my Redhat server sometimes close all ports
 

I installed a redhat 4 update 5 server 2 weeks ago, and it run fine until yesterday. The server suddenly close all ports. But sometimes if I accessed it from the same network, it open for a while then closed again. I know this because sometimes I can ssh to the server about 2 - 5 minutes but suddenly disconnected whit this message

Read from remote host 192.168.19.210: Connection reset by peer

It's a test server and almost everybody know the root password. Today I changed the root password so I can fix the problem.
I have already stop the firewall and set SElinux to permissive. There is no iptables entries. but the server still act the same as before.

Is there any suggestion to fix the problem?

Thank

have you called the "already payed for " tech support .

we will NEED A LOT of info if we are to help
like EVERY log

The more information we get the easier it will be to help you debug this. :) Maybe start out with an excerpt from /var/log/messages for the time period you experiece connection loss?

1. Reduce the number of people with root password to minimum - max 2-3 persons. if it possible to 1 person.

2. run command "setup" in Firewall configuration setup:

Security Level (Disabled)
SELinux (Disabled)

3. create script with IPtables rules


I had the same problem with CentOS and also with Red Hat.
In my opinion the best option is /etc/init.d/firewall script with Your settings. Run realy stable.

@John VV
I think the tech support service are no longer avaliable
and can you tell me what are the logs file that I need to see? because I am kind of new in linux.

@kenneho
it's only show this

Feb 17 14:07:59 dcg001 sshd(pam_unix)[8611]: session opened for user oracle by (uid=0)
Feb 17 14:35:44 dcg001 sshd(pam_unix)[8667]: session opened for user oracle by (uid=0)
Feb 17 15:16:30 dcg001 sshd(pam_unix)[8578]: session closed for user oracle
Feb 17 16:02:54 dcg001 sshd(pam_unix)[8707]: session opened for user oracle by (uid=0)
Feb 17 16:10:42 dcg001 sshd(pam_unix)[8737]: session opened for user oracle by (uid=0)
Feb 17 16:13:01 dcg001 sshd(pam_unix)[8611]: session closed for user oracle
Feb 17 16:21:58 dcg001 sshd(pam_unix)[8766]: session opened for user oracle by (uid=0)
Feb 17 16:37:05 dcg001 sshd(pam_unix)[8667]: session closed for user oracle
Feb 17 18:02:56 dcg001 sshd(pam_unix)[8707]: session closed for user oracle
Feb 17 18:10:43 dcg001 sshd(pam_unix)[8737]: session closed for user oracle
Feb 17 18:22:13 dcg001 sshd(pam_unix)[8766]: session closed for user oracle


as you can see that the connection time is very short and thats because the server disconnected the ssh session.
edit: It's just hit me that the connection time is quite long, but what happened is the ssh session never last more that 5 - 10 minutes


@dlugasx
I will try to use the iptables

Thank's

is there by any chance an IP conflict on the network with this server?

@send2_jpg: Along the same lines as adam999's query, are you sure the server is not crashing/rebooting?

Check the output of the uptime command and /var/log/messages.