netstat -l
tcp 0 0 *:svn *:* LISTEN
socklist
tcp 3690 273396 81 28455 3 svnserve
nmap -p3689-3691 172.20.1.150
Starting Nmap 5.00 ( http://nmap.org ) at 2011-05-04 13:22 CST
Interesting ports on kuso (172.20.1.150):
PORT STATE SERVICE
3689/tcp closed rendezvous
3690/tcp filtered svn
3691/tcp closed unknown
MAC Address: 00:13:D4:3B:70:64 (Asustek Computer)
Changing to new kernel but the situation remain.
Add a rule in iptables (default is in filter) to match dport 3690 result in no packet matched.
Gentoo will save iptables rules at /var/lib/iptables/rules-save on reboot
/etc/init.d/svnserve
/etc/conf.d/svnserve
iptables -nvL -t mangle
Chain PREROUTING (policy ACCEPT 12G packets, 7166G bytes)
pkts bytes target prot opt in out source destination
724 40840 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:3690
After flushing it with "iptables -F -t mangle"
nmap -p3689-3691 172.20.1.150
Starting Nmap 5.00 ( http://nmap.org ) at 2011-05-05 11:12 CST
Interesting ports on kuso (172.20.1.150):
PORT STATE SERVICE
3689/tcp closed rendezvous
3690/tcp open svn
3691/tcp closed unknown
MAC Address: 00:13:D4:3B:70:64 (Asustek Computer)
Do remember check all the iptables tables (nat, filter, mangle, and raw).
沒有留言:
張貼留言