LinuxQuestions.org
Help answer threads with 0 replies.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 05-17-2011, 09:25 AM   #16
tjjt
LQ Newbie
 
Registered: May 2011
Posts: 9

Original Poster
Rep: Reputation: 0

Quote:
Originally Posted by Reuti View Post
Can you access the external website with the server machine itself, to rule out that the problem is on your side at all.
Yes. I check the network in the server.
1、 I can ping the oursite web server.
PING any-fp.wa1.b.yahoo.com (67.195.160.76) 56(84) bytes of data.
64 bytes from ir1.fp.vip.ac4.yahoo.com (67.195.160.76): icmp_req=1 ttl=50 time=256 ms

2、 I write a python script to access the web then print the page, it works.

import urllib2
url="http://www.google.com.hk"
response = urllib2.urlopen('http://python.org/')
html = response.read()
print html
 
Old 05-17-2011, 09:39 AM   #17
tjjt
LQ Newbie
 
Registered: May 2011
Posts: 9

Original Poster
Rep: Reputation: 0
P.S. I have already stop the iptables service.

The sshd_config in the server contains the following:

#KerberosGetAFSToken no
#KerberosUseKuserok yes

UsePAM yes

# Accept locale-related environment variables
AcceptEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES
AcceptEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT
AcceptEnv LC_IDENTIFICATION LC_ALL LANGUAGE
AcceptEnv XMODIFIERS

AllowAgentForwarding yes
AllowTcpForwarding yes
GatewayPorts clientspecified
#X11Forwarding no
X11Forwarding yes

#PidFile /var/run/sshd.pid
#MaxStartups 10
PermitTunnel yes
#ChrootDirectory none

# no default banner path
#Banner none

# override default of no subsystems
Subsystem sftp /usr/libexec/openssh/sftp-server

Last edited by tjjt; 05-17-2011 at 06:59 PM.
 
Old 11-17-2011, 04:33 PM   #18
therealnate
LQ Newbie
 
Registered: Nov 2011
Posts: 1

Rep: Reputation: Disabled
SELinux

perhaps you have figured out your problem by now, but if not- I had this exact same issue
it turns out I had an SELinux policy blocking access

from a syslog message I got more info:
sealert -l 7d4d0ad5-b937-43df-a81d-8e04ec3c47e4

I used the suggested command
setsebool -P sshd_forward_ports 1

and everything works fine now

-Nate
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] X11 forwarding failed doublealice Linux - Newbie 13 11-08-2018 10:54 AM
ssh -L '>channel 3: open failed: connect failed:' Luke771 Linux - Networking 14 01-24-2012 03:14 AM
TCP traffic forwarding shathil Linux - Networking 1 09-05-2009 10:46 PM
LXer: Implement load-balancing, port forwarding, and rate-limiting with shd-tcp-tools LXer Syndicated Linux News 0 09-17-2008 10:30 PM
Forwarding all TCP/IP connection to a windows gateway itaysz Linux - Networking 6 01-29-2004 01:22 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 04:12 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration