blocked ports

[DataVampire]

Hi guys i have a wiered one for you and i hope to god you can help me, i have been bashing my head for aorund 3 days with aorund 3 hours of sleep.


i have installed fedora 13 with the help of the the guide a very nice one i might add, with the ispconfig 3 one.


now here is the problem, i have been having dns problems since day one, i have been racking my brains about this. then a big bright shiny light bulb apeared above my head.

Blocked ports, no chance i wisper to my self, and yes guys admit it from time to time we talk in our heads, anyhow to the problem.

port 21/ and port 53 is blocked in my server and some others too.

When i installed fedora as per instructions i turned off selinux stoped the fedora firewall i have no idea what could be blocking the ports. its not my router i have turned that off(even though before i forwarded every port to man).

I have contacted my isp and double checked they was not blocking the port, and sure as hell they confirmed they are not blocking the ports, infact (they brag) we are one of few isps in the uk that do nto block any ports.

Anyhow is there anything else that could be blocking ports

[root@server1 ~]# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination

Chain FORWARD (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination [root@server1 ~]#

Please help save my sanity

Thank you

[Mark_NL]

- Your iptables are clear
- Your isp doesn't block any ports

netstat -tapn, gives your the processes running on the ports?
can you "telnet ip port" to the ports from localhost? from lan? from wan?

though you still haven't really explained your problem, but i assume you cannot ftp nor query your server for dns requests?

[DataVampire]

Hi there thank you for the response, im trying to get my domain name to resolve to my server on investigating i discovered that most of the ports are blocked, to determin this i used shields up and whats my ip port scanners. they both confirmed that quite a few ports needed to be opened to run a server.

Again my isp does not block any ports.
I had every single port forwarded in my router i even created a dmz for my server via my router. that did not work so i ended up turning off my routers firewall alltogether until the problem is sorted.

output of netstat -tapn

[root@server1 ~]# netstat -tapn
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:49406 0.0.0.0:* LISTEN 1409/rpc.statd
tcp 0 0 0.0.0.0:993 0.0.0.0:* LISTEN 1712/dovecot
tcp 0 0 0.0.0.0:995 0.0.0.0:* LISTEN 1712/dovecot
tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN 1689/mysqld
tcp 0 0 0.0.0.0:110 0.0.0.0:* LISTEN 1712/dovecot
tcp 0 0 0.0.0.0:143 0.0.0.0:* LISTEN 1712/dovecot
tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN 1365/rpcbind
tcp 0 0 0.0.0.0:8788 0.0.0.0:* LISTEN 1790/hcremoting
tcp 0 0 0.0.0.0:8789 0.0.0.0:* LISTEN 1793/hcserver
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1563/sshd
tcp 0 0 127.0.0.1:631 0.0.0.0:* LISTEN 1453/cupsd
tcp 0 0 0.0.0.0:25 0.0.0.0:* LISTEN 1730/sendmail: acce
tcp 0 0 127.0.0.1:57668 127.0.0.1:3306 TIME_WAIT -
tcp 0 0 127.0.0.1:57664 127.0.0.1:3306 TIME_WAIT -
tcp 0 0 192.168.2.8:43255 192.168.2.8:8788 TIME_WAIT -
tcp 0 0 127.0.0.1:57684 127.0.0.1:3306 TIME_WAIT -
tcp 0 0 127.0.0.1:57674 127.0.0.1:3306 TIME_WAIT -
tcp 0 0 127.0.0.1:57686 127.0.0.1:3306 TIME_WAIT -
tcp 0 0 127.0.0.1:57660 127.0.0.1:3306 TIME_WAIT -
tcp 0 0 127.0.0.1:57685 127.0.0.1:3306 TIME_WAIT -
tcp 0 0 127.0.0.1:57663 127.0.0.1:3306 TIME_WAIT -
tcp 0 0 127.0.0.1:57673 127.0.0.1:3306 TIME_WAIT -
tcp 0 0 127.0.0.1:57687 127.0.0.1:3306 TIME_WAIT -
tcp 0 0 127.0.0.1:57656 127.0.0.1:3306 TIME_WAIT -
tcp 0 0 127.0.0.1:57678 127.0.0.1:3306 TIME_WAIT -
tcp 0 0 127.0.0.1:57690 127.0.0.1:3306 TIME_WAIT -
tcp 0 0 127.0.0.1:57666 127.0.0.1:3306 TIME_WAIT -
tcp 0 0 192.168.2.8:43263 192.168.2.8:8788 TIME_WAIT -
tcp 0 0 127.0.0.1:57683 127.0.0.1:3306 TIME_WAIT -
tcp 0 0 127.0.0.1:57675 127.0.0.1:3306 TIME_WAIT -
tcp 0 0 127.0.0.1:57655 127.0.0.1:3306 TIME_WAIT -
tcp 0 0 127.0.0.1:57676 127.0.0.1:3306 TIME_WAIT -
tcp 0 0 127.0.0.1:57665 127.0.0.1:3306 TIME_WAIT -
tcp 0 0 127.0.0.1:57659 127.0.0.1:3306 TIME_WAIT -
tcp 0 0 192.168.2.8:43264 192.168.2.8:8788 TIME_WAIT -
tcp 0 0 192.168.2.8:43245 192.168.2.8:8788 TIME_WAIT -
tcp 0 0 192.168.2.8:43254 192.168.2.8:8788 TIME_WAIT -
tcp 0 0 127.0.0.1:57667 127.0.0.1:3306 TIME_WAIT -
tcp 0 0 192.168.2.8:43273 192.168.2.8:8788 TIME_WAIT -
tcp 0 0 127.0.0.1:57677 127.0.0.1:3306 TIME_WAIT -
tcp 0 0 127.0.0.1:57669 127.0.0.1:3306 TIME_WAIT -
tcp 0 0 192.168.2.8:43246 192.168.2.8:8788 TIME_WAIT -
tcp 0 0 127.0.0.1:57657 127.0.0.1:3306 TIME_WAIT -
tcp 0 0 192.168.2.8:22 192.168.2.2:52630 ESTABLISHED 14690/0
tcp 0 0 127.0.0.1:57658 127.0.0.1:3306 TIME_WAIT -
tcp 0 0 192.168.2.8:43272 192.168.2.8:8788 TIME_WAIT -
tcp 0 0 127.0.0.1:57682 127.0.0.1:3306 TIME_WAIT -
tcp 0 0 127.0.0.1:57681 127.0.0.1:3306 TIME_WAIT -
tcp 0 0 127.0.0.1:57672 127.0.0.1:3306 TIME_WAIT -
tcp 0 0 :::993 :::* LISTEN 1712/dovecot
tcp 0 0 :::37217 :::* LISTEN 1409/rpc.statd
tcp 0 0 :::995 :::* LISTEN 1712/dovecot
tcp 0 0 :::110 :::* LISTEN 1712/dovecot
tcp 0 0 :::143 :::* LISTEN 1712/dovecot
tcp 0 0 :::111 :::* LISTEN 1365/rpcbind
tcp 0 0 :::80 :::* LISTEN 1762/httpd
tcp 0 0 :::8787 :::* LISTEN 1762/httpd
tcp 0 0 :::22 :::* LISTEN 1563/sshd
tcp 0 0 ::1:631 :::* LISTEN 1453/cupsd
tcp 0 0 :::443 :::* LISTEN 1762/httpd [root@server1 ~]#

Thank you

[Mark_NL]

The problem exists between your server and your router ..

You must've messed something up in the configuration there what made it unreachable from the outside.

So i'd suggest clear al your router settings, like it was befor you started, then put the server in DMZ so all non forwarded ports will go to dmz (the server) and you'll be able to reach your machine from the outside. (clear your firewall settings on your router as well)

[DataVampire]

It was fedora, i had not altered anything, only following the guides.

What i did to fix this was proberly drasktic, i reformatted fedora and put on debian leny instead, what a difference, with debian, all ports are closed, until you install say bind, then its open automaticly far better for a noob like myself i think