2011年5月3日 星期二

Fixing SVN connection timeout

netstat -l

tcp 0 0 *:svn *:* LISTEN


socklist
tcp 3690 273396 81 28455 3 svnserve



nmap -p3689-3691 172.20.1.150
Starting Nmap 5.00 ( http://nmap.org ) at 2011-05-04 13:22 CST
Interesting ports on kuso (172.20.1.150):
PORT STATE SERVICE
3689/tcp closed rendezvous
3690/tcp filtered svn
3691/tcp closed unknown
MAC Address: 00:13:D4:3B:70:64 (Asustek Computer)


Changing to new kernel but the situation remain.
Add a rule in iptables (default is in filter) to match dport 3690 result in no packet matched.


Gentoo will save iptables rules at /var/lib/iptables/rules-save on reboot

/etc/init.d/svnserve
/etc/conf.d/svnserve

iptables -nvL -t mangle
Chain PREROUTING (policy ACCEPT 12G packets, 7166G bytes)
pkts bytes target prot opt in out source destination
724 40840 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:3690


After flushing it with "iptables -F -t mangle"

nmap -p3689-3691 172.20.1.150
Starting Nmap 5.00 ( http://nmap.org ) at 2011-05-05 11:12 CST
Interesting ports on kuso (172.20.1.150):
PORT STATE SERVICE
3689/tcp closed rendezvous
3690/tcp open svn
3691/tcp closed unknown
MAC Address: 00:13:D4:3B:70:64 (Asustek Computer)


Do remember check all the iptables tables (nat, filter, mangle, and raw).

沒有留言: