rcp -- port 544: No route to host

jchambers · 08-26-2007, 12:10 AM

Hello --

Having trouble with rcp, here is what I have going.

server A) 10.0.0.1
server B) 10.0.0.2

Code:

rcp 10.0.0.2:/var/named/chroot/etc/dns/mydomain.com.dns /var/named/chroot/etc/dns/mydomain.com.dns

Server A)
~.rhosts
10.0.0.2

Server B)
~.rhosts
10.0.0.1

Server (A) iptables

Code:

Chain INPUT (policy ACCEPT)
target     prot opt source               destination
RH-Firewall-1-INPUT  all  --  anywhere             anywhere
ACCEPT     tcp  --  10.0.0.2        0.0.0.0             tcp dpt:kshell
ACCEPT     tcp  --  10.0.0.2        0.0.0.0             tcp dpt:klogin

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
RH-Firewall-1-INPUT  all  --  anywhere             anywhere

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
ACCEPT     tcp  --  0.0.0.0              10.0.0.2       tcp dpt:kshell
ACCEPT     tcp  --  0.0.0.0              10.0.0.2       tcp dpt:klogin

Chain RH-Firewall-1-INPUT (2 references)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere
ACCEPT     icmp --  anywhere             anywhere            icmp any
ACCEPT     esp  --  anywhere             anywhere
ACCEPT     ah   --  anywhere             anywhere
ACCEPT     udp  --  anywhere             224.0.0.251         udp dpt:mdns
ACCEPT     udp  --  anywhere             anywhere            udp dpt:ipp
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:ipp
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTABLISHED
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:ssh
REJECT     all  --  anywhere             anywhere            reject-with icmp-host-prohibited

Server (B) iptables

Code:

Chain INPUT (policy ACCEPT)
target     prot opt source               destination
RH-Firewall-1-INPUT  all  --  anywhere             anywhere
ACCEPT     tcp  --  10.0.0.1         0.0.0.0             tcp dpt:kshell
ACCEPT     udp  --  10.0.0.1         0.0.0.0             udp dpt:544

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
RH-Firewall-1-INPUT  all  --  anywhere             anywhere

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
ACCEPT     tcp  --  0.0.0.0              10.0.0.1        tcp dpt:kshell
ACCEPT     tcp  --  0.0.0.0              10.0.0.1        tcp dpt:klogin

Chain RH-Firewall-1-INPUT (2 references)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere
ACCEPT     icmp --  anywhere             anywhere            icmp any
ACCEPT     esp  --  anywhere             anywhere
ACCEPT     ah   --  anywhere             anywhere
ACCEPT     udp  --  anywhere             224.0.0.251         udp dpt:mdns
ACCEPT     udp  --  anywhere             anywhere            udp dpt:ipp
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:ipp
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTABLISHED
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:ssh
REJECT     all  --  anywhere             anywhere            reject-with icmp-host-prohibited

Error message:

Code:

connect to address 10.0.0.2 port 544: No route to host
Trying krb4 rcp...
connect to address 10.0.0.2 port 544: No route to host
trying normal rcp (/usr/bin/rcp)
10.0.0.2: No route to host

I got a connect to address 10.0.0.2 port 543: No route to host error as well.

I can use scp with success, but I do not want the password promt.

Any ideas what I am doing wrong?

Thanks,
Jon

jchambers · 08-26-2007, 02:53 AM

Ok, so I changed the iptables to:

Code:

Chain INPUT (policy ACCEPT)
target     prot opt source               destination
ACCEPT     tcp  --  10.0.0.1             anywhere

And now I get this error:

Code:

connect to address 10.0.0.2 port 544: Connection refused
Trying krb4 rcp...
connect to address 10.0.0.2 port 544: Connection refused
trying normal rcp (/usr/bin/rcp)
10.0.0.2: Connection refused

At least it's being seen now before it's rejected.