From: Dave O Connor (doc at domain redbrick.dcu.ie)
Date: Wed 19 Jul 2000 - 08:49:53 IST
Someone called SP K said on Tue, Jul 18, 2000 at 11:11:42AM +0100:
> when i try to telnet to my box i get:
> (telnet is uncommented in /etc/inetd.conf)
>
> Jul 18 11:03:45 mybox in.telnetd[945]: refused connect
> from 123.45.6.7
> Jul 18 11:03:36 mybox inetd[459]: smtp/tcp: unknown
> service
> Jul 18 11:03:36 mybox inetd[851]: telnet/tcp: bind:
> Address already in use
> Jul 18 11:03:36 mybox inetd[859]: telnet/tcp: bind:
> Address already in use
> Jul 18 11:03:36 mybox inetd[851]: smtp/tcp: unknown
> service
> Jul 18 11:03:36 mybox inetd[859]: smtp/tcp: unknown
> service
> Jul 18 11:03:36 mybox inetd[875]: telnet/tcp: bind:
> Address already in use
> Jul 18 11:03:36 mybox inetd[888]: telnet/tcp: bind:
> Address already in use
> Jul 18 11:03:36 mybox inetd[875]: smtp/tcp: unknown
> service
> Jul 18 11:03:36 mybox inetd[888]: smtp/tcp: unknown
> service
> Jul 18 11:03:36 mybox inetd[940]: telnet/tcp: bind:
> Address already in use
> Jul 18 11:03:36 mybox inetd[940]: smtp/tcp: unknown
> service
> Jul 18 11:03:38 mybox inetd[944]: telnet/tcp: bind:
> Address already in use
> Jul 18 11:03:38 mybox inetd[944]: smtp/tcp: unknown
> service
>
> , i have portsentry running but have the ip addreess
> i am telnetting from on the ignore list, anyone know
> whats up ?, thanks
>
Perhaps portsentry has blocked off the IP address since before you added the
IP to the ignore list? portsentry likes to append entries to your
/etc/host.allow or /etc/host.deny to block off potential kiddies. This tells
tcp_wrappers to refuse connedt from there. Havea look at your tcp_wrappers
configs (/etc/host.allow and /etc/host.deny IIRC) and see if the IP address is
mentioned there.
- DoC
This archive was generated by hypermail 2.1.6 : Thu 06 Feb 2003 - 13:06:54 GMT