Telnet "Connection closed by foreign host"

jhilton · 06-26-2008, 01:38 PM

Yes I am starting telnet as root.

telnetd --help has nothing listed. Bash also says there is no telnetd command. zsh thinks I meant telnet and tried to correct it to that. Also when I look up the manual for telnetd, it brings up the manual for in.telnetd.

Mr. C. · 06-26-2008, 01:44 PM

Use the telnet command, of course, that is correct for your system. The point is, I'm trying to understand your telnetd's command line options.

Please don't interpret the results for me. Instead, copy and paste the command and its output.

Run your telnetd program, whatever its name, with the --help option.

jlm01801 · 06-26-2008, 01:45 PM

"No, telnet is running. Telnet output the messages:"
Mr C - you are right - I thought of that after my post - my apologies to all.
That's why I veered off to a security related issue.
-Jim

jhilton · 06-26-2008, 02:03 PM

Alright well, after running a which telnetd I've found nothing so I'm back to using /usr/sbin/in.telnetd

in.telnetd has no --help. But in its man the options are

Code:

in.telnetd [-Uhlkn46] [-D debugmode][-I initid][-S tos] [-X authtype] [-rlowpty-highpty][-u len][-L /bin/login][-debug [port]]

telnet --help brings up

Code:

telnet [-8][-E][-L][-S tos][-a][-c][-d][-e char][-l user [-n tracefile][-b hostalias ] [-r]
[host-name [port]]

Sorry if this is beginning to get frustrating. I'm beginning to move into unfamiliar areas so I'll be mostly if not wholly, clueless.

jlm01801 · 06-26-2008, 02:06 PM

lets see how telnetd is started..
more /etc/xinetd.d/telnet

jhilton · 06-26-2008, 02:11 PM

Code:

service telnet
{
    flags         = REUSE
    socket_type   = stream
    wait          = no
    user          = root
    server        = /usr/sbin/in.telnetd
    log_on_failure += USERID
    disable       = yes
}

jlm01801 · 06-26-2008, 02:13 PM

change disable to no

jhilton · 06-26-2008, 02:16 PM

I did before, it was disabled in an earlier post in order to try to start telnetd manually through the console. Changing disable = no and restarted xinetd brings me back to the original problem.

jlm01801 · 06-26-2008, 02:32 PM

check /etc/services and make sure port 23 specifies telnet.
start in.telnetd -D report
...and see what happens when telneting.
you might also try capturing traffic for review
on host running telnetd try - tcpdump port 23 - before telnet attempt.

Mr. C. · 06-26-2008, 02:44 PM

lkm01801 - we've already verify that telnet was running and responding - the data is there in the previous threads.

What we are trying to do now is find out why the telnetd is *closing the connection* already made. This is an access control issue, not a telnet not started issue.

jhilton - with telnet DISABLED in xinetd, try the following on a command line:

/usr/sbin/in.telnetd -D netdata -debug 9999

Does this startup telnet to where you can connect to telnet on another session as:

telnet localhost 9999

btw. don't use which as the definitive answer to where your commands might be - it only looks in your directories specified in your PATH, so commands that live in directories you normally won't have in your PATH won't be search (eg: in.telnetd). Use locate instead

locate telnetd

jhilton · 06-26-2008, 03:02 PM

jlm01801 - start in.telnetd -D report does nothing as far as I can tell. in.telnetd -D start brings me right back to the console but there was no output.

in /etc/services telnet is listed as port 23.

This is the TCP dump I got from telneting, with it continuing for about 8 or so lines.

Code:

listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
IP 10.128.9.63.32982 > 10.128.9.64.telnet : S 2502673302:2502673302(0) ack 2502673303 win 24820 <nop,nop,sackOK,mss 1460>

Mr. C - I just disabled telnet through xinetd and restarted xinetd again.

Yes, /usr/sbin/in.telnetd -D netdata -debug 9999 does start telnetd and it prompted me to the login screen! I just tried to login and it booted me off for not incorrect passwords... as well as a timeout.

Thanks for the advice on locate. Its one reason that I started this topic in the newbie forums as I am a newbie.

Mr. C. · 06-26-2008, 03:09 PM

Excellent - you're on your way to debugging. Ignore the timeouts and password requests. We don't need to actually log in yet, as we're debugging just the ability of a local vs. remote connection.

Now, keep that manually-started telnet running, and from one of your *remote* (Solaris) machines, attempt to telnet as you did locally:

telnet remote_ip_here 9999

You are trying to see what happens remotely vs. locally.

jhilton · 06-26-2008, 03:13 PM

It took me into the login screen on the solaris machine upon telnet as it did when I tried to do it locally. with the same results of not trying to be able to login. It also timed out after I left it alone for awhile.

Mr. C. · 06-26-2008, 03:42 PM

Are you saying "on the Solaris machine, when I ran the telnet to the remote linux machine at port 9999, you received no request for a password" (different that when you tried locally on the linux box?

All this confusion would be eliminated if you just showed exactly the commands you try and their output (copy / paste), and then add your commentary.

jhilton · 06-26-2008, 03:47 PM

Oh woops sorry.

On the linux machine I did /usr/sbin/in.telnetd -D netdata -debug 9999

Then on the solaris machine I entered telnet *linux ip address* 9999

On the solaris machine was able to connect to the linux machine through telnet and I was prompted for a username and a password.

The Linux machine closed the connection after being idle for a short time.