8.8.8. and 8.8.4.4 are there.
so the problem is something else

Thanks for the reply but my before.rules does contain all of the following rules that you have mentioned.

Post your rules file, we will be able to help you better.

Here is my file before.rules
by the way I have added 2 lines:

# allow outbound icmp
-A ufw-before-output -p icmp -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
-A ufw-before-output -p icmp -m state --state ESTABLISHED,RELATED -j ACCEPT

witch I don’t understand it but I found it online and it helped me to ping 8.8.8.8 but when I ping a domain name like google.com I get the same message “unknown host name”.

#

# rules.before

#

# Rules that should be run before the ufw command line added rules. Custom

# rules should be added to one of these chains:

#   ufw-before-input

#   ufw-before-output

#   ufw-before-forward

#



# Don't delete these required lines, otherwise there will be errors

*filter

:ufw-before-input - [0:0]

:ufw-before-output - [0:0]

:ufw-before-forward - [0:0]

:ufw-not-local - [0:0]

# End required lines





# allow all on loopback

-A ufw-before-input -i lo -j ACCEPT

-A ufw-before-output -o lo -j ACCEPT



# quickly process packets for which we already have a connection

-A ufw-before-input -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT

-A ufw-before-output -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT

-A ufw-before-forward -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT



# drop INVALID packets (logs these in loglevel medium and higher)

-A ufw-before-input -m conntrack --ctstate INVALID -j ufw-logging-deny

-A ufw-before-input -m conntrack --ctstate INVALID -j DROP



# ok icmp codes for INPUT

-A ufw-before-input -p icmp --icmp-type destination-unreachable -j ACCEPT

-A ufw-before-input -p icmp --icmp-type source-quench -j ACCEPT

-A ufw-before-input -p icmp --icmp-type time-exceeded -j ACCEPT

-A ufw-before-input -p icmp --icmp-type parameter-problem -j ACCEPT

-A ufw-before-input -p icmp --icmp-type echo-request -j ACCEPT



# ok icmp code for FORWARD

-A ufw-before-forward -p icmp --icmp-type destination-unreachable -j ACCEPT

-A ufw-before-forward -p icmp --icmp-type source-quench -j ACCEPT

-A ufw-before-forward -p icmp --icmp-type time-exceeded -j ACCEPT

-A ufw-before-forward -p icmp --icmp-type parameter-problem -j ACCEPT

-A ufw-before-forward -p icmp --icmp-type echo-request -j ACCEPT



# allow outbound icmp

-A ufw-before-output -p icmp -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT

-A ufw-before-output -p icmp -m state --state ESTABLISHED,RELATED -j ACCEPT



# allow dhcp client to work

-A ufw-before-input -p udp --sport 67 --dport 68 -j ACCEPT



#

# ufw-not-local

#

-A ufw-before-input -j ufw-not-local



# if LOCAL, RETURN

-A ufw-not-local -m addrtype --dst-type LOCAL -j RETURN



# if MULTICAST, RETURN

-A ufw-not-local -m addrtype --dst-type MULTICAST -j RETURN



# if BROADCAST, RETURN

-A ufw-not-local -m addrtype --dst-type BROADCAST -j RETURN



# all other non-local packets are dropped

-A ufw-not-local -m limit --limit 3/min --limit-burst 10 -j ufw-logging-deny

-A ufw-not-local -j DROP



# allow MULTICAST mDNS for service discovery (be sure the MULTICAST line above
# is uncommented)

-A ufw-before-input -p udp -d 224.0.0.251 --dport 5353 -j ACCEPT



# allow MULTICAST UPnP for service discovery (be sure the MULTICAST line above

# is uncommented)

-A ufw-before-input -p udp -d 239.255.255.250 --dport 1900 -j ACCEPT

# don't delete the 'COMMIT' line or these rules won't be processed

COMMIT

Check your DNS settings. Usually in /etc/resolv.conf

@mdvucak

nameserver 8.8.8.8
nameserver 8.8.4.4
nameserver 208.255.0.2

sorry for my noob question but what is the default gateway? is it my own ip?

Hello,

Logon as root on your droplet console, then enter the following command:

netstat -rn

Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
0.0.0.0 178.62.0.1 0.0.0.0 UG 0 0 0 eth0
178.62.0.0 0.0.0.0 255.255.192.0 U 0 0 0 eth0

In my case, the default gateway is the IP 178.62.0.1, see the following command:

ping -c 3 178.62.0.1

PING 178.62.0.1 (178.62.0.1) 56(84) bytes of data.
64 bytes from 178.62.0.1: icmpseq=1 ttl=64 time=0.957 ms
64 bytes from 178.62.0.1: icmpseq=2 ttl=64 time=0.589 ms
64 bytes from 178.62.0.1: icmp_seq=3 ttl=64 time=0.586 ms

— 178.62.0.1 ping statistics —
3 packets transmitted, 3 received, 0% packet loss, time 2002ms
rtt min/avg/max/mdev = 0.586/0.710/0.957/0.176 ms

My droplet network interface is reaching the default gateway, so I have access to the Internet.

Do the same.

@cviniciusm
I did that and it worked fine. pinging ip is fine after I added the following to my before.rules file for ufw firewall:

# allow outbound icmp
-A ufw-before-output -p icmp -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
-A ufw-before-output -p icmp -m state --state ESTABLISHED,RELATED -j ACCEPT

Hello,

Right. Well done.

Now does your connectivity issues were gone ?

the thing is my website works fine now after that.
The only problem that might get serious in future is that if I need to install something like https://logentries.com/ to monitor my website log. installation requires to run the following:

wget https://raw.github.com/logentries/le/master/install/linux/logentries_install.sh && sudo bash logentries_install.sh

Basically the code has 2 parts.
Part one is to download the logentries_install.sh file which is:

wget https://raw.github.com/logentries/le/master/install/linux/logentries_install.sh

The problem is that I get unknown host error because I am trying to access a domain (raw.github.com) not ip. I can ping ip addresses but not domain names.

And part two is tu run the logentries_install.sh file which is:

sudo bash logentries_install.sh

The script asks me to enter my accunt email at logentries.com and my password. and when I enter my account info it does not continue because I think it is trying to authenticate my info through a url and because I cant access a url then it fails.

However, I can disable my firewall (ufw) and after installing the software enable the firewall again.