Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 03 Jun 2002 00:36:31 +0200
From:      Jens Rehsack <rehsack@liwing.de>
To:        sroberts@dsl.pipex.com
Cc:        FreeBSD-Questions <freebsd-questions@freebsd.org>
Subject:   Re: Unable to connect to localhost
Message-ID:  <3CFA9DEF.F328C57@liwing.de>
References:  <1023056794.315.106.camel@Demon.Strobe.org>

next in thread | previous in thread | raw e-mail | index | archive | help


"S. Roberts" wrote:
> 
> Hello,
>      Might be a simple one for many of you, but I kinda thought I had
> this sorted.., not!
At first, I do not know much 'bout ipfw, I'm using ipf and I'm happy
with it.

> I thought I'd check the currently installed version of sendmail running
> on a FreeBSD system here., and got this:
> # date
> Sun Jun  2 23:16:04 BST 2002
> # exit
> exit
> $ telnet localhost 25
> Trying ::1...
> telnet: connect to address ::1: Connection refused
This looks like this connection will be blocked. This means, your firewall
doesn't like connects over ipv6 from localhost to localhost. Maybe you should
check your ipfw settings for ip6. AFAIK there are separate settings...

> Trying 127.0.0.1...
> telnet: connect to address 127.0.0.1: Permission denied
> telnet: Unable to connect to remote host
> $

This looks like there is no telnetd running or your inetd do not know
how to run such a daemon :-)

> 
> I then check /var/log/security, and see:
> $ su
> Password:
> # tail /var/log/security
> Jun  2 23:16:15 <snip> /kernel: Connection attempt to TCP ::0001:25 from
> ::0001:1207
> Jun  2 23:16:15 <snip> /kernel: ipfw: 910 Deny TCP 127.0.0.1:1208
> 127.0.0.1:25 out via lo0
> #
Seems my first idea is right...

> I check what tcpdmatch says about the user's priviledges:
> $ tcpdmatch telnetd <user>
> warning: telnetd: no such process name in /etc/inetd.conf
> warning: <user>: hostname alias
> warning: (official name: <domain name>)
> client:   hostname <host name>
> client:   address  <ip>
> server:   process  telnetd
> matched:  /etc/hosts.allow line <line number>
> option:   allow
> access:   granted
Seems the second, too.

> $
> I alo noticed that I can't access via url: http://localhost:80 either -
> I get the message: "The connection was refused when attempting to
> contact localhost.".

Port 80 is usually a web-server, so there should a process like httpd, apxs
or sth. else running. Maybe you have a tiny httpd which could be ran using
inetd. Check this in that case, too.

> So., what's the matter here? I'm happy to post more details if required
> (as in firewall rules and such). Thanks to all those that might reply!
Could be useful see your firewall rules (ipv4+ipv6), corresponding settings
in /etc/rc.conf and your inetd.conf and the output of "find / -name telnetd"

Good luck
Jens

> 
> Stacey
> --
> Stacey Roberts B.Sc. (HONS) Computer Science
> Network Systems Engineer
> 
>                                                   ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
>                        Name: signature.asc
>    signature.asc       Type: application/pgp-signature
>                 Description: This is a digitally signed message part

-- 
L     i  W     W     W  i                 Jens Rehsack
L        W     W     W
L     i   W   W W   W   i  nnn    gggg    LiWing IT-Services
L     i    W W   W W    i  n  n  g   g
LLLL  i     W     W     i  n  n  g   g    Friesenstraße 2
                                  gggg    06112 Halle
                                     g
                                 g   g
Tel.:  +49 - 3 45 - 5 17 05 91    ggg     e-Mail: <rehsack@liwing.de>
Fax:   +49 - 3 45 - 5 17 05 92            http://www.liwing.de/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3CFA9DEF.F328C57>