Re: [Nolug] ports

On Tue, 25 Feb 2003, Chris Bloch wrote:

> output of netstat -an | grep 22
>
> tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN
>
> should the dotted 0's by my ip address? I am running a router that
> gives dhcp to the computer, and the router has the static ip.

Yea that's right, 0.0.0.0 is an alias for "everything". In other words,
sshd is listening on port 22 on every interface and every ip address on
your box. Openssh does that by default. Nothing to do with dhcp, but if
you want to port forward, you should give the linux box a static ip. FYI
you'll also see 0.0.0.0 show up as your default route (netstat -rn), ie a
route to "everything else".

> Chain INPUT (policy ACCEPT)
> target prot opt source destination
>
> Chain FORWARD (policy ACCEPT)
> target prot opt source destination
>
> Chain OUTPUT (policy ACCEPT)
> target prot opt source destination
>
> Does this mean that my firewall is turned off? When I setup the
> computer I turned the firewall off.....I think.

Yep, all your chains are ACCEPT, no rules that deny/drop. No firewall.

Looks like your linux box is setup fine. Try running tcpdump
on the linux box to see if anything hits port 22 when you try to connect.
tcpdump -npi eth0 port 22

-ray

-- 
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Ray DeJean  				       	 http://www.r-a-y.org
Systems Engineer                    Southeastern Louisiana University
IBM Certified Specialist  	      AIX Administration, AIX Support
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
___________________
Nolug mailing list
nolug@nolug.org