Network embarassment

[Tony Arnold]

Brian,

On Mon, 2005-05-09 at 21:13 +0930, Brian Astill wrote:
> On Mon, 9 May 2005 05:58 pm, Christoph Georgi wrote:
> > 1. sshd is running
> > 2. your server is listening on port 22 via '$ netstat -na'
> > 3. iptables is not blocking incoming connections on port 22
> 
> On remote (server) system
> 
> bra at ubuntu:~/Mail $ netstat -ln
> Active Internet connections (only servers)
> Proto Recv-Q Send-Q Local Address           Foreign Address         State
> tcp        0      0 127.0.0.1:908           0.0.0.0:*               LISTEN
> tcp        0      0 127.0.0.1:111           0.0.0.0:*               LISTEN
> tcp        0      0 127.0.0.1:631           0.0.0.0:*               LISTEN
> tcp        0      0 127.0.0.1:25            0.0.0.0:*               LISTEN
> tcp6       0      0 :::22                   :::*                    LISTEN
> tcp6       0      0 ::1:25                  :::*                    LISTEN
> udp        0      0 0.0.0.0:68              0.0.0.0:*
> udp        0      0 127.0.0.1:111           0.0.0.0:*

No, sshd is not listening on any real network interface, on the local
interface. Mine says *:22 instead of :::22 on that line.

On the machine that you think is running sshd, then try 'telnet
127.0.0.1 22' and see if you get a response. The try 'telnet
<ip-address> 22' and see if you get the same response, where
<ip-address> is the address of your network card.

Regards,
Tony.
-- 
Tony Arnold, IT Security Coordinator, University of Manchester,
Manchester Computing, Kilburn Building, Oxford Road, Manchester M13 9PL.
T: +44 (0)161 275 6093, F: +44 (0)870 136 1004, M: +44 (0)773 330 0039
E: tony.arnold at manchester.ac.uk, H: http://www.man.ac.uk/Tony.Arnold