updates
Apparently I manage to configure "xinetd.conf" on my Redhat 7.0 server so that I can telnet and ftp to it from another Microsoft Windows client. But i can only do so from one subnet, namely the 10.1.1.x subnet. But if i try to telnet or ftp to the Redhat 7.0 server from another subnet namely 10.1.2.x that goes through the same gateway as the 10.1.1.x subnet, I can't do so.
I have enable my "hosts.allow" file and the "xinetd.conf" to let the 10.1.2.x subnet telnet or ftp in. Perhaps i may have overlook something? Any thoughts? Thanks again guys.
Linuxforum reply....::
I 've done what was asked from Raz the moderator as quote from your e-mail below:
as root:
"change any info about your real external internet address that it might show, before posting here"
#ifconfig -a
#netstat -nap | grep LISTEN
#route -n
#cat /etc/hosts.allow
#cat /etc/hosts.deny
#cat /etc/xinetd.conf
#cat /etc/xinetd.d/telnet
#cat /proc/sys/net/ipv4/ip_forward
This is the results I get:
[root@intra /root]# ifconfig -a
eth0 Link encap:Ethernet HWaddr 00:00:E8:51:23:B4
inet addr:10.1.1.98 Bcast:10.1.1.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:352511 errors:0 dropped:0 overruns:0 frame:0
TX packets:1074 errors:0 dropped:0 overruns:0 carrier:0
collisions:1 txqueuelen:100
Interrupt:11 Base address:0x7c00
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:3924 Metric:1
RX packets:14 errors:0 dropped:0 overruns:0 frame:0
TX packets:14 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
[root@intra /root]# netstat -nap|grep LISTEN
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
tcp 0 0 10.1.1.98:53 0.0.0.0:*
LISTEN
1042/named
tcp 0 0 127.0.0.1:53 0.0.0.0:*
LISTEN
1042/named
tcp 0 0 0.0.0.0:6000 0.0.0.0:*
LISTEN
975/X
tcp 0 0 0.0.0.0:139 0.0.0.0:*
LISTEN
880/smbd
tcp 0 0 0.0.0.0:5432 0.0.0.0:*
LISTEN
815/postmaster
tcp 0 0 0.0.0.0:80 0.0.0.0:*
LISTEN
765/httpd
tcp 0 0 0.0.0.0:443 0.0.0.0:*
LISTEN
765/httpd
tcp 0 0 0.0.0.0:587 0.0.0.0:*
LISTEN
610/sendmail: accep
tcp 0 0 0.0.0.0:25 0.0.0.0:*
LISTEN
610/sendmail: accep
tcp 0 0 0.0.0.0:515 0.0.0.0:*
LISTEN
562/lpd Waiting
tcp 0 0 0.0.0.0:22 0.0.0.0:*
LISTEN
541/sshd
tcp 0 0 0.0.0.0:23 0.0.0.0:*
LISTEN
526/xinetd
tcp 0 0 0.0.0.0:514 0.0.0.0:*
LISTEN
526/xinetd
tcp 0 0 0.0.0.0:513 0.0.0.0:*
LISTEN
526/xinetd
tcp 0 0 0.0.0.0:21 0.0.0.0:*
LISTEN
526/xinetd
tcp 0 0 0.0.0.0:98 0.0.0.0:*
LISTEN
526/xinetd
tcp 0 0 0.0.0.0:79 0.0.0.0:*
LISTEN
526/xinetd
tcp 0 0 0.0.0.0:113 0.0.0.0:*
LISTEN
461/identd
tcp 0 0 0.0.0.0:1024 0.0.0.0:*
LISTEN
392/rpc.statd
tcp 0 0 0.0.0.0:111 0.0.0.0:*
LISTEN
365/portmap
unix 0 [ ACC ] STREAM LISTENING 1087 1042/named
/va
r/run/ndc
unix 0 [ ACC ] STREAM LISTENING 828 815/postmaster
/tm
p/.s.PGSQL.5432
unix 0 [ ACC ] STREAM LISTENING 1039 1017/kfm
/tm
p//kio_0_1017intra.vads.com_0
unix 0 [ ACC ] STREAM LISTENING 871 865/xfs
/tm
p/.font-unix/fs7100
unix 0 [ ACC ] STREAM LISTENING 1041 1017/kfm
/tm
p//kfm_0_1017intra.vads.com_0
unix 0 [ ACC ] STREAM LISTENING 983 975/X
/tm
p/.X11-unix/X0
unix 0 [ ACC ] STREAM LISTENING 693 626/gpm
/de
v/gpmctl
[root@intra /root]# route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use
Iface
10.1.1.0 0.0.0.0 255.255.255.0 U 0 0 0
eth0
127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0
lo
0.0.0.0 10.1.1.1 0.0.0.0 UG 0 0 0
eth0
[root@intra /root]# cat /etc/hosts.allow
#
# hosts.allow This file describes the names of the hosts which are
# allowed to use the local INET services, as decided
# by the '/usr/sbin/tcpd' server.
#
[root@intra /root]# cat /etc/hosts.deny
#
# hosts.deny This file describes the names of the hosts which are
# *not* allowed to use the local INET services, as
decided
# by the '/usr/sbin/tcpd' server.
#
# The portmap line is redundant, but it is left to remind you that
# the new secure portmap uses hosts.deny and hosts.allow. In
particular
# you should know that NFS uses portmap!
[root@intra /root]# cat /etc/xinetd.conf
#
# Simple configuration file for xinetd
#
# Some defaults, and include /etc/xinetd.d/
defaults
{
instances = 60
log_type = SYSLOG authpriv
log_on_success = HOST PID
log_on_failure = HOST RECORD
}
service telnet
{
flags = REUSE
socket_type = stream
wait = no
user = root
server = /usr/sbin/in.telnetd
log_on_failure += USERID
}
includedir /etc/xinetd.d
[root@intra /root]# cat /etc/xinetd.d/telnet
# default: on
# description: The telnet server serves telnet sessions; it uses \
# unencrypted username/password pairs for authentication.
service telnet
{
disable = no
flags = REUSE
socket_type = stream
wait = no
user = root
server = /usr/sbin/in.telnetd
log_on_failure += USERID
}
[root@intra /root]# cat /proc/sys/net/ipv4/ip_forward
0
[root@intra /root]#
I can ping from any of the other machine to this Redhat Linux server and likewise, so can this server, to the other machine.
I really appreciate any help that i can get. Thanks again, ya? Bye
|