Login or Register to Ask a Question and Join Our Community


UNIX for Advanced & Expert Users

how to open port in linux

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Top Forums UNIX for Advanced & Expert Users how to open port in linux
# 1  
Old 09-23-2011
how to open port in linux
hi experts,

I'm using Linux Centos kernel 2.6
Here is the print out of some my port :

Code:
tcp        0      0 127.0.0.1:10080             0.0.0.0:*                   LISTEN      
tcp        0      0 127.0.0.1:10081             0.0.0.0:*                   LISTEN      
tcp        0      0 127.0.0.1:10082             0.0.0.0:*                   LISTEN      
tcp        0      0 ::1:10080                   :::*                        LISTEN      
tcp        0      0 ::1:10081                   :::*                        LISTEN      
tcp        0      0 ::1:10082                   :::*                        LISTEN

Actually i want the port can be access from the other machine. I try to configure the iptables below : but still have failed when implemented :

Code:
[root@localhost ~]# cat /etc/sysconfig/iptables
-A RH-Firewall-1-INPUT -m state .state NEW -m tcp -p tcp --dport 10079 -j ACCEPT
-A RH-Firewall-1-INPUT -m state .state NEW -m tcp -p tcp --dport 10081 -j ACCEPT
-A RH-Firewall-1-INPUT -m state .state NEW -m tcp -p tcp --dport 10082 -j ACCEPT
-A RH-Firewall-1-INPUT -m state .state NEW -m tcp -p tcp --dport 10083 -j ACCEPT
-A RH-Firewall-1-INPUT -m state .state NEW -m tcp -p tcp --dport 10084 -j ACCEPT
-A RH-Firewall-1-INPUT -m state .state NEW -m tcp -p tcp --dport 10089 -j ACCEPT

[root@localhost ~]# /etc/init.d/iptables restart
Flushing firewall rules: [  OK  ]
Setting chains to policy ACCEPT: mangle filter nat [  OK  ]
Unloading iptables modules: [  OK  ]
Applying iptables firewall rules: iptables-restore: line 1 failed
[FAILED]

I'm trying to access the port from other machine still failed.

Code:
[~]$ telnet 74.82.162.xx 10080
Trying 74.82.162.xx...

telnet: Unable to connect to remote host: Connection timed out

Anybody can help me?
Thanks.
Last edited by pludi; 09-23-2011 at 07:00 AM..
# 2  
Old 09-23-2011
Problem #1: your rules are incorrect, and the init-script even tells you that if you care to read the output.

Problem #2: whatever service you're running on port 10080, it's only listening to the loopback addresses 127.0.0.1 and ::1, and thus can't ever be reached from any other machine, no matter what you change in your firewall rules.
# 3  
Old 09-23-2011
What are you running on port 10080?

You need to check the service that's opening port 10080. It should listen on your outgoing IP (IP address of the interface that's connected to other machines) which is not happening according to the netstat result. That's because iptables is not loading correctly.

The iptable rules that you have mentioned have syntax error. It should be
Code:
-m state --state NEW

First flush the rules:
Code:
iptables -F

Then, correct the syntax and reload iptables.

If you have nmap installed, you can run a check on the opened ports both from the local machine and from the client machine to see if the port has opened up successfully or not.

You can get the same result by running the following commands on the server:
Code:
lsof -i -n -P

or
Code:
netstat -tulpn

Let us know if this helps.
# 4  
Old 09-29-2011
Hello again experts,

Actually that one is from vps, i do http port forwarding to my vps via ssh.


Code : lsof -i -n -P
Code:
COMMAND     PID     USER   FD   TYPE    DEVICE SIZE NODE NAME
sshd      32362  root    3u  IPv6 672415055       TCP 74.82.162.xx:22->129.192.196.xx:35465 (ESTABLISHED)
sshd      32362  root    8u  IPv4 672415599       TCP 127.0.0.1:10080 (LISTEN)
sshd      32362  root    9u  IPv6 672415600       TCP [::1]:10080 (LISTEN)
sshd      32362  root   10u  IPv4 672415670       TCP 127.0.0.1:10081 (LISTEN)
sshd      32362  root   11u  IPv6 672415671       TCP [::1]:10081 (LISTEN)
sshd      32362  root   12u  IPv4 672415675       TCP 127.0.0.1:10082 (LISTEN)
sshd      32362  root   13u  IPv6 672415676       TCP [::1]:10082 (LISTEN)
sshd      32362  root   14u  IPv4 672415680       TCP 127.0.0.1:8080 (LISTEN)
sshd      32362  root   15u  IPv6 672415681       TCP [::1]:8080 (LISTEN)

Code : netstat -tulpn
Code:
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address               Foreign Address             State       PID/Program name   

tcp        0      0 127.0.0.1:10080             0.0.0.0:*                   LISTEN      32362/1              
tcp        0      0 127.0.0.1:10081             0.0.0.0:*                   LISTEN      32362/1             
tcp        0      0 127.0.0.1:10082             0.0.0.0:*                   LISTEN      32362/1             
tcp        0      0 :::22                       :::*                        LISTEN      23687/sshd          
tcp        0      0 ::1:10080                   :::*                        LISTEN      32362/1             
tcp        0      0 ::1:10081                   :::*                        LISTEN      32362/1             
tcp        0      0 ::1:10082                   :::*                        LISTEN      32362/1

I have edit the iptables :

Code:
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 10080 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 10081 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 10082 -j ACCEPT

but still failed when apply the configuration.

If the case like this. Is there any possibility to open the port. so the port accessable from other server?

Thanks.
Moderator's Comments:
Mod Comment Video tutorial on how to use code tags in The UNIX and Linux Forums.
Last edited by pludi; 09-29-2011 at 04:57 AM..
# 5  
Old 09-29-2011
Ok, without focusing on iptables too much, lets first clear up what you want to do. HTTP forwarding via SSH? How exactly? Do you run your SSH client with dynamic forwarding?
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. UNIX for Beginners Questions & Answers

Script for port is open or not

I need a script on which if i will pass the port number and the host name as external parameter then it should respond me if the port is open or not thread moved (0 Replies)
Discussion started by: patitapaban
0 Replies

2. Solaris

Solaris 10: How to just open a port - nothing else

Hi there, I tried just open a port but I failed ;-( # telnet localhost 9876 That should work so I did ... # vi /etc/services myport 9876/tcp # my port # svcadm restart inetd -> New pid, see ps - ef | grep inet # netstat -an | grep 9876 No port 9876 is waiting ;( #... (4 Replies)
Discussion started by: System
4 Replies

3. IP Networking

Tcp ip port open but no such process (merged: Release A Port)

i want to kill a tcp connection by killing its pid with netstat -an i got the tcp ip connection on port 5914 but when i type ps -a or ps-e there is not such process running on port 5914 is it possible that because i do not log on with proper user account i can not see that process running? (30 Replies)
Discussion started by: alinamadchian
30 Replies

4. Red Hat

Open port with iptables

Hi, What iptables command do I need to run in order to open up the following port for incomming traffic on the following server: # telnet 127.0.0.1 1521 Trying 127.0.0.1... telnet: connect to address 127.0.0.1: Connection refused telnet: Unable to connect to remote host: Connection... (3 Replies)
Discussion started by: Duffs22
3 Replies

5. UNIX for Dummies Questions & Answers

Linux - How to Open a Port

Hi, I would like to open a specific port for use with a bespoke application. Before everyone points me to other threads - I read a few but couldn't find any specific to my problem. Iptables / firewall is disabled SELinux is also disabled I would just like to assign this port to this... (0 Replies)
Discussion started by: mcclunyboy
0 Replies

6. Solaris

how to open specific port

Dear members, My release is open Solaris b103 1- How to know the opening port in my system 2- How to open a specific port like port number 53 3- How to closed the specific port like port number 53 Your feedback highly appreciated (10 Replies)
Discussion started by: dellroxy
10 Replies

7. IP Networking

Unknown open port: "6881/tcp open bittorrent-tracker" found with nmap

Hi. I ran nmap on my server, and I get the following: Starting Nmap 4.76 ( http://nmap.org ) at 2009-03-19 16:33 EDT Interesting ports on -------- (-----): Not shown: 997 closed ports PORT STATE SERVICE 22/tcp open ssh 80/tcp open http 6881/tcp open bittorrent-tracker The... (0 Replies)
Discussion started by: Rledley
0 Replies

8. AIX

How to open a port in AIX

Hi Guys, i am trying to open a port in AIX. but i am not able to get the command for this. AIX is not having the iptables file present. So please any body can tell me how to open a port in AIX... Thanks sanju (2 Replies)
Discussion started by: sanju_d1231
2 Replies

9. Linux

open port

How can I open a port on linux machine ??? (5 Replies)
Discussion started by: mm00123
5 Replies

10. Solaris

Solaris 8 to many open port

hi all, My OS is solaris 8 with core system installation only. so far everything works fine. by i do some testing from my xp pc as client to nmap and scan opening port to my solaris. the result as below: Initiating SYN Stealth Scan against 10.10.10.10 at 16:25 Discovered open port 21/tcp on... (3 Replies)
Discussion started by: hezry79
3 Replies
Login or Register to Ask a Question