssh: connect to host github.com port 22: Connection timed out (Git)port 22 timed outkex_exchange_identification — kex_exchange_identification: Connection closed by remote host (Git)kex_exchange_identi…Duplex mismatch: late collisions / CRC errors — Networking: Duplex mismatch — late collisions, runts and CRC errors on the switch port (Networking)Duplex mismatch: la…Port err-disabled (psecure-violation) — Networking: %PM-4-ERR_DISABLE: psecure-violation error detected on Gi0/5, putting Gi0/5 in err-disable state (Networking)Port err-disabled (…OSPF neighbor stuck in EXSTART/EXCHANGE — Networking: %OSPF-5-ADJCHG: Nbr 10.0.0.2 from EXSTART to DOWN — OSPF neighbor stuck in EXSTART/EXCHANGE (MTU mismatch) (Networking)OSPF neighbor stuck…No route to host — connect: No route to host (EHOSTUNREACH) (Linux)No route to host40615 — Azure SQL: Cannot open server 'x' requested by the login. Client with IP address 'y' is not allowed to access the server (Error 40615) (Azure)40615ERR_CONNECTION_TIMED_OUT — ERR_CONNECTION_TIMED_OUT: This site can’t be reached — example.com took too long to respond (Browser)ERR_CONNECTION_TIME…port is already allocated — Docker: Bind for 0.0.0.0:80 failed: port is already allocated (Docker)port is already all…iptables: No chain/target/match — driver failed programming external connectivity on endpoint: iptables: No chain/target/match by that name (Docker)iptables: No chain/…bind() failed (98: Address already in use) — nginx: [emerg] bind() to 0.0.0.0:80 failed (98: Address already in use) (Linux)bind() failed (98: …client_loop: send disconnect: Broken pipe — client_loop: send disconnect: Broken pipe (SSH session drops when idle) (Linux)client_loop: send d…1005 — Cloudflare Error 1005: Access denied — The owner of this website has banned the autonomous system number (ASN) your IP address is in (Cloudflare)10051006 — Cloudflare Error 1006 / 1007 / 1008: Access denied — Your IP address has been banned (Cloudflare)1006High TCP retransmissions / packet loss — Networking: netstat -s: segments retransmitted / Wireshark: TCP Retransmission, TCP Dup ACK — packet loss on the path (Networking)High TCP retransmis…Cannot assign requested address (EADDRNOTAVAIL) — Networking: connect: Cannot assign requested address — ephemeral port range exhausted by TIME_WAIT connections (Networking)Cannot assign reque…TCP ZeroWindow / TCP Window Full — Networking: Wireshark: TCP ZeroWindow, TCP Window Full — the receiver can't keep up and tells the sender to stop (Networking)TCP ZeroWindow / TC…Windows has detected an IP address conflict — Networking: Windows has detected an IP address conflict / Duplicate address detected by 00:aa:bb:cc:dd:ee (Networking)Windows has detecte…169.254.x.x self-assigned IP (DHCP failed) — Networking: IPv4 address 169.254.x.x (Autoconfiguration / APIPA) — the PC couldn't get an address from DHCP (Networking)169.254.x.x self-as…DHCPDISCOVER ... No DHCPOFFERS received — Networking: dhclient: DHCPDISCOVER on eth0 ... No DHCPOFFERS received. No working leases in persistent database - sleeping. (Networking)DHCPDISCOVER ... No…Network cable unplugged / NO-CARRIER — Networking: Network cable unplugged / `ip link` shows NO-CARRIER state DOWN / Ethernet: Network cable unplugged (Networking)Network cable unplu…Many sockets in CLOSE_WAIT — Networking: Thousands of sockets in CLOSE_WAIT — the application is not closing its side of the connection (Networking)Many sockets in CLO…No Wi-Fi adapter found / Wi-Fi option missing — Networking: No Wi-Fi networks found — the Wi-Fi adapter is missing, disabled or its driver failed (Networking)No Wi-Fi adapter fo…4-way handshake timeout / Incorrect password — Networking: wlan0: WPA: 4-way handshake failed - pre-shared key may be incorrect / WRONG_KEY (Networking)4-way handshake tim…Reply from 192.168.1.1: Destination host unreachable — Networking: ping — Destination Host Unreachable / Destination net unreachable (ICMP type 3) (Networking)Reply from 192.168.…Windows: Default gateway is not available — Networking: Windows: Default gateway is not available / Diagnose Connection Problems: DHCP not enabled (Networking)Windows: Default ga…Domain still resolves to the old IP (DNS propagation/cache) — Networking: DNS changed but the domain still resolves to the old IP — TTL and resolver caching ("propagation") (Networking)Domain still resolv…Internal hostnames fail on VPN (split DNS / systemd-resolved) — Networking: VPN connected but internal names like db.corp.local don't resolve — split DNS / 127.0.0.53 stub resolver not using the VPN DNS (Networking)Internal hostnames …ERR_NETWORK_CHANGED — Chrome: Your connection was interrupted — A network change was detected. ERR_NETWORK_CHANGED (Browser)ERR_NETWORK_CHANGEDcaptive portal — Browser: This network requires you to sign in — captive portal (hotel, airport, café Wi-Fi) blocking HTTPS sites (Browser)captive portal

Directly related (12)

ssh port 22 Connection timed outLinux

ssh: connect to host x port 22: Connection timed out

SSH packets get no reply — a firewall/security group drops them, the server is off, or the IP is wrong.

Native VLAN mismatch / wrong VLAN, no connectivityNetworking

Networking: %CDP-4-NATIVE_VLAN_MISMATCH / device on the wrong VLAN can't reach the gateway

A port or trunk carries a different VLAN than expected, so hosts silently land on the wrong network.

nc/telnet hangs: firewall DROP vs REJECTNetworking

Networking: nc -vz hangs then times out — firewall silently DROPs packets (REJECT would answer "Connection refused")

A connection attempt gets no answer at all, which points to a firewall dropping the packets rather than a closed port.

NAT gateway SNAT port exhaustion (ErrorPortAllocation)Networking

Networking: NAT gateway ErrorPortAllocation / SNAT port exhaustion — intermittent outbound connection timeouts

Many instances share few public IPs, and the NAT gateway runs out of source ports for outbound connections.

Idle connections silently dropped by firewall/NATNetworking

Networking: Connection works, then fails after being idle — firewall/NAT idle timeout dropped the TCP session (use keepalive)

A connection that sat idle was forgotten by a firewall or NAT device, so the next packet gets reset or vanishes.

UDP RcvbufErrors / packet receive errorsNetworking

Networking: netstat -su: packet receive errors, receive buffer errors — UDP datagrams dropped by a full socket buffer

UDP packets arrive faster than the application reads them, so the kernel throws the extras away.

DHCPDISCOVER: no free leasesNetworking

Networking: dhcpd: DHCPDISCOVER from aa:bb:cc:dd:ee:ff via eth0: network 192.168.1.0/24: no free leases

The DHCP server has no unused addresses left in the scope.

SFP link down / Loss of Signal (LOS)Networking

Networking: Interface down — SFP transceiver Loss of Signal / no receive light

A fibre or SFP link is down because the transceiver receives no light.

arp -a shows (incomplete)Networking

Networking: `arp -n` shows (incomplete) / Destination Host Unreachable — no ARP reply from the next hop

The machine asked "who has this IP?" and nobody on the local network answered.

MAC flapping / broadcast storm (spanning tree loop)Networking

Networking: %SW_MATM-4-MACFLAP_NOTIF: Host is flapping between ports / broadcast storm

A layer-2 loop is making frames circle the network, saturating links and making the whole VLAN crawl.

Public IP/domain unreachable from inside the LAN (NAT hairpin)Networking

Networking: Server reachable from the internet but not from inside the LAN via its public IP — NAT loopback / hairpin NAT not working

Devices on your own network can't use the router's public address to reach a server that is also on that network.

Wi-Fi keeps disconnecting (weak signal, -80 dBm)Networking

Networking: Wi-Fi keeps disconnecting / signal -80 dBm / wlan0: deauthenticating by local choice (reason=3)

The wireless link is too weak or too noisy to hold, so the client drops and rejoins repeatedly.

Two steps away (31)

1020Cloudflare

Cloudflare Error 1020: Access Denied

A Cloudflare firewall/WAF custom rule blocked the request — the visitor’s IP, country, user agent or request pattern matched a bl…

port 22 timed outGit

ssh: connect to host github.com port 22: Connection timed out

Outbound SSH on port 22 is blocked (firewall, corporate or public Wi-Fi).

kex_exchange_identificationGit

kex_exchange_identification: Connection closed by remote host

The SSH connection was closed before the handshake — server overload, rate limiting, or a proxy/firewall interfering.

Duplex mismatch: late collisions / CRC errorsNetworking

Networking: Duplex mismatch — late collisions, runts and CRC errors on the switch port

One side runs full duplex and the other half duplex, so the link works but is slow and drops packets.

Port err-disabled (psecure-violation)Networking

Networking: %PM-4-ERR_DISABLE: psecure-violation error detected on Gi0/5, putting Gi0/5 in err-disable state

The switch shut the port down because a security or protection feature detected a violation.

OSPF neighbor stuck in EXSTART/EXCHANGENetworking

Networking: %OSPF-5-ADJCHG: Nbr 10.0.0.2 from EXSTART to DOWN — OSPF neighbor stuck in EXSTART/EXCHANGE (MTU mismatch)

Two OSPF routers see each other but never finish exchanging databases, cycling between EXSTART and DOWN.

No route to hostLinux

connect: No route to host (EHOSTUNREACH)

The destination host isn’t reachable — it’s down, on another subnet without routing, or a firewall rejects with “host unreachable…

40615Azure

Azure SQL: Cannot open server 'x' requested by the login. Client with IP address 'y' is not allowed to access the server (Error 40615)

The Azure SQL server firewall doesn’t allow your client’s IP address.

ERR_CONNECTION_TIMED_OUTBrowser

ERR_CONNECTION_TIMED_OUT: This site can’t be reached — example.com took too long to respond

The browser waited for the server but got no response — the server is down/unreachable, a firewall drops traffic, or DNS points t…

port is already allocatedDocker

Docker: Bind for 0.0.0.0:80 failed: port is already allocated

Another container or host process already publishes that host port.

iptables: No chain/target/matchDocker

driver failed programming external connectivity on endpoint: iptables: No chain/target/match by that name

Docker’s iptables rules were wiped (firewalld/ufw reload, iptables flush) while Docker was running, so it can’t publish ports.

bind() failed (98: Address already in use)Linux

nginx: [emerg] bind() to 0.0.0.0:80 failed (98: Address already in use)

Nginx (or another server) can’t listen on the port because another process already holds it — often Apache, another Nginx, or a s…

client_loop: send disconnect: Broken pipeLinux

client_loop: send disconnect: Broken pipe (SSH session drops when idle)

The SSH connection was cut — usually an idle timeout on a NAT router, firewall or the server, sometimes a network change.

1005Cloudflare

Cloudflare Error 1005: Access denied — The owner of this website has banned the autonomous system number (ASN) your IP address is in

The site owner blocked your network provider (ASN) — common for VPNs, cloud/data-center IPs and some mobile carriers.

1006Cloudflare

Cloudflare Error 1006 / 1007 / 1008: Access denied — Your IP address has been banned

The site owner (or a Cloudflare security setting) blocked your IP address.

High TCP retransmissions / packet lossNetworking

Networking: netstat -s: segments retransmitted / Wireshark: TCP Retransmission, TCP Dup ACK — packet loss on the path

Packets are being lost, so TCP resends them and throughput collapses.

Cannot assign requested address (EADDRNOTAVAIL)Networking

Networking: connect: Cannot assign requested address — ephemeral port range exhausted by TIME_WAIT connections

The machine ran out of local ports for new outgoing connections to the same destination.

TCP ZeroWindow / TCP Window FullNetworking

Networking: Wireshark: TCP ZeroWindow, TCP Window Full — the receiver can't keep up and tells the sender to stop

The receiving application isn't reading data fast enough, so its TCP buffer filled and the sender must pause.

Windows has detected an IP address conflictNetworking

Networking: Windows has detected an IP address conflict / Duplicate address detected by 00:aa:bb:cc:dd:ee

Two devices on the same network are using the same IP address, so traffic reaches the wrong one or neither.

169.254.x.x self-assigned IP (DHCP failed)Networking

Networking: IPv4 address 169.254.x.x (Autoconfiguration / APIPA) — the PC couldn't get an address from DHCP

With no DHCP answer, the computer gave itself a link-local 169.254.x.x address, which only works on the local segment.

DHCPDISCOVER ... No DHCPOFFERS receivedNetworking

Networking: dhclient: DHCPDISCOVER on eth0 ... No DHCPOFFERS received. No working leases in persistent database - sleeping.

The client broadcast a DHCP request and no server answered.

Network cable unplugged / NO-CARRIERNetworking

Networking: Network cable unplugged / `ip link` shows NO-CARRIER state DOWN / Ethernet: Network cable unplugged

The network card sees no electrical link, so nothing above it (IP, DNS, browser) can work.

Many sockets in CLOSE_WAITNetworking

Networking: Thousands of sockets in CLOSE_WAIT — the application is not closing its side of the connection

The other end closed the connection, but your program never called close(), so the socket stays open.

No Wi-Fi adapter found / Wi-Fi option missingNetworking

Networking: No Wi-Fi networks found — the Wi-Fi adapter is missing, disabled or its driver failed

The operating system doesn't see a working wireless adapter, so no networks can be listed.

4-way handshake timeout / Incorrect passwordNetworking

Networking: wlan0: WPA: 4-way handshake failed - pre-shared key may be incorrect / WRONG_KEY

The Wi-Fi association started but key negotiation failed, almost always a wrong password.

Reply from 192.168.1.1: Destination host unreachableNetworking

Networking: ping — Destination Host Unreachable / Destination net unreachable (ICMP type 3)

A router (or your own PC) tells you it has no way to deliver the packet to that address.

Windows: Default gateway is not availableNetworking

Networking: Windows: Default gateway is not available / Diagnose Connection Problems: DHCP not enabled

The PC can't reach its router, so it has no path out of the local network.

Domain still resolves to the old IP (DNS propagation/cache)Networking

Networking: DNS changed but the domain still resolves to the old IP — TTL and resolver caching ("propagation")

You updated a DNS record, but resolvers and devices keep serving the old answer until its TTL expires.

Internal hostnames fail on VPN (split DNS / systemd-resolved)Networking

Networking: VPN connected but internal names like db.corp.local don't resolve — split DNS / 127.0.0.53 stub resolver not using the VPN DNS

The VPN works by IP, but internal hostnames fail because queries still go to your normal DNS server.

ERR_NETWORK_CHANGEDBrowser

Chrome: Your connection was interrupted — A network change was detected. ERR_NETWORK_CHANGED

The device switched networks (Wi-Fi to mobile data, VPN on/off, IP renewed) while the page was loading, so the browser aborted th…

captive portalBrowser

Browser: This network requires you to sign in — captive portal (hotel, airport, café Wi-Fi) blocking HTTPS sites

The Wi-Fi needs a login or acceptance page first; until you complete it, secure sites fail with certificate or connection errors.