LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 04-09-2019, 06:16 PM   #1
mjbradakis
Member
 
Registered: Apr 2012
Posts: 37

Rep: Reputation: Disabled
firewalld port should be open but it isn't


So I run this command:

[root@fizzer etc]# firewall-cmd --list-services
dhcpv6-client mdns samba-client smtp ssh

smtp is a listed service, the port is listed as open:

[root@fizzer etc]# firewall-cmd --list-ports
1025-65535/udp 1025-65535/tcp 25/tcp 80/tcp 22/tcp 143/tcp 25/udp


iptables-save also shows port 25 is available, postfix is running, but the server is not accepting connections on port 25:


[root@fizzer etc]# telnet fizzer.bradakis.com 25
Trying 50.198.190.20...
telnet: connect to address 50.198.190.20: Connection refused

What is going on? Which programs are lying to me about port 25?

mjb.
 
Old 04-09-2019, 06:53 PM   #2
ferrari
Senior Member
 
Registered: Sep 2003
Location: Auckland, NZ
Distribution: openSUSE Leap
Posts: 4,253

Rep: Reputation: 757Reputation: 757Reputation: 757Reputation: 757Reputation: 757Reputation: 757Reputation: 757
What is reported by the following command?
Code:
ss -tulpn | grep :25
 
Old 04-09-2019, 07:05 PM   #3
ferrari
Senior Member
 
Registered: Sep 2003
Location: Auckland, NZ
Distribution: openSUSE Leap
Posts: 4,253

Rep: Reputation: 757Reputation: 757Reputation: 757Reputation: 757Reputation: 757Reputation: 757Reputation: 757
FWIW, here's the results I got from a port scan of that public IP address...

Code:
~> nmap 50.198.190.20
Starting Nmap 7.70 ( https://nmap.org ) at 2019-04-10 12:02 NZST
Nmap scan report for 50-198-190-20-static.hfc.comcastbusiness.net (50.198.190.20)
Host is up (0.19s latency).
Not shown: 846 closed ports, 152 filtered ports
PORT   STATE SERVICE
22/tcp open  ssh
80/tcp open  http

Nmap done: 1 IP address (1 host up) scanned in 17.37 seconds
Check that your ISP is not blocking that port as well.
 
Old 04-09-2019, 07:27 PM   #4
mjbradakis
Member
 
Registered: Apr 2012
Posts: 37

Original Poster
Rep: Reputation: Disabled
I feel like such a chump. I was a sys admin in the computer science department at the U of U for about a quarter of a century, seen a lot of variations of UNIX based systems, etc. etc.

The problem here was amazingly easy to fix. I spelled the hostname correctly in main.cf and it works now.

Sheesh!

mjb.
 
1 members found this post helpful.
Old 04-09-2019, 08:10 PM   #5
ferrari
Senior Member
 
Registered: Sep 2003
Location: Auckland, NZ
Distribution: openSUSE Leap
Posts: 4,253

Rep: Reputation: 757Reputation: 757Reputation: 757Reputation: 757Reputation: 757Reputation: 757Reputation: 757
At least it was just a simple typo in the postfix configuration. Thanks for the update.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
port 5432 open nmap online but closed status with firewalld and local nmap scan mtdew3q Linux - Security 6 06-04-2018 06:20 PM
firewalld port forwarding specific ip how? packets Linux - Security 1 01-02-2016 09:48 PM
firewalld port forwarding sometimes not working packets Linux - Security 1 12-15-2015 05:49 PM
[SOLVED] Set up app as an init.d daemon, but it isn't running in background and stdout isn't blocked Abscissa256 Debian 1 02-14-2013 12:48 AM
LXer: Saab IQon and Linux: when Open Source isn’t Open, and your car isn’t really yours LXer Syndicated Linux News 0 03-08-2011 01:10 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 08:24 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration