5.3 not accepting connections - What I'm missing? - FreeBSD

[Maximiliano]

Dear all,

I've recently moved from FreeBSD 4.8 to 5.3. After the upgrade, I
found that my computer doesn't accept outside connections anymore.

The problem is: I can't connect to my computer through different
services (FTP, Telnet, SSH, etc.) and also, I can't redirect X output
to my display. I've verified that the corresponding daemons are
running and that all the steps to X redirection are done, but nothing
happens. I'm not using a firewall.

Looking deeply into the problem, I've found that also my computer
doesn't reply to ping request. But changing the kernel variable
'net.inet.icmp.bmcastecho' it started to work. There is something I
have to change to accept connections that I didn't notice?

I think that this problem is related to security reasons, but I didn't
find how to open a little bit my computer.

Summarizing: from my computer, I can connect to any other machine, but
I can't do the opposite connections.

I hope someone could help me. Thanks in advance,

--
MX

[Maximiliano]

Dear all,

I've recently moved from FreeBSD 4.8 to 5.3. After the upgrade, I
found that my computer doesn't accept outside connections anymore.

The problem is: I can't connect to my computer through different
services (FTP, Telnet, SSH, etc.) and also, I can't redirect X output
to my display. I've verified that the corresponding daemons are
running and that all the steps to X redirection are done, but nothing
happens. I'm not using a firewall.

Looking deeply into the problem, I've found that also my computer
doesn't reply to ping request. But changing the kernel variable
'net.inet.icmp.bmcastecho' it started to work. There is something I
have to change to accept connections that I didn't notice?

I think that this problem is related to security reasons, but I didn't
find how to open a little bit my computer.

Summarizing: from my computer, I can connect to any other machine, but
I can't do the opposite connections.

I hope someone could help me. Thanks in advance,


MX

[Giorgos]

On 2005-04-08 18:18, Maximiliano Eschoyez <com> wrote: 

Are you using ipfw, ipfilter or pf as a firewall? If yes, what
rules do you use?

[Maximiliano]

On Sat, 9 Apr 2005 00:27:37 +0300, Giorgos Keramidas
<upatras.gr> wrote: 
>
> Are you using ipfw, ipfilter or pf as a firewall? If yes, what
> rules do you use?[/ref]

No, I'm not using any firewall.

Also, I tried enabling a firewall through rc.conf with the parameters
firewall_enable="YES"
firewall_type="open"
but nothing changed. :-(

It's very strange because I'm not using any filtering policy.

Thanks.

MX

[Sergei]

On 2005-04-08, Maximiliano Eschoyez <com> wrote: 
>>
>> Are you using ipfw, ipfilter or pf as a firewall? If yes, what
>> rules do you use?[/ref]
>
> No, I'm not using any firewall.
>
> Also, I tried enabling a firewall through rc.conf with the parameters
> firewall_enable="YES"
> firewall_type="open"
> but nothing changed. :-(
>
> It's very strange because I'm not using any filtering policy.[/ref]

Misconfigured network or firewall is the most typical reason for a
problem. The output from the following commands might help to solve
your problem:

ifconfig

netstat -r

ipfw show

[Maximiliano]

On Sat, 9 Apr 2005 18:18:31 -0700, Sergei Gnezdov
<net> wrote: 

I've ran the commands, but I can't see anything strange. Here is the output:

------------------------

buda# ifconfig
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
inet 127.0.0.1 netmask 0xff000000
ed1: flags=108843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAS T> mtu 1500
inet 192.168.1.100 netmask 0xffffff00 broadcast 192.168.1.255
ether 01:d4:ff:03:00:20
buda# netstat -r
Routing tables

Internet:
Destination Gateway Flags Refs Use Netif Expire
default mafalda.lcd.efn.un UGS 0 1694 ed1
localhost.lcd.efn. localhost.lcd.efn. UH 0 0 lo0
192.168.1 link#2 UC 0 0 ed1
mafalda.lcd.efn.un 00:e0:81:29:a6:7c UHLW 1 0 ed1 1200
buda# ipfw show
ipfw: getsockopt(IP_FW_GET): Protocol not available

------------------------

The strange thing is that I didn't enable any kind of filtering and
also I can connect to others computers of my office LAN
and surf the web.

The problem is when I try to connect from other hosts to my computer.
It ends with a timeout.

Thank you,

MX