Cannot telnet to new install of 11.31 server

[MikeL_4]

I've just installed 11.31 on a server and cannot telnet to the server but I can ssh into it.

There are no error messages relating to telnet in syslog.log.

I can telnet into the server from itself, which tells me telnet is working on the server.

From a server on the same subnet as the 11.31 server I get:
Trying...
telnet: Unable to connect to remote host: Connection timed out

From another workstation I receive:
Connecting To osglbhp1...Could not open connection to the host, on port 23: Conn
ect failed

Any ideas ??

[Ralf Seefeldt]

Hello Mike,

can you ping the server from any place, you tried telnet from? I assume telnetd is running.

Did you ssh to the server from a place, where telnet was not possible?

Did you check the routing?

is there any other connection to the server possible? (Port 25, 80, ftp, rlogin, ...)

Telnet to the local machine should use a different "lan-interface", not the external one.

ssh will work long before telnet does if you completely install a UX-Computer. So, working ssh with a not working telnet may not be to unusual - I am not sure.

Bye
Ralf

[MikeL_4]

I cannot ping the server from anywhere I've tried telnet from, and also ssh...

I can ssh to the server from every place that I've tried telnet from, ssh works, telnet doesn't....

and I cannot ftp to the server either, from anywhere I've tried telnet or ssh...
> ftp: connect: Connection timed out

[Torsten.]

Since telnet to localhost works and ssh from anywhere too - is any firewall around you?

[Torsten.]

What was the solution?
I guess the firewall settings ...

[MikeL_4]

I am assumming it's network related, I've asked our network group to look into it.

[PeterWolfe · Accepted solution]

The 11.31 installation offers a set
of security options that
can be set at install time. See the Security
Considerations chapter starting
on page 48 of the 11i v3 Installation
and Update Guide.

It sounds like the Sec20MngDMZ or
higher security level was choosen
for your installation. That
would have enabled IPFilter
and blocked any clear-text protocols
like telnet.

[skt_skt]

check the ftp and telnet entries in /etc/inetd.conf.Try sftp instead.

In my 11.23 servers ftp and telnetd is commented. i am able to do sftp and ssh

[MikeL_4]

I found it not to be network related but rather to deal with the IPFilter process. I disabled the ipfilter:
/opt/ipf/bin/ipfilter -d
and was able to telnet into the server.

Not to figure out IPFilter....

[MikeL_4]

Tks