LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 02-16-2009, 08:14 PM   #1
send2_jpg
LQ Newbie
 
Registered: Feb 2009
Posts: 2

Rep: Reputation: 0
my Redhat server sometimes close all ports


I installed a redhat 4 update 5 server 2 weeks ago, and it run fine until yesterday. The server suddenly close all ports. But sometimes if I accessed it from the same network, it open for a while then closed again. I know this because sometimes I can ssh to the server about 2 - 5 minutes but suddenly disconnected whit this message

Read from remote host 192.168.19.210: Connection reset by peer

It's a test server and almost everybody know the root password. Today I changed the root password so I can fix the problem.
I have already stop the firewall and set SElinux to permissive. There is no iptables entries. but the server still act the same as before.

Is there any suggestion to fix the problem?

Thank
 
Old 02-17-2009, 01:27 AM   #2
John VV
LQ Muse
 
Registered: Aug 2005
Location: A2 area Mi.
Posts: 17,622

Rep: Reputation: 2651Reputation: 2651Reputation: 2651Reputation: 2651Reputation: 2651Reputation: 2651Reputation: 2651Reputation: 2651Reputation: 2651Reputation: 2651Reputation: 2651
have you called the "already payed for " tech support .

we will NEED A LOT of info if we are to help
like EVERY log
 
Old 02-17-2009, 02:02 AM   #3
kenneho
Member
 
Registered: May 2003
Location: Oslo, Norway
Distribution: Ubuntu, Red Hat Enterprise Linux
Posts: 657

Rep: Reputation: 40
The more information we get the easier it will be to help you debug this. Maybe start out with an excerpt from /var/log/messages for the time period you experiece connection loss?
 
Old 02-17-2009, 04:08 AM   #4
dlugasx
Member
 
Registered: Dec 2008
Location: Germany/Poland
Distribution: CentOS / Debian / Solaris / RedHat
Posts: 266

Rep: Reputation: 19
Quote:
Originally Posted by send2_jpg View Post
I installed a redhat 4 update 5 server 2 weeks ago, and it run fine until yesterday. The server suddenly close all ports. But sometimes if I accessed it from the same network, it open for a while then closed again. I know this because sometimes I can ssh to the server about 2 - 5 minutes but suddenly disconnected whit this message

Read from remote host 192.168.19.210: Connection reset by peer

It's a test server and almost everybody know the root password. Today I changed the root password so I can fix the problem.
I have already stop the firewall and set SElinux to permissive. There is no iptables entries. but the server still act the same as before.

Is there any suggestion to fix the problem?

Thank

1. Reduce the number of people with root password to minimum - max 2-3 persons. if it possible to 1 person.

2. run command "setup" in Firewall configuration setup:

Security Level (Disabled)
SELinux (Disabled)

3. create script with IPtables rules


I had the same problem with CentOS and also with Red Hat.
In my opinion the best option is /etc/init.d/firewall script with Your settings. Run realy stable.
 
Old 02-17-2009, 08:49 PM   #5
send2_jpg
LQ Newbie
 
Registered: Feb 2009
Posts: 2

Original Poster
Rep: Reputation: 0
@John VV
I think the tech support service are no longer avaliable
and can you tell me what are the logs file that I need to see? because I am kind of new in linux.

@kenneho
it's only show this

Feb 17 14:07:59 dcg001 sshd(pam_unix)[8611]: session opened for user oracle by (uid=0)
Feb 17 14:35:44 dcg001 sshd(pam_unix)[8667]: session opened for user oracle by (uid=0)
Feb 17 15:16:30 dcg001 sshd(pam_unix)[8578]: session closed for user oracle
Feb 17 16:02:54 dcg001 sshd(pam_unix)[8707]: session opened for user oracle by (uid=0)
Feb 17 16:10:42 dcg001 sshd(pam_unix)[8737]: session opened for user oracle by (uid=0)
Feb 17 16:13:01 dcg001 sshd(pam_unix)[8611]: session closed for user oracle
Feb 17 16:21:58 dcg001 sshd(pam_unix)[8766]: session opened for user oracle by (uid=0)
Feb 17 16:37:05 dcg001 sshd(pam_unix)[8667]: session closed for user oracle
Feb 17 18:02:56 dcg001 sshd(pam_unix)[8707]: session closed for user oracle
Feb 17 18:10:43 dcg001 sshd(pam_unix)[8737]: session closed for user oracle
Feb 17 18:22:13 dcg001 sshd(pam_unix)[8766]: session closed for user oracle


as you can see that the connection time is very short and thats because the server disconnected the ssh session.
edit: It's just hit me that the connection time is quite long, but what happened is the ssh session never last more that 5 - 10 minutes


@dlugasx
I will try to use the iptables

Thank's

Last edited by send2_jpg; 02-17-2009 at 08:57 PM.
 
Old 02-19-2009, 04:55 PM   #6
adam999
Member
 
Registered: Sep 2006
Posts: 105

Rep: Reputation: 18
is there by any chance an IP conflict on the network with this server?
 
Old 02-19-2009, 05:17 PM   #7
anomie
Senior Member
 
Registered: Nov 2004
Location: Texas
Distribution: RHEL, Scientific Linux, Debian, Fedora
Posts: 3,935
Blog Entries: 5

Rep: Reputation: Disabled
@send2_jpg: Along the same lines as adam999's query, are you sure the server is not crashing/rebooting?

Check the output of the uptime command and /var/log/messages.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
open ports for utorrent using iptables n close smpt to that ports shtorrent00 Linux - Networking 2 09-30-2008 03:34 PM
How can I close ports? nectron101 Linux - Networking 3 11-27-2004 11:22 PM
configuring it as a router ftp, my sql,web server, and open and close ports with masq digitalf Mandriva 1 09-04-2004 04:43 AM
How to close X server on Redhat 9? Spy47 Linux - Newbie 4 08-22-2004 12:17 PM
Close ports 137 and 138 samba server? hacinn Linux - Security 2 06-24-2004 06:58 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 07:20 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration