[SOLVED] Opening Port 3690 on Slackware 14.0 Firewall for `svnserve`

BrknShldr · 01-03-2014, 11:36 AM

Hello, All!

I am having trouble getting port 3690 to open for connections to my Subversion server within my LAN. I've been searching around for a while on the internet and trying anything that I can find on this issue...so far, no dice.

When I run `nmap` against my server, I get the following output:

Code:

root@server:~# nmap localhost -p 3690

Starting Nmap 6.01 ( http://nmap.org ) at 2014-01-03 17:33 CST
Nmap scan report for localhost (127.0.0.1)
Host is up (0.00011s latency).
PORT     STATE  SERVICE
3690/tcp closed svn

Nmap done: 1 IP address (1 host up) scanned in 0.08 seconds
root@server:~#

The output from `iptables --list` is:

Code:

root@server:~# iptables --list
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:svn
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:svn
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:3960

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         
root@server:~#

The last entry in

Code:

Chain INPUT (policy ACCEPT)

is because of a post that I read that said when a fella set his IP tables to use port 3960, it solved his problem. He had stated that it must have been a typo in the book he was reading that said the port was 3690. So, I figured what the heck and tried that, but, obviously, it didn't work or I wouldn't be making this post.

Anyway, any help that you all can give me is greatly appreciated. I've searched LQ for posts on this issue and found one that I read and followed the advice in, but still cannot get my port opened. If you need any other info to assist me, please ask and I will provide it if I am able. Thank you very much in advance!

Sean

stateless · 01-03-2014, 04:28 PM

Hi. According to the iptables information you provided, your firewall is wide open, meaning that anything should be able to connect to any port. If you wanted to be absolutely certain, you could disable iptables altogether. (Not sure how that is done in slack, but "/etc/init.d/iptables stop" does that in some distros.)

So, I think rather you want to investigate if your subversion server itself is configured correctly. Can you connect to it locally (i.e., while logged into the server itself?)

BrknShldr · 01-04-2014, 03:18 AM

stateless,

Yes, I can connect locally on the server, however, not from my laptop where I'm doing the programming. I understand that IPTables says that port 3690 is wide open, but when I run `nmap` against it, it tells me that it's closed. I just thought of something while I was at work today that I'm going to try tomorrow and I'll post an update whether it works or not.

Ser Olmy · 01-04-2014, 03:51 AM

Is anything actually listening at port 3690? What does netstat -l -t show?

BrknShldr · 01-04-2014, 09:19 AM

OK...tried something that I thought of at work last night. I had been trying to have SVN run from inetd and I don't think this way is working for me because I just started SVN as a daemon process and now `nmap` shows:

Code:

root@server:~# svnserve -d
root@server:~# nmap localhost -p 3690

Starting Nmap 6.01 ( http://nmap.org ) at 2014-01-04 14:41 CST
Nmap scan report for localhost (127.0.0.1)
Host is up (0.000094s latency).
PORT     STATE SERVICE
3690/tcp open  svn

Nmap done: 1 IP address (1 host up) scanned in 0.07 seconds
root@server:~#

For Ser Olmy:

Output of `netstat -l -t` is as follows (now):

Code:

Nmap done: 1 IP address (1 host up) scanned in 0.07 seconds
root@server:~# netstat -l -t
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State      
tcp        0      0 *:5901                  *:*                     LISTEN     
tcp        0      0 *:sunrpc                *:*                     LISTEN     
tcp        0      0 *:auth                  *:*                     LISTEN     
tcp        0      0 *:6001                  *:*                     LISTEN     
tcp        0      0 *:ssh                   *:*                     LISTEN     
tcp        0      0 *:ipp                   *:*                     LISTEN     
tcp        0      0 *:smtp                  *:*                     LISTEN     
tcp        0      0 *:52733                 *:*                     LISTEN     
tcp        0      0 *:time                  *:*                     LISTEN     
tcp        0      0 *:5801                  *:*                     LISTEN     
tcp        0      0 *:svn                   *:*                     LISTEN     
tcp        0      0 *:submission            *:*                     LISTEN     
tcp6       0      0 [::]:http               [::]:*                  LISTEN     
tcp6       0      0 [::]:ssh                [::]:*                  LISTEN     
tcp6       0      0 [::]:ipp                [::]:*                  LISTEN     
root@server:~#

As you can expect, prior to running `svnserve` as a daemon process on its own (instead of through inetd), this is the output:

Code:

root@server:~# netstat -l -t
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State      
tcp        0      0 *:5901                  *:*                     LISTEN     
tcp        0      0 *:sunrpc                *:*                     LISTEN     
tcp        0      0 *:auth                  *:*                     LISTEN     
tcp        0      0 *:6001                  *:*                     LISTEN     
tcp        0      0 *:ssh                   *:*                     LISTEN     
tcp        0      0 *:ipp                   *:*                     LISTEN     
tcp        0      0 *:smtp                  *:*                     LISTEN     
tcp        0      0 *:52733                 *:*                     LISTEN     
tcp        0      0 *:time                  *:*                     LISTEN     
tcp        0      0 *:5801                  *:*                     LISTEN     
tcp        0      0 *:submission            *:*                     LISTEN     
tcp6       0      0 [::]:http               [::]:*                  LISTEN     
tcp6       0      0 [::]:ssh                [::]:*                  LISTEN     
tcp6       0      0 [::]:ipp                [::]:*                  LISTEN     
root@server:~#

Anyway, I'll just run svn as a daemon process so that the port will be open for my LAN. Thanks for input from each of you. I'm going to tag this thread as solved.