LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 05-11-2006, 02:03 PM   #1
ToothlessRebel
Member
 
Registered: Jun 2004
Location: FL, USA
Distribution: Slackware 9.1
Posts: 190

Rep: Reputation: 30
Determining what answers


Is there any way to figure out what service is answering on what port for a certain machine? I think the wrong service is answering on the port 80 for HTTP requests. I get connection refused for http://toothlessrebel.org, which should be a domain hosted on port 80 of that machine. I know the domain points to the right device, because all other services on the machine work excellently. TeamSpeaks servers respond on 4 different ports, and TS TCP and WedAdmin services are functional. There are two domains listening on port 80, the default, brandontechclub.org and toothlessrebel.org, which both worked previously. After adding postfix for mail delivery I get connections refused those URLs. Also, e-mails do not get delivered. There is a temporary fix in that if I reset the router forwarding the ports it will function perfectly for some time, but without any known interference both e-mail and port 80 HTTP will be refused. Any ideas? Anything I can use to come up with some ideas? The machine is set up in the LAN DMZ so should not have port issues.

Code:
Trying 24.94.124.147...
Connected to 147-124.94-24.tampabay.res.rr.com.
Escape character is '^]'.
220 toothless.brandontechclub.org ESMTP Postfix
Is the response when opening a telnet connection to port 25 on the machine, using "telnet toothlessrebel.org 25".

Code:
Trying 24.94.124.147...
telnet: connect to address 24.94.124.147: Connection refused
telnet: Unable to connect to remote host
Telnet to port 80. Using "telnet toothlessrebel.org 80".

Code:
ssh: connect to address 24.94.124.147 port 80: Connection refused
SSH to port 80, using "ssh -p 80 toothlessrebel.org".

It really just looks like port 80 is being blocked somewhere... ISP perhaps?
I don't think so, because I have used port 80 before by putting the machine in the DMZ and it worked.
 
Old 05-11-2006, 02:52 PM   #2
pljvaldez
LQ Guru
 
Registered: Dec 2005
Location: Somewhere on the String
Distribution: Debian Wheezy (x86)
Posts: 6,094

Rep: Reputation: 281Reputation: 281Reputation: 281
Try using nmap localhost
 
Old 05-11-2006, 04:28 PM   #3
ToothlessRebel
Member
 
Registered: Jun 2004
Location: FL, USA
Distribution: Slackware 9.1
Posts: 190

Original Poster
Rep: Reputation: 30
Starting nmap 3.45 ( http://www.insecure.org/nmap/ ) at 2006-05-11 16:33 EDT
Interesting ports on localhost (127.0.0.1):
(The 1641 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
21/tcp open ftp
22/tcp open ssh
25/tcp open smtp
37/tcp open time
53/tcp open domain
79/tcp open finger
80/tcp open http
111/tcp open rpcbind
113/tcp open auth
548/tcp open afpovertcp
631/tcp open ipp
953/tcp open rndc
3306/tcp open mysql
5000/tcp open UPnP
6001/tcp open X11:1
6002/tcp open X11:2

Nmap run completed -- 1 IP address (1 host up) scanned in 0.599 seconds

Interestingly enough, 25 is smtp and 80 is http as would normally be expected.

Anyway I can track down the breakdown?

Thanks
 
Old 05-11-2006, 06:59 PM   #4
pljvaldez
LQ Guru
 
Registered: Dec 2005
Location: Somewhere on the String
Distribution: Debian Wheezy (x86)
Posts: 6,094

Rep: Reputation: 281Reputation: 281Reputation: 281
When the site goes down, can you still get there from the local machine? Is the server at a static IP (if not can you verify it still has an IP when the server goes down)? Perhaps your router is doing something funky with the firewall???

I'm not an expert, so I'm just grabbing at straws here... I feel like there are some tools (nagios? netstat? traceroute?) that may be able to help you trace the route of your request.
 
Old 05-11-2006, 09:04 PM   #5
ToothlessRebel
Member
 
Registered: Jun 2004
Location: FL, USA
Distribution: Slackware 9.1
Posts: 190

Original Poster
Rep: Reputation: 30
1. Yes, local machine and local network will access the site.

2. It is not a static IP but the IP can be verified because all other services at the domain and hence IP function.

3. Router is most likely my culprit. Looking for toola to see why.

I am grabbing at straws too. All outgoing traffic is fine.
 
Old 05-13-2006, 05:31 AM   #6
BSchindler
Member
 
Registered: May 2006
Location: Los Angeles, CA USA
Distribution: RHAS3, RHAS4, RHEL4, RH6, RH7.2, FC2-7, Gentoo, DSL
Posts: 49

Rep: Reputation: 15
You do not mention what your router is, and I agree that looks like the problem ... but I still question the failure if it occurred after installing postfix. If you stop the postfix daemon and reset your router does your system still fail? If so, I would really look at the router.

When all else fails, do a full reset (reset to factory) of the router and then setup the routing rules again ... or just look and make sure you do not have port translation enabled and set to the wrong port.
 
Old 05-13-2006, 11:10 AM   #7
ToothlessRebel
Member
 
Registered: Jun 2004
Location: FL, USA
Distribution: Slackware 9.1
Posts: 190

Original Poster
Rep: Reputation: 30
If i "Apply Changes" without changing anything it reboots the router, which corrects the problem. It's a netgear router... model to come.
 
  


Reply

Tags
email


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
I need some answers ! Captainsj *BSD 9 03-25-2006 08:34 PM
NOOB here, looking for some answers PSUBALL10 Mandriva 4 02-04-2005 11:01 PM
Points-system for answers yogi1061 LQ Suggestions & Feedback 16 01-17-2005 10:00 AM
easy answers schrap Linux - General 5 02-06-2003 11:44 PM
well... some questions looking for answers murshed Linux - General 13 01-16-2003 09:42 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 09:13 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration