No network connections allowed after applying patches

[Darren Gibbs]

Just upgraded an L1000 server to HPUX 11i with no problems. Once we installed the latest patch rev, June 2002 GOLDQPK11i, we cannot telnet, rcp, or ftp the server from other servers. We can ping the server name and IP address. The only way I'm even able to access the server from the network is via the GSP.

I can however telnet, rcp and ftp from the server in question to other servers on the network. I believe that reason I can do this is because I'm using the GSP connection.

When running a netstat -a | grep telnet, I get nothing. Both the /etc/services file and /etc/inetd.conf file look ok. I've stopped and started the inetd daemon several times but to no avail.

Both the 100Mb card itself and the network switch are set to 100 FD. I feel I'm ready to back out the patch bundle or open a ticket with HP. Do any of you have any ideas on what to try beforehand?

[Patrick Wallek]

Check the /var/adm/inetd.sec file and see if there is anything new in there.

What error message(s) do you get when trying to access this machine via telnet, etc.?

[Paula J Frazer-Campbell · Accepted solution]

Darren

Looks like an iffy patch, I would back out and see if your connectivity is restored.


There are two main camps on patching:_
1. Patch it
2. Patch only if a problem or security related.

My servers are running on June 2000 and are very happy.


Paula

[Darren Gibbs]

Nothing new in the inetd.sec file. Here is the error when attempting to telnet from another server -

Trying...
telnet: Unable to connect to remote host: Connection refused

[Sridhar Bhaskarla]

Hi,

Enable inetd with logging by executing
inetd -l command.

Then do a tail -f /var/adm/syslog/syslog.log

and observe the output you get when you telnet into the box. You may get some clues there.

Did you check the permissions on /usr/lbin and in particular the executables /usr/lbin/telnetd /usr/lbin/ftpd etc.,

Make sure they didn't get zeroed out.

-Sri

[Darren Gibbs]

The permissions in /usr/lbin look fine. When enabling logging with inetd and attempting to telnet, nothing appears in syslog.

[Jeff Schussele]

Hi Darren,

Check/do

1) ifconfig (or lanscan) & make sure the lan instances haven't changed & the NICs are UP
2) The routes are still good & proper (netstat -rn)
3) From the console bounce the net daemon
/sbin/init.d/net stop/start

Rgds,
Jeff

[Patrick Wallek]

Have you checked to make sure you don't have duplicate IP addresses? What happens if you down the LAN cards on this machine and the ping the IP?

If you still get a response, then you have a duplicate IP address somewhere.

[Darren Gibbs]

The issue was with the patch release. Once we installed the PHCO_27434 patch for libc, everything was fine.