networking

Diagnose Linux network connectivity, DNS, firewall, and routing issues with layer-by-layer troubleshooting.

4|2|Updated Jan 27, 2026
One-click install
npx skills add https://github.com/Arete-Consortium/ai-skills --skill networking-arete-consortium
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: networking
Source: https://github.com/Arete-Consortium/ai-skills/tree/main/personas/devops/networking
Command: npx skills add https://github.com/Arete-Consortium/ai-skills --skill networking-arete-consortium

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Network failures on Linux systems are hard to isolate because symptoms like timeouts or refused connections can originate at any layer, from a down interface to a misconfigured firewall rule. This Skill provides a systematic, bottom-up diagnostic methodology so you find the root cause instead of guessing. ## Core Features & Use Cases - Layer-by-Layer Diagnosis: Walks through interface status, local connectivity, DNS resolution, remote reachability, port checks, and firewall rules in a fixed order using ip, ping, dig, ss, and nc. - Firewall Management: Covers UFW, iptables, and nftables commands for listing, allowing, and denying traffic, including a safety pattern that auto-reverts remote iptables changes. - DNS & Docker Networking: Includes dig queries, resolver inspection, cache flushing, and Docker network inspection for containerized environments. - Use Case: A service returns "connection timed out" after deployment. Use this Skill to verify the process is listening with ss, confirm the port is open remotely with nc, and identify the UFW rule blocking inbound traffic. ## Quick Start Ask Claude to use the networking skill to diagnose why your service on port 8080 is unreachable from another host.

Frequently Asked Questions about networking

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I troubleshoot a connection refused error on Linux?▼

Connection refused means the host is reachable but nothing is listening on that port. Run ss -tlnp on the target to verify the service is listening on the correct port and interface, then restart or rebind the service as needed.

How do I check if a firewall is blocking a port on Linux?▼

List active rules with sudo iptables -L -n -v, sudo nft list ruleset, or sudo ufw status verbose depending on your firewall. Then test the port remotely with nc -zv host port to confirm whether traffic is being dropped.

Should I use ss or netstat to check listening ports?▼

Use ss instead of netstat because it is faster, actively maintained, and installed by default on modern distributions. Run ss -tlnp for TCP listeners and ss -ulnp for UDP, both with process names.

Why does DNS resolution fail even though the network works?▼

DNS failures usually come from a misconfigured /etc/resolv.conf or a broken systemd-resolved setup. Verify with dig @8.8.8.8 example.com to bypass the local resolver, then inspect resolvectl status and fix the resolver configuration.

Is it safe to flush iptables rules on a remote server?▼

No, flushing iptables remotely can lock you out with no recovery except console access. Instead, schedule an automatic revert with at, such as restoring saved rules after five minutes, before applying risky changes.

When should I not use this networking troubleshooting skill?▼

Do not use it for application-level metrics or alerting, which belong to monitoring tools, or for code-level latency optimization, which belongs to performance profiling. It covers network-layer diagnostics only.