New answers tagged

0

So, for some reason, this is an Azure issue. I opened port 5432, but that didn't work. In a move of desperation, I've opened 1024-65535, and now I can connect. Clearly I'm missing something related to the usage of inbound rules. While this does fix my issue, it's clearly not a best practice. Any thoughts on what I'm missing?


1

Sounds like you need to use iptables-persistent See http://postgresql.freeideas.cz/install-postgresql-9-5-on-ubuntu-14-04/


0

It won't be possible to achieve without changing apache config. What you are doing is, forwarding request on a custom port (999) to apache that is running on port 80. But as you have noted already, iptables is anaware of the virtual site and is forwarding the request to apache, and apache is returning the default site. If you have only one virtual site, you ...


4

On windows server OS's after WinNT 4.0 SP3, this information is coming up by design. The Winsock applications on your machine are listening (waiting for information) from those ports. 0.0.0.0 means 'all addresses' This will come up wether you are connected to the internet or not. Think about it like this: a person has earphones in their ears, but no music ...


2

Stick with using vhosts and let apache determine which site to serve via the headers. Using a port other than 80 and assuming the client will figure it out from the SRV records will not work. All modern browsers support this approach, and newer versions of apache and web browsers even support this using TLS, in case you do eventually decide to switch to ...


2

As mentioned before, it has nothing to do with iptables. Your service is listening to local (loopback) interface only and therefore is unavailable from outside. You need to reconfigure your service. If you are not familiar with that, you may try the following. Find configuration file of your service and make backup copy of it Open the configuration file ...


0

lsof -i :ssh will list all processes with the ssh port open, both listening and active connections.


0

Unless you did something to turn off sshd entirely or otherwise ruined your sshd config, a reboot won't hurt you. On the opposite, it might be your only chance to properly restart sshd without having access to the console. Once back online, do a portscan in case you made a typo entering the new port, then try to log back on.


1

Do you have KVM over IP remote console access via IPMI or DRAC, that will be giving you control. In events where access such as SSH may be unavailable for some reason. Some places give the terminal window in the browser which securely proxies a serial console session to you server. You still need to login to system using username and password via the TTY ...


0

When you say "I can not connect on ANY port number" - are you sure that you are trying the new ssh port ? There are two possibilities ssh is not running ssh is running but on a port you are unaware off To check we need to get into the server.... What other Services are running on the server ? SQL php sftp rdc (but not using ssh) All of these may ...


6

Your rules are wrong for what you want to achieve. The INPUT chain deals with incoming traffic and the OUTPUT chain deals with traffic going out. So for what you want to achieve you need a rule like this (and you don't need a rule for OUTPUT chain and can remove it): iptables -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT Other than that, the order of the ...


1

Valid ports for such use are 1-65535. In general, you should use standard ports for your services because this maximizes ease of operation and use. netstat -nq on Windows and netstat -nvl on linux (feel free to tweak the options to your liking; all you really need is the list of in-use and particularly listening ports) will tell you which ports are open, ...


0

Having openvpn bind to localhost:1194 doesn't really make much sense unless you're doing something you haven't told us about, as it's not like you can connect to it from anywhere useful but still... Unless you have specified otherwise by using the local directive then the documentation suggests that it should bind to all available IP addresses so you could ...



Top 50 recent answers are included