Re: iptable
by Patrick Dupre
Hello Ed,
Finally, I made it works, with vnc. remmina.
I just did not remember!!!!!!!!!!!!!
Thank for your help.
Regards.
>
> On 05/02/14 08:56, Patrick Dupre wrote:
> > I remember that I took the control on this machine.
> > but I cannot do it again.
> > Even in the past, I was able to use nomachine, but not anymore.
> >
> > with remmina, the only thing that I can do is a text session
> > I cannot use the nx, rdp,xdmcp session.
>
> You probably forgot to install remmina-plugins-vnc
>
> >
> > I can get: Command xqproxy not found on SSH server
> >
> > I am surprised that vncviewer does not work.
> > It works very well when I connect to a machine on the same lan
>
> I would not be surprised if another firewall is there....
>
> >
> > What do you think about this
> > http://stufs4u.wordpress.com/2014/02/25/install-and-configure-vnc-server-...
> > ?
>
> That is a "fairly" good write-up. However, it will not work as written since the instructions don't open port 5910.
>
> I would use vncserver@:0.service, or vncserver@:1.service, vncserver@:2.service, or vncserver@:3.service to keep things in line using the standard ports.
>
> >
> > It is confusing, because something is bizare. And I cannot remember what I did last
> > time. I have been through all my messages. But I do not understand!
>
>
> --
> Do not condemn the judgment of another because it differs from your own. You may both be wrong. -- Dandemis
> --
> users mailing list
> users(a)lists.fedoraproject.org
> To unsubscribe or change subscription options:
> https://admin.fedoraproject.org/mailman/listinfo/users
> Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
> Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
> Have a question? Ask away: http://ask.fedoraproject.org
===========================================================================
Patrick DUPRÉ | | email: pdupre(a)gmx.com
Laboratoire de Physico-Chimie de l'Atmosphère | |
Université du Littoral-Côte d'Opale | |
Tel. (33)-(0)3 28 23 76 12 | | Fax: 03 28 65 82 44
189A, avenue Maurice Schumann | | 59140 Dunkerque, France
===========================================================================
9 years, 11 months
Re: iptable
by Patrick Dupre
Thank again,
I remember that I took the control on this machine.
but I cannot do it again.
Even in the past, I was able to use nomachine, but not anymore.
with remmina, the only thing that I can do is a text session
I cannot use the nx, rdp,xdmcp session.
I can get: Command xqproxy not found on SSH server
I am surprised that vncviewer does not work.
It works very well when I connect to a machine on the same lan
What do you think about this
http://stufs4u.wordpress.com/2014/02/25/install-and-configure-vnc-server-...
?
It is confusing, because something is bizare. And I cannot remember what I did last
time. I have been through all my messages. But I do not understand!
Thank for ypour patience
> On 05/02/14 08:01, Patrick Dupre wrote:
> > Yes,
> > Thank to mind me.
> > In the mean time, the machine has been updated.
> > So the definitive conclusion is that I will never be able the access to this
> > machine because of the firewall?
> >
> > Can I just use the ssh?
> > By the way, I can sak that they opne the service for me. They will probably do it
> > if I aks exactly what I need.
> >
> > In addition, what if I go through a VPN?
> > In the past I set up a VPN, with the right instruction from the university.
> > But at this University, I not sure!!!
>
> You may want to go back and read the thread(s) from February.
>
> Recall that if you can "ssh" into the system from the outside you can use an SSH Tunnel to use VNC that way. Using a client such as "remmina" can make that easier.
>
> --
> Do not condemn the judgment of another because it differs from your own. You may both be wrong. -- Dandemis
> --
> users mailing list
> users(a)lists.fedoraproject.org
> To unsubscribe or change subscription options:
> https://admin.fedoraproject.org/mailman/listinfo/users
> Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
> Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
> Have a question? Ask away: http://ask.fedoraproject.org
===========================================================================
Patrick DUPRÉ | | email: pdupre(a)gmx.com
Laboratoire de Physico-Chimie de l'Atmosphère | |
Université du Littoral-Côte d'Opale | |
Tel. (33)-(0)3 28 23 76 12 | | Fax: 03 28 65 82 44
189A, avenue Maurice Schumann | | 59140 Dunkerque, France
===========================================================================
9 years, 11 months
Re: iptable
by Patrick Dupre
> ----- Original Message -----
> From: Ed Greshko
> Sent: 05/02/14 01:50 AM
> To: Community support for Fedora users
> Subject: Re: iptable
>
> On 05/02/14 07:37, Patrick Dupre wrote:
> > PORT STATE SERVICE
> > 5900/tcp filtered vnc
> > 5901/tcp filtered vnc-1
> > 5902/tcp filtered vnc-2
> > 5903/tcp filtered vnc-3
> >
> > But then,
> >
> > TigerVNC Viewer 64-bit v1.3.0 (20140319)
> > Built on Mar 19 2014 at 17:09:18
> > Copyright (C) 1999-2011 TigerVNC Team and many others (see README.txt)
> > See http://www.tigervnc.org for information on TigerVNC.
> >
> > Fri May 2 01:34:25 2014
> > CConn: unable connect to socket: No route to host (113)
>
> Where is the system running vncviewer/nmap in relation to the system running vncserver?
>
> The above shows "filtered" which means the port is being blocked/filtered by a firewall. Back in February, the configuration you were working with had a firewall/router between two systems over which you had not control.
Yes,
Thank to mind me.
In the mean time, the machine has been updated.
So the definitive conclusion is that I will never be able the access to this
machine because of the firewall?
Can I just use the ssh?
By the way, I can sak that they opne the service for me. They will probably do it
if I aks exactly what I need.
In addition, what if I go through a VPN?
In the past I set up a VPN, with the right instruction from the university.
But at this University, I not sure!!!
===========================================================================
Patrick DUPRÉ | | email: pdupre(a)gmx.com
Laboratoire de Physico-Chimie de l'Atmosphère | |
Université du Littoral-Côte d'Opale | |
Tel. (33)-(0)3 28 23 76 12 | | Fax: 03 28 65 82 44
189A, avenue Maurice Schumann | | 59140 Dunkerque, France
===========================================================================
9 years, 11 months
Re: iptable
by Patrick Dupre
> ----- Original Message -----
> From: Ed Greshko
> Sent: 05/02/14 01:28 AM
> To: Community support for Fedora users
> Subject: Re: iptable
>
> On 05/02/14 07:24, Patrick Dupre wrote:
> > Thank,
> >
> > Now it better,
> > ACCEPT tcp -- anywhere anywhere tcp dpts:rfb:5903 ctstate NEW
> > ACCEPT tcp -- anywhere anywhere tcp dpt:5901 ctstate NEW
> >
> > but the port are still closed.
>
> Ports will show as "closed" if there is no process listening on the port.
>
> --
PORT STATE SERVICE
5900/tcp filtered vnc
5901/tcp filtered vnc-1
5902/tcp filtered vnc-2
5903/tcp filtered vnc-3
But then,
TigerVNC Viewer 64-bit v1.3.0 (20140319)
Built on Mar 19 2014 at 17:09:18
Copyright (C) 1999-2011 TigerVNC Team and many others (see README.txt)
See http://www.tigervnc.org for information on TigerVNC.
Fri May 2 01:34:25 2014
CConn: unable connect to socket: No route to host (113)
firewalld.service - firewalld - dynamic firewall daemon
Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled)
Active: active (running) since Fri 2014-05-02 01:28:44 CEST; 8min ago
Main PID: 25521 (firewalld)
CGroup: /system.slice/firewalld.service
└─25521 /usr/bin/python -Es /usr/sbin/firewalld --nofork --nopid
May 02 01:28:44 Homere systemd[1]: Starting firewalld - dynamic firewall daemon...
May 02 01:28:44 Homere systemd[1]: Started firewalld - dynamic firewall daemon.
===========================================================================
Patrick DUPRÉ | | email: pdupre(a)gmx.com
Laboratoire de Physico-Chimie de l'Atmosphère | |
Université du Littoral-Côte d'Opale | |
Tel. (33)-(0)3 28 23 76 12 | | Fax: 03 28 65 82 44
189A, avenue Maurice Schumann | | 59140 Dunkerque, France
===========================================================================
9 years, 11 months
Re: iptable
by Patrick Dupre
iptables -L
gives:
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Something is wrong, but I cannot fix it
> ----- Original Message -----
> From: Edward M
> Sent: 05/02/14 12:49 AM
> To: users(a)lists.fedoraproject.org
> Subject: Re: iptable
>
> On 5/1/2014 3:33 PM, Ed Greshko wrote:
> > On 05/02/14 06:24, Edward M wrote:
> >> On 5/1/2014 12:51 PM, Patrick Dupre wrote:
> >>> How can I manage the iptable manually?
> >>> There is no
> >>> /etc/sysconfig/iptables
> >>>
> >>> Right now I need to turn on the port 5900 open for vnc
> >>
> >>
> >> Hello,
> >> Probably be of some help:
> >> http://fedoraproject.org/wiki/How_to_edit_iptables_rules
> >
> > You do know that this advice would only be valid if the OP is running iptables.service and not the default firewalld.service.
> >
>
> No I was not sure that is why i said "probably be of some help".
>
> --
> users mailing list
> users(a)lists.fedoraproject.org
> To unsubscribe or change subscription options:
> https://admin.fedoraproject.org/mailman/listinfo/users
> Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
> Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
> Have a question? Ask away: http://ask.fedoraproject.org
===========================================================================
Patrick DUPRÉ | | email: pdupre(a)gmx.com
Laboratoire de Physico-Chimie de l'Atmosphère | |
Université du Littoral-Côte d'Opale | |
Tel. (33)-(0)3 28 23 76 12 | | Fax: 03 28 65 82 44
189A, avenue Maurice Schumann | | 59140 Dunkerque, France
===========================================================================
9 years, 11 months
Re: iptable
by Patrick Dupre
OK,
Thank,
Now it better,
ACCEPT tcp -- anywhere anywhere tcp dpts:rfb:5903 ctstate NEW
ACCEPT tcp -- anywhere anywhere tcp dpt:5901 ctstate NEW
but the port are still closed.
> ----- Original Message -----
> From: Ed Greshko
> Sent: 05/02/14 01:09 AM
> To: Community support for Fedora users
> Subject: Re: iptable
>
> On 05/02/14 06:57, Patrick Dupre wrote:
> > iptables -L
> >
> > gives:
> >
> > Chain INPUT (policy ACCEPT)
> > target prot opt source destination
> >
> > Chain FORWARD (policy ACCEPT)
> > target prot opt source destination
> >
> > Chain OUTPUT (policy ACCEPT)
> > target prot opt source destination
> >
> > Something is wrong, but I cannot fix it
> >
> >
>
> systemctl status firewalld.service
>
> The question is, is the firewall not running or the dbus service has a problem preventing the tables from being created.
>
> --
> Do not condemn the judgment of another because it differs from your own. You may both be wrong. -- Dandemis
> --
> users mailing list
> users(a)lists.fedoraproject.org
> To unsubscribe or change subscription options:
> https://admin.fedoraproject.org/mailman/listinfo/users
> Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
> Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
> Have a question? Ask away: http://ask.fedoraproject.org
===========================================================================
Patrick DUPRÉ | | email: pdupre(a)gmx.com
Laboratoire de Physico-Chimie de l'Atmosphère | |
Université du Littoral-Côte d'Opale | |
Tel. (33)-(0)3 28 23 76 12 | | Fax: 03 28 65 82 44
189A, avenue Maurice Schumann | | 59140 Dunkerque, France
===========================================================================
9 years, 11 months
Re: iptable
by Patrick Dupre
systemctl status dbus.service
dbus.service - D-Bus System Message Bus
Loaded: loaded (/usr/lib/systemd/system/dbus.service; static)
Active: active (running) since Thu 2014-05-01 18:30:32 CEST; 6h ago
Main PID: 965 (dbus-daemon)
CGroup: /system.slice/dbus.service
├─ 965 /bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
├─4753 /usr/bin/python /usr/share/system-config-services/system-config-services-mechanism.py
└─4755 /usr/libexec/gam_server
May 02 01:24:44 Homere dbus-daemon[965]: follow_name_owner_changes=follow_name_owner_changes)
May 02 01:24:44 Homere dbus-daemon[965]: File "/usr/lib/python2.7/site-packages/dbus/proxies.py", line 248, in __init__
May 02 01:24:44 Homere dbus-daemon[965]: self._named_service = conn.activate_name_owner(bus_name)
May 02 01:24:44 Homere dbus-daemon[965]: File "/usr/lib/python2.7/site-packages/dbus/bus.py", line 175, in activate_..._owner
May 02 01:24:44 Homere dbus-daemon[965]: return self.get_name_owner(bus_name)
May 02 01:24:44 Homere dbus-daemon[965]: File "/usr/lib/python2.7/site-packages/dbus/bus.py", line 361, in get_name_owner
May 02 01:24:44 Homere dbus-daemon[965]: 's', (bus_name,), **keywords)
May 02 01:24:44 Homere dbus-daemon[965]: File "/usr/lib/python2.7/site-packages/dbus/connection.py", line 651, in ca...ocking
May 02 01:24:44 Homere dbus-daemon[965]: message, timeout)
May 02 01:24:44 Homere dbus-daemon[965]: DBusException: org.freedesktop.DBus.Error.NoReply: Did not receive a reply....roken.
Hint: Some lines were ellipsized, use -l to show in full.
]# systemctl status dbus.socket
dbus.socket - D-Bus System Message Bus Socket
Loaded: loaded (/usr/lib/systemd/system/dbus.socket; static)
Active: active (running) since Thu 2014-05-01 18:30:31 CEST; 6h ago
Listen: /var/run/dbus/system_bus_socket (Stream)
> ----- Original Message -----
> From: Ed Greshko
> Sent: 05/02/14 01:05 AM
> To: Community support for Fedora users
> Subject: Re: iptable
>
> On 05/02/14 06:52, Patrick Dupre wrote:
> > Oh I now,
> > but on this machine the 5900-5903 port are filtering and I cannot open them.
> > using firewall-config, I get:
> >
> > ERROR:dbus.proxies:Introspect error on :1.80:/org/fedoraproject/Config/Services/ServiceHerders/XinetdServiceHerder: dbus.exceptions.DBusException: org.freedesktop.DBus.Error.NoReply: Did not receive a reply. Possible causes include: the remote application did not send a reply, the message bus security policy blocked the reply, the reply timeout expired, or the network connection was broken.
> >
> > How can I fix it?
>
> systemctl status dbus.service
> systemctl status dbus.socket
>
> --
> Do not condemn the judgment of another because it differs from your own. You may both be wrong. -- Dandemis
> --
> users mailing list
> users(a)lists.fedoraproject.org
> To unsubscribe or change subscription options:
> https://admin.fedoraproject.org/mailman/listinfo/users
> Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
> Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
> Have a question? Ask away: http://ask.fedoraproject.org
===========================================================================
Patrick DUPRÉ | | email: pdupre(a)gmx.com
Laboratoire de Physico-Chimie de l'Atmosphère | |
Université du Littoral-Côte d'Opale | |
Tel. (33)-(0)3 28 23 76 12 | | Fax: 03 28 65 82 44
189A, avenue Maurice Schumann | | 59140 Dunkerque, France
===========================================================================
9 years, 11 months
Re: iptable
by Patrick Dupre
> ----- Original Message -----
> From: Ed Greshko
> Sent: 05/02/14 12:23 AM
> To: Community support for Fedora users
> Subject: Re: iptable
>
> On 05/02/14 03:51, Patrick Dupre wrote:
> > Hello,
> >
> > My firewall-config does not work properly (I am ready posted about).
> > How can I manage the iptable manually?
> > There is no
> > /etc/sysconfig/iptables
> >
> > Right now I need to turn on the port 5900 open for vnc
> >
>
> Are you running into the same problem a user had back in February? The subject line at that time, if I remember correctly, was along the lines of "vncviewer".
>
> FWIW, vnc works fine here upon opening the necessary ports via firewall-config.
Oh I now,
but on this machine the 5900-5903 port are filtering and I cannot open them.
using firewall-config, I get:
ERROR:dbus.proxies:Introspect error on :1.80:/org/fedoraproject/Config/Services/ServiceHerders/XinetdServiceHerder: dbus.exceptions.DBusException: org.freedesktop.DBus.Error.NoReply: Did not receive a reply. Possible causes include: the remote application did not send a reply, the message bus security policy blocked the reply, the reply timeout expired, or the network connection was broken.
How can I fix it?
Thank.
===========================================================================
Patrick DUPRÉ | | email: pdupre(a)gmx.com
Laboratoire de Physico-Chimie de l'Atmosphère | |
Université du Littoral-Côte d'Opale | |
Tel. (33)-(0)3 28 23 76 12 | | Fax: 03 28 65 82 44
189A, avenue Maurice Schumann | | 59140 Dunkerque, France
===========================================================================
9 years, 11 months
iptable
by Patrick Dupre
Hello,
My firewall-config does not work properly (I am ready posted about).
How can I manage the iptable manually?
There is no
/etc/sysconfig/iptables
Right now I need to turn on the port 5900 open for vnc
Thank.
===========================================================================
Patrick DUPRÉ | | email: pdupre(a)gmx.com
Laboratoire de Physico-Chimie de l'Atmosphère | |
Université du Littoral-Côte d'Opale | |
Tel. (33)-(0)3 28 23 76 12 | | Fax: 03 28 65 82 44
189A, avenue Maurice Schumann | | 59140 Dunkerque, France
===========================================================================
9 years, 11 months
sshd containers?
by Tom Horsley
We have some ancient systems we use to build backward compatible
software. I was thinking about copying the root/usr stuff to
a faster more modern system and using a chrooted sshd to get
to each build system (now just a separate root on a single
build system).
But now I see random information floating around about
linux containers and lightweight virtualization. Anyone
who understands this stuff know if it might be more appropriate
than a "simple" chroot for what I want to do?
9 years, 11 months