Dear All On my CentOS , I want to open tcp port 4965 but my server does not contain /etc/sysconfig/iptables . Can you please let me know how to open this port ? Thank you
Hi,
Assumed that iptables has been disabled during installation, /etc/sysconfig/iptables might not be present on your system. Can you print iptables running configuration out by using:
iptables L
Sam
On 03.03.10 12:05, "hadi motamedi" motamedi24@gmail.com wrote:
Dear All On my CentOS , I want to open tcp port 4965 but my server does not contain /etc/sysconfig/iptables . Can you please let me know how to open this port ? Thank you
CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
2010/3/3 Samuel Contesse samuel.contesse@softcomponent.ch:
Hi,
Assumed that iptables has been disabled during installation, /etc/sysconfig/iptables might not be present on your system. Can you print iptables running configuration out by using:
iptables –L
Sam
if iptables is not enabled, then all ports are already open ;)
-- Eero
On Wed, Mar 3, 2010 at 11:20 AM, Eero Volotinen eero.volotinen@iki.fiwrote:
2010/3/3 Samuel Contesse samuel.contesse@softcomponent.ch:
Hi,
Assumed that iptables has been disabled during installation, /etc/sysconfig/iptables might not be present on your system. Can you
iptables running configuration out by using:
iptables –L
Sam
if iptables is not enabled, then all ports are already open ;)
-- Eero _______________________________________________ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
But when I trying to reach this debug port ,as : #telnet 172.16.17.132 4965 It cannot get through . So if the port is open , why I cannot reach it ? Thank you
You're right but the point is to help him to know wether is firewall is running or not... If /etc/sysconfig/iptables doesn't exist, iptables might be running anyway !
On 03.03.10 12:20, "Eero Volotinen" eero.volotinen@iki.fi wrote:
2010/3/3 Samuel Contesse samuel.contesse@softcomponent.ch:
Hi,
Assumed that iptables has been disabled during installation, /etc/sysconfig/iptables might not be present on your system. Can you print iptables running configuration out by using:
iptables L
Sam
if iptables is not enabled, then all ports are already open ;)
-- Eero _______________________________________________ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
On Wed, Mar 3, 2010 at 11:14 AM, Samuel Contesse < samuel.contesse@softcomponent.ch> wrote:
Hi,
Assumed that iptables has been disabled during installation, /etc/sysconfig/iptables might not be present on your system. Can you print iptables running configuration out by using:
iptables –L
Sam
On 03.03.10 12:05, "hadi motamedi" motamedi24@gmail.com wrote:
Dear All On my CentOS , I want to open tcp port 4965 but my server does not contain /etc/sysconfig/iptables . Can you please let me know how to open this port ? Thank you
CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
I issued 'iptables -L' but it is returning just the followings : 'Usage: /etc/rc.d/init.d/iptables {start|stop|restart|condrestart|status|panic|save}' Can you please let me know why?
Try /sbin/iptables L
On 03.03.10 12:26, "hadi motamedi" motamedi24@gmail.com wrote:
On Wed, Mar 3, 2010 at 11:14 AM, Samuel Contesse samuel.contesse@softcomponent.ch wrote:
Hi,
Assumed that iptables has been disabled during installation, /etc/sysconfig/iptables might not be present on your system. Can you print iptables running configuration out by using:
iptables L
Sam
On 03.03.10 12:05, "hadi motamedi" motamedi24@gmail.com wrote:
Dear All On my CentOS , I want to open tcp port 4965 but my server does not contain /etc/sysconfig/iptables . Can you please let me know how to open this port ? Thank you
CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
I issued 'iptables -L' but it is returning just the followings : 'Usage: /etc/rc.d/init.d/iptables {start|stop|restart|condrestart|status|panic|save}' Can you please let me know why?
CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
On Wed, Mar 3, 2010 at 11:32 AM, Samuel Contesse < samuel.contesse@softcomponent.ch> wrote:
Try /sbin/iptables –L
On 03.03.10 12:26, "hadi motamedi" motamedi24@gmail.com wrote:
On Wed, Mar 3, 2010 at 11:14 AM, Samuel Contesse < samuel.contesse@softcomponent.ch> wrote:
Hi,
Assumed that iptables has been disabled during installation, /etc/sysconfig/iptables might not be present on your system. Can you print iptables running configuration out by using:
iptables –L
Sam
On 03.03.10 12:05, "hadi motamedi" motamedi24@gmail.com wrote:
Dear All On my CentOS , I want to open tcp port 4965 but my server does not contain /etc/sysconfig/iptables . Can you please let me know how to open this port ? Thank you
CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
I issued 'iptables -L' but it is returning just the followings : 'Usage: /etc/rc.d/init.d/iptables {start|stop|restart|condrestart|status|panic|save}' Can you please let me know why?
CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
I tried for '/sbin/iptables -L' and please find its output at below : Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination
2010/3/3 hadi motamedi motamedi24@gmail.com:
On Wed, Mar 3, 2010 at 11:32 AM, Samuel Contesse samuel.contesse@softcomponent.ch wrote:
Try /sbin/iptables –L
On 03.03.10 12:26, "hadi motamedi" motamedi24@gmail.com wrote:
On Wed, Mar 3, 2010 at 11:14 AM, Samuel Contesse samuel.contesse@softcomponent.ch wrote:
Hi,
Assumed that iptables has been disabled during installation, /etc/sysconfig/iptables might not be present on your system. Can you print iptables running configuration out by using:
iptables –L
Sam
On 03.03.10 12:05, "hadi motamedi" motamedi24@gmail.com wrote:
Dear All On my CentOS , I want to open tcp port 4965 but my server does not contain /etc/sysconfig/iptables . Can you please let me know how to open this port ? Thank you ________________________________ _______________________________________________ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
I issued 'iptables -L' but it is returning just the followings : 'Usage: /etc/rc.d/init.d/iptables {start|stop|restart|condrestart|status|panic|save}' Can you please let me know why?
CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
I tried for '/sbin/iptables -L' and please find its output at below : Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination
All ports are open, but you really need some service to listen that port.
-- Eero
All ports are open, but you really need some service to listen that port.
-- Eero _______________________________________________ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Thank you . So why 'telnet 172.16.17.132 4965' cannot get through ?
2010/3/3 hadi motamedi motamedi24@gmail.com:
All ports are open, but you really need some service to listen that port.
-- Eero _______________________________________________ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Thank you . So why 'telnet 172.16.17.132 4965' cannot get through ?
.. you just can not connect to empty ports. You need some service/daemon/program to listen that port first.
-- Eero
On 3 March 2010 13:46, hadi motamedi motamedi24@gmail.com wrote:
All ports are open, but you really need some service to listen that port.
-- Eero _______________________________________________
Thank you . So why 'telnet 172.16.17.132 4965' cannot get through ?
As Eero said, you need to make sure something is listening on that port.
Try: netstat -ant and look for:
Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 0.0.0.0:4965 0.0.0.0:* LISTEN
or pipe it to grep if the server is busy (netstat -ant | grep 4965)
Regards, Andrew.
As Eero said, you need to make sure something is listening on that port.
Try: netstat -ant and look for:
Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 0.0.0.0:4965 0.0.0.0:* LISTEN
or pipe it to grep if the server is busy (netstat -ant | grep 4965)
Regards, Andrew. _______________________________________________ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Thank you . How can I distinguish which package is missing from my CentOS server and try to just add it (rather than trying for a fresh CentOS re-installation) ? On another machine similar to mine , the output is as : # netstat -ant |grep 4965 tcp 0 0 0.0.0.0:4965 0.0.0.0:* LISTEN # netstat -anp |grep 4965 tcp 0 0 0.0.0.0:4965 0.0.0.0:* LISTEN 1090/iptrans # lsof -i |grep 4965 iptrans 1090 root 21u IPv4 1764 TCP *:4965 (LISTEN) On that machine , the 'telnet ip-addr 4965' can get through . So which package do I need to add to mine ?
Greetings,
On Wed, Mar 3, 2010 at 5:51 PM, hadi motamedi motamedi24@gmail.com wrote:
# netstat -ant |grep 4965 tcp 0 0 0.0.0.0:4965 0.0.0.0:* LISTEN # netstat -anp |grep 4965 tcp 0 0 0.0.0.0:4965 0.0.0.0:* LISTEN 1090/iptrans # lsof -i |grep 4965 iptrans 1090 root 21u IPv4 1764 TCP *:4965 (LISTEN) On that machine , the 'telnet ip-addr 4965' can get through . So which
Hati, lets see, you have machine 1 and machine 2
let us say you are sitting on machine 1 you are trying to telnet into machine 2 to port 4965
First sit on machine 2 and do telnet localhost 4965 Are you able to?
If yes, then telnet <machine 2 IP> 4965 If succesful try telnet from machine 1 using telnet <machine 2 IP> 4965
It is on the machine 2 you should be opening up the port 4965
Regards
Rajagopal
Hati, lets see, you have machine 1 and machine 2
let us say you are sitting on machine 1 you are trying to telnet into machine 2 to port 4965
First sit on machine 2 and do telnet localhost 4965 Are you able to?
If yes, then telnet <machine 2 IP> 4965 If succesful try telnet from machine 1 using telnet <machine 2 IP> 4965
It is on the machine 2 you should be opening up the port 4965
Regards
Rajagopal _______________________________________________ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Thank you for your reply . The actual scenario is as the following : I have machine#1 that I was in charge of its OS installation and I have remote access to a similar machine (machine#2) that both are running the same application program . On machine#2 console (its ip@172.16.17.131) , the following command can get through: #telnet 172.16.17.131 4965 But on my machine#1 console (its ip@172.16.17.132) , the following command cannot get through : #telnet 172.16.17.132 4965 With respect to the same OS and application installation , I want to know which package is missing from my OS installation so I try to just add it ?
Greetings,
On Wed, Mar 3, 2010 at 6:10 PM, hadi motamedi motamedi24@gmail.com wrote:
But on my machine#1 console (its ip@172.16.17.132) , the following command cannot get through : #telnet 172.16.17.132 4965
is telnetd installed?
is the telnet deamon running on machine #1?
Regards,
Rajagopal
Greetings,
On Wed, Mar 3, 2010 at 6:20 PM, Rajagopal Swaminathan raju.rajsand@gmail.com wrote:
Greetings,
On Wed, Mar 3, 2010 at 6:10 PM, hadi motamedi motamedi24@gmail.com wrote:
is telnetd installed?
# yum install telnet-server telnet
is the telnet deamon running on machine #1?
chkconfig telnet on
or from: http://www.cyberciti.biz/faq/how-do-i-turn-on-telnet-service-on-for-a-linuxf...
[quote] The configuration file for telnet is /etc/xinetd.d/telnet. To enable telnet server you need to open this file and make sure disable = no read as disable = yes. [unquote]
service xinetd restart or /etc/init.d/xinetd restart
Hope that helps...
Regards,
Rajagopal
Hi,
Greetings,
On Wed, Mar 3, 2010 at 6:20 PM, Rajagopal Swaminathan raju.rajsand@gmail.com wrote:
Greetings,
On Wed, Mar 3, 2010 at 6:10 PM, hadi motamedi motamedi24@gmail.com wrote:
is telnetd installed?
# yum install telnet-server telnet
is the telnet deamon running on machine #1?
chkconfig telnet on
or from: http://www.cyberciti.biz/faq/how-do-i-turn-on-telnet-service-on-for-a-linuxf...
[quote] The configuration file for telnet is /etc/xinetd.d/telnet. To enable telnet server you need to open this file and make sure disable = no read as disable = yes. [unquote]
service xinetd restart or /etc/init.d/xinetd restart
Why are you telling him to install a telnetd ?? He's trying to connect to a port using telnet (client) to see if a server is listening on it.
I doubt by the way if a missing package is the issue. Please check first if there is a server listening on tcp 4965 netstat -ltpn | grep 4965
the output should show you which application is listening on tcp/4965 if there no output, there's nothing listening and you should fix your application first (maybe it's not started ?).
If there's something listening on tcp/4965 you can try to use telnet localhost 4965
to see if you can connect or use telnet ip.nu.mb.er 4965
if the application is only listening on a single ip. use iptables -L -vnx | grep 4965 to see if theres a firewall rule blocking it (or accepting) if you have the firewall active (do you?)
Please let us knwo the outcome of these commands
Regards,
Michel
Greetings,
On Wed, Mar 3, 2010 at 6:35 PM, Michel van Deventer michel@van.deventer.cx wrote:
Hi,
Why are you telling him to install a telnetd ?? He's trying to connect to a port using telnet (client) to see if a server is listening on it.
duh.. I missed it.. sorry... /me tired I guess
regards
Rajagopal
is telnetd installed?
Yes , it is (as the telnet to ip address on both machines can get through).
is the telnet deamon running on machine #1? chkconfig telnet on
Yes , it is .
read as disable = yes. service xinetd restart
I tried to restart the daemon , but still telnet to port 4965 cannot get through .
On Wed, Mar 3, 2010 at 6:06 AM, hadi motamedi motamedi24@gmail.com wrote:
is telnetd installed?
Yes , it is (as the telnet to ip address on both machines can get through).
is the telnet deamon running on machine #1? chkconfig telnet on
Yes , it is .
read as disable = yes. service xinetd restart
I tried to restart the daemon , but still telnet to port 4965 cannot get through .
CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
There must be some reason for you to want to connect on that port. What is it? Why is that port significant?
If the 'missing' package was installed using yum, try yum list from each and compare the results. However, if you don't know that you are missing an application and just want to telnet for no reason, you are chasing a problem that doesn't exist.
You can also check /etc/services to see if that is a standard port and what may be using it.
On 3 Mar 2010, at 12:21, hadi motamedi motamedi24@gmail.com wrote:
How can I distinguish which package is missing from my CentOS server
What are you trying to achieve?
Ben
What are you trying to achieve?
Ben _______________________________________________ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
I do not want to re-install the OS with all of the packages selected from the installation media . I am seeking if I can find just the missing package . Thank you
On 3 Mar 2010, at 12:49, hadi motamedi motamedi24@gmail.com wrote:
I do not want to re-install the OS with all of the packages selected from the installation media .
I understand that. What do you want to achieve out of this whole process? What service do you expect to interact with over tcp?
Your posts elsewhere state that you are using RedHat 9 - is that correct?
Ben
On Mar 3, 2010, at 7:49 AM, hadi motamedi motamedi24@gmail.com wrote:
What are you trying to achieve?
Ben _______________________________________________ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
I do not want to re-install the OS with all of the packages selected from the installation media . I am seeking if I can find just the missing package .
Find the 'iptrans' program on the working box and if it was installed via RPM you can find the package it came from with:
# rpm -qf <full path to iptrans>
This will tell you the package it belongs to.
If that doesn't give you anything then you could always read server1's installation notes? There are installation notes are there?
-Ross
hadi motamedi wrote:
Thank you . How can I distinguish which package is missing from my CentOS server and try to just add it (rather than trying for a fresh CentOS re-installation) ? On another machine similar to mine , the output is as : # netstat -ant |grep 4965 tcp 0 0 0.0.0.0:4965 http://0.0.0.0:4965 0.0.0.0:* LISTEN # netstat -anp |grep 4965 tcp 0 0 0.0.0.0:4965 http://0.0.0.0:4965 0.0.0.0:* LISTEN 1090/iptrans # lsof -i |grep 4965 iptrans 1090 root 21u IPv4 1764 TCP *:4965 (LISTEN) On that machine , the 'telnet ip-addr 4965' can get through . So which package do I need to add to mine ?
The lsof output shows a program named iptrans is listening on 4965. Try to find the program using 'locate iptrans' on the machine that has it. Then use 'rpm -q --whatprovides pathname' to see what rpm package it was installed from. If it was installed from a yum repository and you have matching repositories set up, you should be able to duplicate it on the other machine with 'yum install packagename' (and perhaps some configuration afterwards). I don't recognize this program, though. Are you sure it came from an rpm package?
hadi motamedi wrote:
Thank you . How can I distinguish which package is missing from my CentOS server and try to just add it (rather than trying for a fresh CentOS re-installation) ? On another machine similar to mine , the output is as :
<snip>
The lsof output shows a program named iptrans is listening on 4965. Try
<snip>
packagename' (and perhaps some configuration afterwards). I don't recognize this program, though. Are you sure it came from an rpm package?
google linux iptrans, and it appears to be something for "IP transparency", which seems to pass along a real IP through something, not sure if it's a firewall, or a cluster head.
Are you using a cluster?
mark
On Wed, Mar 03, 2010 at 07:48:41AM -0600, Les Mikesell wrote:
the program using 'locate iptrans' on the machine that has it. Then use 'rpm -q --whatprovides pathname' to see what rpm package it was installed from. If it
Or simpler: rpm -qf pathname
packagename' (and perhaps some configuration afterwards). I don't recognize this program, though. Are you sure it came from an rpm package?
I don't recognise iptrans, either, and port 4965 doesn't appear to be commonly used. This could be a site-specific application...
The lsof output shows a program named iptrans is listening on 4965. Try to find the program using 'locate iptrans' on the machine that has it. Then use 'rpm -q --whatprovides pathname' to see what rpm package it was installed from. If it
The 'locate iptrans' shows difference between the two machines , so I need to find the missing package on mine . Thank you for your help
.. you just can not connect to empty ports. You need some service/daemon/program to listen that port first.
-- Eero _______________________________________________ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Thank you . I got the point . So it seems that some packages missing from my installation .
On 03/03/2010 10:26 PM, hadi motamedi wrote:
I issued 'iptables -L' but it is returning just the followings : 'Usage: /etc/rc.d/init.d/iptables {start|stop|restart|condrestart|status|panic|save}' Can you please let me know why?
Change directory out of /etc/init.d and into your homedirectory
As Eero has already told you, if iptables is not running, then it cannot be blocking ports. Use netstat to see what ports are listening on what IP's, and configure your application appropriately.
2010/3/3 Steve Walsh steve@nerdvana.net.au:
On 03/03/2010 10:26 PM, hadi motamedi wrote:
I issued 'iptables -L' but it is returning just the followings : 'Usage: /etc/rc.d/init.d/iptables {start|stop|restart|condrestart|status|panic|save}' Can you please let me know why?
Change directory out of /etc/init.d and into your homedirectory
As Eero has already told you, if iptables is not running, then it cannot be blocking ports. Use netstat to see what ports are listening on what IP's, and configure your application appropriately. _______________________________________________ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
In some (rare) case selinux can also cause problems.
try to disable selinux using setenforce "0"
-- Eero
-
Benjamin Donnachie -
Eero Volotinen -
hadi motamedi -
Les Mikesell -
m.roth＠5-cent.us -
Matt Iavarone -
Michel van Deventer -
Rajagopal Swaminathan -
Ross Walker -
Samuel Contesse -
Spook ZA -
Stephen Harris -
Steve Walsh