Telnet

pentalive · 09-18-2005, 01:28 PM

-- The machine is named "think", it is a DHCP client and it is getting it's address
correctly. (192.168.0.35)

-- Can ping think from other machines

-- /etc/xinetd.d/telnet "disabled=no" , no "only-from" lines

-- Think's host.allow and host.deny are both empty

-- services --status-all says xinetd is running

-- ftp and ssh also say "connection refused"

-- think can telnet, ftp and ssh to other machines.

What else can I check?

How can I check Think's firewall to find if it actually has one
and to verify it is not the problem.

Thanks.

david_ross · 09-18-2005, 01:47 PM

You can check your firewall rules with:
iptables -nL

I would also suggest not enabling telnet in the first place and just using ssh:
http://wiki.linuxquestions.org/wiki/Telnet_and_SSH

pentalive · 09-18-2005, 02:23 PM

Thanks David...

Quote:

Originally posted by david_ross
You can check your firewall rules with:
iptables -nL

Code:

Hint: insmod errors can be caused by incorrect module parameters, including invalid IO or IRQ parameters
/lib/modules/2.4.18-3/kernel/net/ipv4/netfilter/ip_tables.o: init_module: Device or resource busy
/lib/modules/2.4.18-3/kernel/net/ipv4/netfilter/ip_tables.o: insmod /lib/modules/2.4.18-3/kernel/net/ipv4/netfilter/ip_tables.o failed
/lib/modules/2.4.18-3/kernel/net/ipv4/netfilter/ip_tables.o: insmod ip_tables failed
iptables v1.2.5: can't initialize iptables table `filter': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.

This was done as root on think. Remember I am running an older redhat (7.3)

Looks like either there is no firewall installed (that's ok becuase I am behind a NAT router
and the world will never see this machine) or it's missinstalled...

Quote:

I would also suggest not enabling telnet in the first place and just using ssh:
http://wiki.linuxquestions.org/wiki/Telnet_and_SSH

SSH would be fine except is also says "connection refused"

david_ross · 09-18-2005, 03:24 PM

Sorry, I forgot it was 7.3 - you will probably be using ipchains:
ipchains -nL

pentalive · 09-18-2005, 04:24 PM

Here is the output of IP chains:

Code:

Chain input (policy ACCEPT):
target     prot opt     source                destination           ports
ACCEPT     udp  ------  206.13.28.10         0.0.0.0/0             53 ->   1025:65535
ACCEPT     udp  ------  151.164.1.8          0.0.0.0/0             53 ->   1025:65535
ACCEPT     udp  ------  192.168.0.1          0.0.0.0/0             53 ->   1025:65535
ACCEPT     all  ------  0.0.0.0/0            0.0.0.0/0             n/a
REJECT     tcp  -y----  0.0.0.0/0            0.0.0.0/0             * ->   0:1023
REJECT     tcp  -y----  0.0.0.0/0            0.0.0.0/0             * ->   2049
REJECT     udp  ------  0.0.0.0/0            0.0.0.0/0             * ->   0:1023
REJECT     udp  ------  0.0.0.0/0            0.0.0.0/0             * ->   2049
REJECT     tcp  -y----  0.0.0.0/0            0.0.0.0/0             * ->   6000:6009
REJECT     tcp  -y----  0.0.0.0/0            0.0.0.0/0             * ->   7100
Chain forward (policy ACCEPT):
Chain output (policy ACCEPT):

It looks like my firewall is open to me for everythin.. "ACCEPT all ----- 0.0.0.0/0 0.0.0.0/0 n/a"
(I am just guessing... :^))

If not, this machine sits behind a NAT router on a private network. (or will when I am rich again..
right now the local network is not visible from the Internet, and only my iBook or my wife's
windows xp machine dial up the Internet), so No firewall would be ok.

vimal · 09-19-2005, 09:45 AM

Hi ,
just try flushing your ipchains firewall using the command ipchains -F. then issue the command service ipchains save. after that try again....
vimal.......

pentalive · 09-19-2005, 11:54 AM

That seems to have it... I tested by telneting from think to beehive, then from beehive back to think.

For some strange reason, when I am dialed in, I can't see anything of my local network from my iBook.

So a real test will be to telnet/ssh from my iBook once I am off the net.

I think it's fixed.

Thanks, david_ross and vimal!!. :^)

ron.