telnet problem

[sgtmura]

Hi,
I have a telnet problem that is baffling me.
One of my server is not accepting any remote telnet connections. The daemon is running fine and I can do a loopback telnet without problems, but if I try from remote, I get a connection refused. Having taken a look at /etc/inetd.conf, it does not seem to be using the tcp_wrapper (no host.deny/host.allow in sight as well). There are no firewall or anything else out of the ordinary... Can somebody please help?
Thanks in advance,
Sgtmura

[Arunvijai_4]

Can you check your /etc/securetty for any entries like console ? Also, enable inted logging by # inetd -l and check syslog.

-Arun

[Muthukumar_5]

what is there in /var/adm/inetd.sec file. Is there anything in /etc/profile or .profile related with telnet?

hth.

[sgtmura]

Thanks guys for the advise.

> Can you check your /etc/securetty for any entries like console ?

No luck.

> what is there in /var/adm/inetd.sec file.

Couldn't find a file named inetd.sec.

> Is there anything in /etc/profile or .profile related with telnet?

Did a grep but no luck.

I'm open to any more suggestions.
Thanks.

[Muthukumar_5]

What is there in /etc/inetd.conf as,

# grep 'telnet' /etc/inetd.conf

Is telnet listening?

# netstat -na | grep '23 .*LI'

can you able to use other login service like ssh / remsh?

hth.

[morganelan]

Could you post the content of 2 files below:
#more /etc/resolv.conf
#more /etc/nsswitch.conf

[Muthukumar_5 · Accepted solution]

I feel 23 (telnet) service port is blocked for using outside.

Post /etc/inetd.conf file details for telnet and grep 'telnet' /etc/services

ps -ef | grep tcpd

Is it running.

hth.

[Arunvijai_4]

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=809894

(Try /etc/nsswitch.conf entry)

-Arun

[Mel Burslan]

while initiating a telnet connection to this server from a remote workstation or server, watch the syslog (provided your indet is running with -l option) with tail -f. What do you see ? Any connection refusal messages getting logged in the syslog ?

if yes, you have a way of ip filtering and it is filtering out anything and everything but localhost. If not, your assumption of "no firewalls in sight" is not holding water as someone ahead of you is blocking the requests.

Step by step:

inetd -k
inetd -l
tail -f /var/adm/syslog/syslog.log

(at this point initiate a telnet connection from a remote point)

show us what you see on the tail output.

[Arunvijai_4]

Did u check portmapper service running ?
# rpcinfo -p | grep port

-Arun

[sgtmura]

Thanks guys for all your inputs. Looks like someone tinkered with the /etc/services and telnet was listening on a different port...