enable telnet but can't telnet from the computer

guanyu · 08-21-2002, 08:30 AM

Hey guys,
I am having a weird problem. I can't telnet from WAN. But I managed to telnet from my LAN. Do you guys have any idea about it. I really don't have any clue. Thank you appreciate that!!

guanyu

acid_kewpie · 08-21-2002, 09:19 AM

can you give some actual information here? where are you trying to telnet to? what errors do you get? please provide useful information in your posts in future, thanks.

guanyu · 08-21-2002, 10:57 PM

Well my msg is "Could not open a connection to xxx.xx.xxx.xx. I guess something with my ip. I need to cofigure ip so that i can telnet from outside. Is that rite? I am not sure about it

Griffon26 · 08-22-2002, 10:00 AM

What I gather is that you are trying to connect to your own computer from the internet and it's not working.
Telnetting from your own computer to somewhere on the internet does work.

Is this correct?

If so and if you are sure you want to enable the telnet service on your computer, you probably have to enable it in /etc/xinetd.d/telnet.
That file most likely contains a line:
disable = yes

Change this to "no" and it should work.

Keep in mind that everything you type on a telnet connection is sent over the network unencrypted. Someone in between could sniff your passwords and hack your box. If you want more security, consider using SSH instead.

guanyu · 08-22-2002, 08:14 PM

Giffon,
Thank for replying. I can telnet from my internal(192.168.xx.xxx). But I cannot telnet from WAN(or other ISP). For instance, 68.2.xx.xxx. I had already enable the telnet feature otherwise my internal computer won't be able to telnet. That's my problem. Thanks

GuanYu

Griffon26 · 08-23-2002, 02:32 AM

Check the /etc/hosts.allow and /etc/hosts.deny files.

man hosts.allow

Rich · 08-23-2002, 11:16 AM

Your internal "192" address would imply a NAT translation is taking place. Are you using a router? If so, did you open up the telnet port?

JamesLittle · 08-24-2002, 06:47 PM

Certain IP addresses are reserved for private use and are not routable across the internet. Routers on the internet recognize these ip addresses and "drop" them.

Because your local wan is using 192.x you "can't get there from here".

There is a way though... Your router to the internet uses NAT to "rewrite" the IP addresses comming in and out of your LAN. You could configure a static forwarding entry in the router that basicaly says "forward incoming port 23 to the internal ip address 192.x.x.x (server ip)"

BTW: It is better to use ssh, telnet uses unencrypted passwords

guanyu · 08-26-2002, 06:34 AM

JamesLittle,
No No. I wanna connect to my server instead of my local computer which mean connect to Eth0. I don't wan forward to my local. What I want just let me telnet to my server(cox ISP).