ssh and port 22 problem, cont.
by Gerhard Magnus
Greetings!
I've made some progress on troubleshooting this "ssh & port 22 problem".
Here was my original post:
When I try to connect from a remote machine to my one at home
using ssh I get the error message "ssh: connect to host 64.146.133.1 port
22: Connection refused" -- but using ssh in the outgoing direction (i.e.
from home to the remote location) works fine.
Here's what's happened since:
I have two machines (PuteA and PuteB) sharing an ActionTec DSL modem. The IP
I was using was that of my "Gateway" ISP (64.146.133.1) -- an error. But
when I used the correct, static IP address of the ActionTec
(64.146.133.52) I got this message:
ssh: connect to host 64.146.133.52 port22: Connection refused
I thought I had port forwarding (for port 22) set correctly on the modem. For
troubleshooting, my ISP advised me to run "tcpdump -n host 192.168.0.2" on
PuteA, where 192.168.0.2 is the "internal" IP of PuteA. Then I logged on
to the remote location from PuteB and tried to ssh from there to PuteA
using the static IP address. The ssh from the remote location timed out
with the same "port 22: connection refused" message. The tcpdump on Pute
A gave this message:
> tcpdump: listening on eth0
> 17:27:33.662753 arp who-has 192.168.0.2 tell 192.168.0.1
where 182.168.0.1 is the "internal" IP of the modem. (Sorry if I have
this terminology wrong.)
My ISP says the problem is the firewall on PuteA and that he doesn't do linux
firewalls.
Here are my replies to the people who responded to my first post:
(1) "Do you have the firewall configured to deny incoming packets to port
22?"
How do I check this?
(2) "You need to check that sshd is running on your system."
Yes. I comes up with each boot. Also "service sshd status" gives
"sshd (pid 787) is running".
(3) "sshd uses /etc/hosts.allow and /etc/hosts.deny. Check that they are
configured to allow your remote machine in."
Both files have only commented lines.
(4) "Also, if your /etc/ssh/sshd_config file has VerifyReverseMapping
turned on, you will get kicked out if your remote address does not work
with a reverse dns lookup."
There's a "VerifyReverseMapping no" line in the file but it's been commented
out.
(5) "Just to be sure: when you are at home machine, try 'ssh localhost'.
If this works, you probably need to check your firewall."
It seems to work -- I ssh to the machine itself.
(6) "This is common on every system I have ever loaded with FC2. Your
iptables are blocking the connection. You can do one of the following:
iptables -A INPUT -m tcp -p tcp --dport 22 - j ACCEPT"
I tried this. The ssh to PuteA from the remote location still times out.
(7) "Oh yes I also took out the REDHAT firewall entrie as I dont have a
clue as to how to work with it."
I've fiddled endlessly with this "system tool" at each of the three levels
of security as well as using the "customize" option to set eth0 as a
trusted device and to allow incoming ssh. It doesn't show the settings
that actually exist.
(8) "If your fedora box is connected directly to a DSL modem, you should
be able to find your IP address by running ifconfig from the command
line and looking for 'inet addr:' (probably under 'eth0')."
eth0 Link encap:Ethernet HWaddr 00:40:05:81:60:8E
inet addr:192.168.0.4 Bcast:192.168.0.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:2184 errors:0 dropped:0 overruns:0 frame:0
TX packets:2005 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:1122075 (1.0 Mb) TX bytes:190214 (185.7 Kb)
Interrupt:5 Base address:0x3000
Could this be the problem -- the "inet addr" of 192.168.0.4? As far as I
can tell, the modem is 192.168.0.1, PuteA is 192.168.0.2, and PuteB is
192.168.0.3. I haven't set anything as 192.168.0.4.
(9) "nmap 64.146.133.52"
(The 1598 ports scanned but not shown below are in state: closed)
Port State Service
23/tcp open telnet
53/tcp open domain
80/tcp open http
Shouldn't ssh be here? And what's telnet doing open? The books have me
scared to death of this... hackers, crackers, script kiddies, etc.
Thanks for the help!
Jerry Magnus
16 years
Can scp be used to update a directory?
by Anne Wilson
The scp man page is not very verbose ;-) I want to copy a directory,
recursively, over the lan, but only those files that are new or updated.
MS-DOS could do this back in ...Ummm.... so I can't believe it can't be done
in scp, but I can't see how to do it.
Anne
16 years, 2 months
eth0 dont start at bootime
by Wolfgang Morawetz
Hi,
each time i boot fedora i must enable by hand the eth0 device (by the
gui congig-tool).
What must i do to enable the device at boot?
# cat /etc/sysconfig/network
NETWORKING=yes
HOSTNAME=bugs.acme
# cat /etc/sysconfig/networking/devices/ifcfg-eth0
# cat /etc/sysconfig/networking/profiles/default/ifcfg-eth0
# cat /etc/sysconfig/network-scripts/ifcfg-eth0
all 3 the same output
# Macronix, Inc. [MXIC]|MX987x5
DEVICE=eth0
BOOTPROTO=dhcp
HWADDR=00:50:BF:76:39:8F
ONBOOT=yes
TYPE=Ethernet
DHCP_HOSTNAME=bugs.acme
USERCTL=no
PEERDNS=no
Thx
Wolfgang
alias wfx (http://teg.sf.net)
16 years, 3 months
Yum on x86_64
by Gareth Bult
Hi,
I seem to have (finally :) ) acquired a complete(ish) / working x86_64
system .. but I'm still having trouble with a few bits, not least "yum".
I get;
Server: Fedora Core 1 - i386 - Base
Server: Fedora Core 1 - i386 - Released Updates
Server: Fedora Core 1 - i386 - Unreleased Updates
Finding updated packages
Traceback (most recent call last):
File "/usr/bin/yum", line 60, in ?
yummain.main(sys.argv[1:])
File "yummain.py", line 204, in main
File "clientStuff.py", line 363, in getupdatedhdrlist
File "clientStuff.py", line 409, in bestversion
IndexError: list index out of range
[root@squizzey oddjob]#
(This is a modified system [2.6.0-test11] however it seems to run well)
Pointing it at mozilla's channel for SeaMonkey seems to work if I
disable the default channels, however...
Anyone any ideas ?
(I was sort of expecting to see it say "no x86_64 updates supported yet"
as opposed to a complete crash)
Also, can yum pull SRPMS and rebuild them ?
tia
Gareth.
16 years, 3 months
Python, RPM error
by Austin Isler
I apologize if this is in the archives, and I missed it.
I updated rpm a while back with:
# yum -y update rpm
I believe it installed a python2.4 package as well. Ever since then, I
have had problems with python and rpm. I get this error when trying to
use yum:
Traceback (most recent call last):
File "/usr/bin/yum", line 6, in ?
import yummain
File "/usr/share/yum-cli/yummain.py", line 23, in ?
import yum
File "/usr/lib/python2.3/site-packages/yum/__init__.py", line 21, in ?
import rpm
ImportError: No module named rpm
Appreciate the help,
Austin
16 years, 8 months
firefox bookmarks
by Richard E Miles
Is it possible to save the firefox bookmarks so that when I do a clean install
of FC4 I can reload them?
I tried to cp the bookmarks.html file back into the /home/rmiles/.mozilla/firefox/0qem39dn.default directory but it did not
restore them from an earlier saving of this file.
It would be nice to be able to reset the bookmarks that I had in FC 3 to the FC 4
firefox.
--
Richard E Miles
Federal Way WA. USA
registered linux user 46097
16 years, 9 months
dump/restore (or "star") and SELinux problems
by Kayvan A. Sylvan
Hi folks,
I am trying again. I haven't gotten an answer that works yet and hoping that
people who know more about SELinux and Fedora can see this and suggest
a solution (or at least a way to investigate).
My goal: To be able to reszie a partition (or rearrange filesystems) without
losing any data or meta-data.
parted is useless, since it won't handle the xattr filesystem data.
I used dump to create a filesystem backup, then used the FC5 Install DVD
to go into rescue mode and restore the dump. That seem to work okay for
the file data. However, for each and every file, I get the message:
restore: lsetxattr ./filename_being_restored failed: Invalid argument
Using "ls -Z", I see that all the files end up being unlabeled (or they
are in the unlabeled_t context).
These files were all set up in Fedora FC4, using the targeted policy.
When I am booting up using the FC5 Install DVD ("linux rescue"), the SELinux
startup shows:
security: 3 users, 6 roles, 1161 types, 135 bools, 1 sens, 256 cats
security: 55 classes, 38679 rules
SELinux: Completing initialization.
SELinux: Setting up existing superblocks.
SELinux: initialized (dev loop0, type squashfs), not configured for labeling
SELinux: initialized (dev usbfs, type usbfs), uses genfs_contexts
SELinux: initialized (dev ramfs, type ramfs), uses genfs_contexts
SELinux: initialized (dev ramfs, type ramfs), uses genfs_contexts
SELinux: initialized (dev tmpfs, type tmpfs), uses transition SIDs
SELinux: initialized (dev debugfs, type debugfs), uses genfs_contexts
SELinux: initialized (dev selinuxfs, type selinuxfs), uses genfs_contexts
SELinux: initialized (dev mqueue, type mqueue), uses transition SIDs
SELinux: initialized (dev hugetlbfs, type hugetlbfs), uses genfs_contexts
SELinux: initialized (dev devpts, type devpts), uses transition SIDs
SELinux: initialized (dev eventpollfs, type eventpollfs), uses genfs_contexts
SELinux: initialized (dev inotifyfs, type inotifyfs), uses genfs_contexts
SELinux: initialized (dev tmpfs, type tmpfs), uses transition SIDs
SELinux: initialized (dev futexfs, type futexfs), uses genfs_contexts
SELinux: initialized (dev pipefs, type pipefs), uses task SIDs
SELinux: initialized (dev sockfs, type sockfs), uses task SIDs
SELinux: initialized (dev cpuset, type cpuset), not configured for labeling
SELinux: initialized (dev proc, type proc), uses genfs_contexts
SELinux: initialized (dev bdev, type bdev), uses genfs_contexts
SELinux: initialized (dev rootfs, type rootfs), uses genfs_contexts
SELinux: initialized (dev sysfs, type sysfs), uses genfs_contexts
I have also tried using "star" with the following args:
star -v -c -xdev -sparse -acl -link-dirs level=0 -wtardumps \
f=root.star -C / .
And then, when booted into the rescue mode, did the following to extract:
star -xpU -restore f=root.star
This produced the same result. The files end up being unlabeled.
I am wondering if I have to have the same SELinux policy loaded while
in the rescue mode in order to avoid the "lsetxattr: invalid argument"
error? How would I go about doing that?
Thanks for any help!
---Kayvan
--
Kayvan A. Sylvan | Proud husband of | Father to my kids:
Sylvan Associates, Inc. | Laura Isabella Sylvan, | Katherine Yelena (8/8/89)
http://sylvan.com/~kayvan | my beautiful Queen. | Robin Gregory (2/28/92)
16 years, 11 months
Installing JAVA
by Michael Wright
? Need help on how i can install java
The other problem i have with the terminal it wont let me download the new cpanel.. you can find them here at http://www.cpanel.com
17 years, 1 month
BUG: spinlock wrong CPU on CPU#1, fgBT878/1849 (Not tainted)
by Alan McIvor
Hi,
I'm trying to upgrade a device driver from FC2 to FC5 and am running
into the problem shown below. This is on a hyperthreading P4 3GHz
running kernel 2.6.15-1.2054_FC5smp. It also happens using kernel
2.6.16-1.2096_FC5smp. There are 16 devices in the machine. For each
there is a fgBT878 process, running at the max SCHED_FIFO
priority. If I reduce the number of devices to 1 or 2, the problem
doesn't appear to happen (i.e., with 16 devices the panic happens
pretty much straight away, with 1 or 2 devices I have run for an
hour). I have no problems with a non-SMP kernel.
What sort of errors should I be looking for in my driver code?
Thanks
Alan McIvor
Reveal Limited
[root@d915 ~]# ok
ok
BUG: spinlock wrong CPU on CPU#1, fgBT878/1849 (Not tainted)
lock: d01b7ef0, .magic: dead4ead, .owner: fgBT878/1849, .owner_cpu: 0
[<c01d6501>] spin_bug+0x87/0xe9 [<c01d65ba>] _raw_spin_unlock+0x57/0x6c
[<c02f2232>] _spin_unlock_irqrestore+0x8/0xc [<d01b0ab0>] bttv_do_ioctl+0x3d7/0x74e [bt878_c]
[<c011d6a9>] activate_task+0x9d/0xaa [<c011da09>] try_to_wake_up+0x353/0x35d
[<d01aa34d>] video_usercopy+0x119/0x18d [videodev] [<c011c78f>] __wake_up_common+0x2f/0x53
[<c02f2156>] __down+0xce/0x107 [<c0136bb7>] hrtimer_cancel+0xa/0x10
[<c02f1b37>] schedule_hrtimer+0x33/0x6e [<c011da13>] default_wake_function+0x0/0xc
[<d01b06d6>] bttv_ioctl+0xe/0x11 [bt878_c] [<d01b06d9>] bttv_do_ioctl+0x0/0x74e [bt878_c]
[<c01717c3>] do_ioctl+0x47/0x5d [<c0171a23>] vfs_ioctl+0x24a/0x25c
[<c0171a7d>] sys_ioctl+0x48/0x5f [<c0103d25>] sysenter_past_esp+0x56/0x79
Kernel panic - not syncing: bad locking
[<c01234b6>] panic+0x3e/0x174 [<c01d6524>] spin_bug+0xaa/0xe9
[<c01d65ba>] _raw_spin_unlock+0x57/0x6c [<c02f2232>] _spin_unlock_irqrestore+0x8/0xc
[<d01b0ab0>] bttv_do_ioctl+0x3d7/0x74e [bt878_c] [<c011d6a9>] activate_task+0x9d/0xaa
[<c011da09>] try_to_wake_up+0x353/0x35d [<d01aa34d>] video_usercopy+0x119/0x18d [videodev]
[<c011c78f>] __wake_up_common+0x2f/0x53 [<c02f2156>] __down+0xce/0x107
[<c0136bb7>] hrtimer_cancel+0xa/0x10 [<c02f1b37>] schedule_hrtimer+0x33/0x6e
[<c011da13>] default_wake_function+0x0/0xc [<d01b06d6>] bttv_ioctl+0xe/0x11 [bt878_c]
[<d01b06d9>] bttv_do_ioctl+0x0/0x74e [bt878_c] [<c01717c3>] do_ioctl+0x47/0x5d
[<c0171a23>] vfs_ioctl+0x24a/0x25c [<c0171a7d>] sys_ioctl+0x48/0x5f
[<c0103d25>] sysenter_past_esp+0x56/0x79
<0>BUG: spinlock lockup on CPU#0, swapper/0, d01b7ef0 (Not tainted)
[<c01d6727>] _raw_spin_lock+0xb9/0xd7
[<d01b0263>] bttv_irq+0x36d/0x42e [bt878_c] [<c01456fe>] handle_IRQ_event+0x23/0x4c
[<c01457b4>] __do_IRQ+0x8d/0xdd [<c0105e8e>] do_IRQ+0x60/0x7b
=======================
[<c010474e>] common_interrupt+0x1a/0x20 [<c0102f2e>] mwait_idle+0x1f/0x33
[<c0102ef6>] cpu_idle+0x8f/0xa8 [<c03c8715>] start_kernel+0x2fe/0x304
17 years, 2 months
Re: bacula server
by RYAN M. vAN GINNEKEN
Thanks again mostly u/we got it to work so far. However it is asking for a pile of dependancies. I know give a guy an inch and he will try to take a mile or km here in Canada. Is there a way to install without any gui stuff or mabey i am wrong mabey there is no gui stuff. Some of the dependancies for those dependancies are X11 related.
I do not have any X11 stuff on this box it has no xwindows/gnome system and is minimum install Command prompt only. So before i go ahead and make a big mess of my faily clean fedora box do i really need all these or is there a way to turn some of them off.
Thanks again and sorry about top post i think my clock was messed up not sure how it happend but should be fixed now.
----- Original Message -----
From: Paul Howarth <paul(a)city-fan.org>
To: For users of Fedora Core releases <fedora-list(a)redhat.com>
Sent: Tuesday, March 14, 2006 1:10:02 AM GMT-0700
Subject: Re: bacula server
On Mon, 2006-03-13 at 17:11 -0700, RYAN M. vAN GINNEKEN wrote:
> First off thanks to all for your tremendous help without it i would have probably given up on bacula by now. Lets just say it is a probably a good thing the fedora box is remote so i cannot physically get to it. Got C++ installed managed to get the extras working and seem to have the rpmbuildtree in my home directory. Looks like i am on to a whole new set of problems now, but this is great i think this means progress right?
>
> rpmbuild]$ ls
> bacula-1.38.5-4.src.rpm BUILD RPMS SOURCES SPECS SRPMS
> [rmvg@shoemasters rpmbuild]$ rpmbuild --rebuild --define 'fc3 1' --define 'build_mysql 1' --define 'build_mysql4 1' bacula-1.38.5-4.src.rpm
> Installing bacula-1.38.5-4.src.rpm
> warning: user sbarn does not exist - using root
> warning: user sbarn does not exist - using root
> warning: user sbarn does not exist - using root
> warning: user sbarn does not exist - using root
> warning: user sbarn does not exist - using root
> warning: user sbarn does not exist - using root
> error: You must specify a platform. Please examine the spec file.
> error: line 67: Unknown tag: exit 1
We got the defines wrong. Try this:
$ rpmbuild --rebuild \
--define 'build_fc3 1' \
--define 'build_mysql4 1' \
bacula-1.38.5-4.src.rpm
> ps. I am unaware of top posting not sure what u mean, none of the other lists i am on seem to notice anything. Is this message top posted too?
Yes, it is. See here for an explanation:
http://en.wikipedia.org/wiki/Top-posting
Cheers, Paul.
--
fedora-list mailing list
fedora-list(a)redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
--
Computer King/CaNMail
http://www.computerking.ca http://www.canmail.org
Sales, Service, and Hosting
Email, Data, and Web Packages
Ask about web design specials
Affiliates
http://www.computerking.ca/pages/links/affiliates/affiliates.htm
Maybe Computer Science should be in the College of Theology. -- R. S. Barton
17 years, 3 months