Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #262658

Re: Network tcp/iptables issue with XRDP

From Arno Lehmann <al@its-lehmann.de>
Newsgroups linux.debian.user
Subject Re: Network tcp/iptables issue with XRDP
Date 2023-10-24 15:40 +0200
Message-ID <HspNv-wHd-9@gated-at.bofh.it> (permalink)
References <HsoHM-vVA-29@gated-at.bofh.it>
Organization IT-Service Arno Lehmann

Show all headers | View raw


Hi Henggi, all,

Am 24.10.2023 um 14:04 schrieb Henggi:
> Hi list,
> 
> Completely stuck here, any clue appreciated!
> 
> Trying to bring up XRDP service on Debian 11-bullsyeye (arm64, incl. backports, fully up-to-date) which is only listening on „lo“ interface (not eth0) even netstat indicates otherwise:
> -> incoming tcp syn/ack on localhost interfact (lo) works fine
> -> incoming tcp syn/ack on eth0 interface seems not to reach app listening process (while other services on same host are working just fine via the network - so it’s not an „physical" network issue).
> -> iptables are cleared and not aware of any other netfilter running…

I suggest to verify the other netfiler options.

Recently I encountered something similar, and my usual test for local 
firewall being active,

iptables -L -n

came back with policies "accept" all over the place, and no particular 
rules.

Took me a while to understand that firewalld can still do its job.

So, probably useful to check with

systemctl status firewalld

and use firewallcmd in an appropriate manner, if you find that to be active.

Good luck!

Arno

-- 
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Network tcp/iptables issue with XRDP Henggi <henggi667@gmail.com> - 2023-10-24 14:30 +0200
  Re: Network tcp/iptables issue with XRDP Dan Ritter <dsr@randomstring.org> - 2023-10-24 15:10 +0200
    Re: Network tcp/iptables issue with XRDP Henggi <henggi667@gmail.com> - 2023-10-24 15:30 +0200
      Re: Network tcp/iptables issue with XRDP Dan Ritter <dsr@randomstring.org> - 2023-10-24 15:40 +0200
        Re: Network tcp/iptables issue with XRDP Henggi <henggi667@gmail.com> - 2023-10-24 16:10 +0200
  Re: Network tcp/iptables issue with XRDP Arno Lehmann <al@its-lehmann.de> - 2023-10-24 15:40 +0200
    Re: Network tcp/iptables issue with XRDP Henggi <henggi667@me.com> - 2023-10-24 16:50 +0200
      Re: Network tcp/iptables issue with XRDP Arno Lehmann <al@its-lehmann.de> - 2023-10-24 17:50 +0200
        Re: Network tcp/iptables issue with XRDP Henggi <henggi667@gmail.com> - 2023-10-24 18:40 +0200
          Re: Network tcp/iptables issue with XRDP Anssi Saari <anssi.saari@debian-user.mail.kapsi.fi> - 2023-10-25 10:40 +0200
    Re: Network tcp/iptables issue with XRDP Charles Curley <charlescurley@charlescurley.com> - 2023-10-24 17:30 +0200
      Re: Network tcp/iptables issue with XRDP Henggi <henggi667@gmail.com> - 2023-10-24 17:50 +0200
  Re: Network tcp/iptables issue with XRDP Max Nikulin <manikulin@gmail.com> - 2023-10-24 16:40 +0200
    Re: Network tcp/iptables issue with XRDP Henggi <henggi667@gmail.com> - 2023-10-24 18:20 +0200

csiph-web