DirectAccess - TCP open port not reachable

Hello,
I did a little experiment with my DirectAccess connectivity.
I have a laptop with DirectAccess connectivity enabled with my domain username.
I logged in to my laptop with my local administrator account. Thus, DirectAccess mounts the IPSec ESP tunnel infrastructure and it is possible to querry DNS requests to my Intranet (even if I'm not authenticated with my domain account).
I realize I was able to netcat to the web servers (and more generally, to use netcat to connect to any TCP opened ports on the intranet). Here there are two things I do not understand.
- I know there are two DA servers in a DMZ. I guess the fact I am able to netcat where I want on the Intranet is due to a lack of firewalling. But is it, or is it just a consequence of the way DA works?
- Then, when seeing I could netcat to open ports, I tried to connect to the web server with my browser, but the connection timeout. I thought it was strange. I should mention that when querrying the web server with a GET request in netcat, I only receives
HTTP headers qith a body length of 0. However, I do not understand why the browser querry timeout, and not the netcat one.
Thank you!

Hi
When you log on your laptop with your local administrator account, this account cannot be used for the user IPSEC tunnel. So you only have the IPSEC infrastructure tunnel established by your laptop. With this tunnel, you have access to all ressources declared
as allowed in the infrastructure tunnel.
BenoitS - Simple by Design http://danstoncloud.com/blogs/simplebydesign/default.aspx

Similar Messages

NIO and open ports not showing up during portscan

Hi
I have an application that binds port 4444 and 4445 default. I can establish an conection to both ports with telnet for example and when I just portscan those ports they are detected:
$ nmap -p 4444-4445 localhost
Interesting ports on localhost.localdomain (127.0.0.1):
PORT STATE SERVICE
4444/tcp open krb524
4445/tcp open unknown
but when I try to scan the whole range 4445 disappears. Here is the output:
$ nmap localhost
Interesting ports on localhost.localdomain (127.0.0.1):
PORT STATE SERVICE
22/tcp open ssh
25/tcp open smtp
113/tcp open auth
1024/tcp open kdm
4444/tcp open krb524
5432/tcp open postgres
I reccon that this means that I will lose some connections during high load.
Does this have anything to do with the timeouts I specify for select() or is it a problem deaper down in nio?.

All this means is that there is something seriously wrong with nmap.

Manager's port not reachable

Golden Gate version: 11.2.1.0.3
DB version : 11.2.0.3
Platform : Solaris 10
I am trying to setup Golden Gate on Solaris. I have two solaris 10 Virtual Machines created using Virtual Box.
On the source machine , I started the MANAGER process on port 3125.
$ cat mgr.prm
port 3125
dynamicportlist 8001, 8002, 9500-9520
purgeoldextracts /u01/GG/11.2.1.0.3/dirdat/*, usecheckpoints
$
$
$
$ pwd
/u01/GG/11.2.1.0.3/dirprm
$ cd ..
$
$
$ ./ggsci
Oracle GoldenGate Command Interpreter for Oracle
Version 11.2.1.0.3 14400833 OGGCORE_11.2.1.0.3_PLATFORMS_120823.1258
Solaris, x64, 64bit (optimized), Oracle 11g on Aug 23 2012 16:42:37
Copyright (C) 1995, 2012, Oracle and/or its affiliates. All rights reserved.
GGSCI (tigris178) 1> start mgr
Manager started.
GGSCI (tigris178) 2> info mgr
Manager is running (IP port tigris178.3125).
GGSCI (tigris178) 3> shell cat /u01/GG/11.2.1.0.3/dirpcs/MGR.pcm
PROGRAM MGR     PROCESSID       MGR     PORT    tigris178.3125 PID     943From target machine, when I try telnet command to check if the port is open, it throws error. ping works fine though
$ telnet 192.168.0.178 3125
Trying 192.168.0.178...
Connected to 192.168.0.178.
Escape character is '^]'.
Connection to 192.168.0.178 closed by foreign host.
# ping 192.168.0.178
192.168.0.178 is alive
The netstat output from 192.168.0.178 shows TIME_WAIT
# netstat -an | grep 3125
      *.3125               *.*                0      0 49152      0 LISTEN
192.168.0.178.3125   192.168.0.179.33603 49640      0 49640      0 TIME_WAIT
      *.3125                            *.*                             0      0 49152      0 LISTEN
# netstat -an | grep 3125
      *.3125               *.*                0      0 49152      0 LISTEN
192.168.0.178.3125   192.168.0.179.33603 49640      0 49640      0 TIME_WAIT
      *.3125                            *.*                             0      0 49152      0 LISTENThere is no firewall configured between these VMs. I tried using several other ports. But it is still the same issue. To verify that there is no firewall , I brought down manager process and started DB Listener using the same port. I managed to connect to the DB through listener from remote machines without any issues.
For the manager process to work properly , Is there any other mandatory process which i should start so that this port will remain open and usable? I believe this has something to do with GG architecture as I was able to use DB listener on this port without any issues.
Initially, I faced this issue in Target machine's Manager process port. So, i thought of diagnosing from scratch and I started the manager process in source and did telnet test. The telnet test fails for both Source and Target Manager process ports.

HI I have the same problem
PLZ tell me the solution！
$ telnet 10.80.16.214 7809
Trying 10.80.16.214...
Connected to 10.80.16.214.
Escape character is '^]'.
Connection to 192.168.0.178 closed by foreign host.
2013-09-13 10:21:42 WARNING OGG-01223 Oracle GoldenGate Capture for Oracle, pum_2.prm: TCP/IP error 111 (Connection refused).
2013-09-13 10:21:54 WARNING OGG-01223 Oracle GoldenGate Capture for Oracle, pum_2.prm: TCP/IP error 111 (Connection refused).
2013-09-13 10:22:05 WARNING OGG-01223 Oracle GoldenGate Capture for Oracle, pum_2.prm: TCP/IP error 111 (Connection refused).
2013-09-13 10:22:16 WARNING OGG-01223 Oracle GoldenGate Capture for Oracle, pum_2.prm: TCP/IP error 111 (Connection refused).
2013-09-13 10:22:27 WARNING OGG-01223 Oracle GoldenGate Capture for Oracle, pum_2.prm: TCP/IP error 111 (Connection refused).
2013-09-13 10:22:38 WARNING OGG-01223 Oracle GoldenGate Capture for Oracle, pum_2.prm: TCP/IP error 111 (Connection refused).
2013-09-13 10:22:49 WARNING OGG-01223 Oracle GoldenGate Capture for Oracle, pum_2.prm: TCP/IP error 111 (Connection refused).
2013-09-13 10:23:00 WARNING OGG-01223 Oracle GoldenGate Capture for Oracle, pum_2.prm: TCP/IP error 111 (Connection refused).
2013-09-13 10:23:11 WARNING OGG-01223 Oracle GoldenGate Capture for Oracle, pum_2.prm: TCP/IP error 111 (Connection refused).
2013-09-13 10:23:22 ERROR   OGG-01224 Oracle GoldenGate Capture for Oracle, pum_2.prm: TCP/IP error 111 (Connection refused); retries exceeded.
2013-09-13 10:23:22 ERROR   OGG-01668 Oracle GoldenGate Capture for Oracle, pum_2.prm: PROCESS ABENDING.

Open ports not responding

Dear All,
I have open my 25, 110, 80 port on my Server from local i can telnet all those via my private ip but from public ip its not responding.
2nd thing I can ping both ips of My server through private ip and through public ip.
Any help to solve this issue.
Thanks
Rehman Ghani

I have to agree with ngoldwat's statement. The symptoms sound like misconfigure or non-configured NAT on your router. Take a look at it and ensure your NAT statements are applied to the correct interface as well. You may also have to tweak the ACL that identifies the traffic to be NATed. Good luck.

Is there a way to know which Ethernet port will be used when running TCP Open?

Hello.
I have several Ethernet ports in my computer, and I am trying to write a VI that sends data from one port to the other (for debugging an issue). I was planning on using the TCP Open and other TCP VIs, but the TCP Open does not seem to have an input to tell it which local Ethernet port I want to use.
So, is it possible to specify which Ethernet port you want your TCP connection to be open on? How about UDP?
Thanks,
AlejandroZ

The TCP Open does have inputs for specifying both local and remote ports.
Message Edited by Dennis Knutson on 08-23-2007 09:52 AM
Attachments:
TCP Open.PNG ‏11 KB

Cant open port

Hi,
I am using Oracle Enterprise Linux 5.0.Here if I open the port number 2372 by using iptables, it will not open.I am checking this port status by using the command " telnet 192.168.0.1 2372". I get the message as following
telnet: connect to address 192.168.0.1: Connection refused
telnet: Unable to connect to remote host: Connection refused
Is this procedure correct to get the port status? Can anybody please guide me to open this port?

A port can have 3 statusses:
-Open (port is reachable, a deamon is using port)
-Closed (port is reachable, NO daemon is using this port)
-Filtered/firewalled (port is NOT reachable)
use nmap to look for the status of a port, NOT telnet. Telnet is only very limited usable for network port investigation.
In your case:
$ nmap localhost -p 2372
Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2008-12-19 10:39 CET
Interesting ports on localhost (127.0.0.1):
PORT STATE SERVICE
2372/tcp closed unknown
Nmap finished: 1 IP address (1 host up) scanned in 0.196 seconds
$ telnet localhost 2372
Trying 127.0.0.1...
telnet: Unable to connect to remote host: Connection refused
mind the status "closed"
now see how it works when a daemon is using the port:
$ nmap localhost -p 22
Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2008-12-19 10:41 CET
Interesting ports on localhost (127.0.0.1):
PORT STATE SERVICE
22/tcp open ssh
Nmap finished: 1 IP address (1 host up) scanned in 0.142 seconds
$ telnet localhost 22
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
SSH-2.0-OpenSSH_4.3p2 Debian-9etch3
^]
telnet> quit
Connection closed.
(nb: if telnet gets stuck, CTRL-] can be used to get the telnet prompt, and quit can be used to quit telnet)
mind the status "open"
Now the final one, a real firewalled port:
$ nmap www.ziggo.nl -p 22
Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2008-12-19 10:47 CET
Interesting ports on www.ziggo.nl (213.51.129.54):
PORT STATE SERVICE
22/tcp filtered ssh
Nmap finished: 1 IP address (1 host up) scanned in 10.331 seconds
$ telnet www.ziggo.nl 22
Trying 213.51.129.54...
Mind the status 'filtered'!
Also, because the port is firewalled, there's no communication, so telnet will not show anything besides 'Trying <ipaddress>".
(please mind that nmap pings the host prior to testing the port. If a host is not responding to pings, and you still want to test something, use "-P0" (minus P zero) to disable pinging in advance)

How to specify 2nd network card to TCP open and write?

TCP-Open does not have an option to choose which network card to use. It only has an open to connection but not an open from connection to enter. Is there anyway to select the second network card instead of letting the computer to choose?

pwrdesoto wrote:
Only the TCP-Listen allows the user to choose which network adapter to listen. The TCP-Open is require to open an connection to write to and it only has an input on where to connect to but not which network adapter to connect from.
tst is completely right. If you have two network cards they usually have different subnets that should not overlap. If the desired target adress belongs to one of those subnets the TCP/IP routing will automatically select the correct network card to bind the connection to. If you use an address outside of those subnets the default gateway will be selected.
And according to a Microsoft knowledgebase article it is a very bad idea to have more than one default gateway defined in the entire setup. If you do that the default gateway of the default (primary adapter) should be selected automatically but the routing can get really weird sometimes.
If this is not enough for your routing requirements you will have to manipulate the routing tables manually (and no it is no pretty business to do so). Look at http://support.microsoft.com/kb/140859 for a starting point about routing table manipulations under Windows NT (still applicable to XP) based systems.
Rolf Kalbermatter
Rolf Kalbermatter
CIT Engineering Netherlands
a division of Test & Measurement Solutions

Lion server doesn't delete open port service once added in time capsule mgmt from server app.

I was trying to set a specific port to avoid file sharing conflict using time capsule as main router with lion server.
I added a new public service in Server.app in time capsule section where you can manage Airport setting and open ports for mail cal vpn etc. I assigned a port and given a name as requested. In my case a named "test" and gave port number 5678 to try.
Once I decided to delete this public service I noticed that anytime I make a changes in Server.app in Time capsule settings Server.app perform a refresh and the deleted servirce appear again and again with the same name and same setting in airport utility (ports management)
The only way to delet it is to go in airport utility and delete that from there. But in the chance you want to make another change in TC managemnet from Server.app you.ll see the service deleted from everywhere magically appearing again in your airport device in my case a TC.
Callled Apple and they said to investigate the forum.
Now if I maje a change in Server app. TC section to add or remouve public service I have 10 usefull open ports (not enabled) in Airport ( TC)
Any Help?
Thx
Jo

I have been having this same problem, except that I cannot open basic ports through either app. I've tried opening the standard web services port on 80, but neither app (Server or Airport Utility) will open it. Apple support has been worthless.

Port Forwarding for Minecraft - Port not recognized as open

I am trying to set up Port Forwarding to host a Minecraft server on a local machine. I am able to connect to Minecraft from within the network, but when I try to use my external IP, it fails. I have port forwarding (supposedly) set up on my Airport Extreme base station, for TCP/UDP port 25565. When I check on canyouseeme.com , it says that the port is not open. Do I have some configuration wrong in Airport Utility? I'm pretty sure it's not something wrong with my Ubuntu box (the one hosting the server) because I am able to connect to it without any problem using it's Internal IP.
Any help is greatly appreciated.

I am having this same problem. My AirPort Utility is v6.2. I have followed a tutorial labeled for v6. I cannot open my ports.
I have a static IP address with the following:
Router Mode: DHCP and NAT
I increased the DHCP Range so it would include the static IP address I selected.
DHCP Reservations
Description: Minecraft
Reserve Address By: MAC Address and entered my MAC address
IPv4 Address: the static IP address that I created in System Preferences- Network
Port Settings
Description: Minecraft
Public UDP Ports: 25565
Public TCP Ports: 25565
Private IP Address: same as above which is the same as the statis IP address
Private UDP Ports: 25565
Private TCP Ports: 25565
I also checked with Comcast, my internet provider, to make sure they were not blocking port 25565. The person on the chat said that that port was open.
I have been using yougetsignal.com to check if my ports are open and so far nothing.
Does anyone have any suggestions?

Sql server 2012 express - tcp/ip connection to named instance using dynamic port not working

I have a named instance on a SQL 2012 Express server that won't connect via TCP/IP when wanting to connect off of the dynamic port. I can connect via shared memory locally on the server.   I can connect to the namespace when specifying the
dynamic port listed in the configuration manager.
This is the only named instance on the server and it is not the default.
TCP/IP is enabled
Allow Remote connections is enabled
the server browser service is running
I can connect via the dynamic port number
I am testing the connection locally on the server, so I don't believe a firewall is the issue. I get the same results if I test it from a remote computer.
When using the sqlcmd (sqlcmd -S tcp:SQLSRVR\NAMEINST -E) I get the message that "the requested protocol isn't supported [xfffffffff]".   The command (sqlcmd -S tcp:SQLSRVR\NAMEINST,59992 -E) works.
Through SSMS, I get the message "the connection was actively refused".
On other boxes, I can connect with the named instance without having to specify the port.
I have looked through the sql logs and nothing much shows up. The log does show that is listening on the port # for ipv4 and ipv6.   There is also a line in there talking about the SPN not being registered and not to worry about it if
you are not using Kerberos. I logged in through shared memory and it said I was using NTLM.
Any help would be appreciated.
thanks.

Hi clw,
I’m writing to follow up with you on this post. According to your description, I do a test, if you configure the database engine to listen on a specific TCP port (59992), and
the port is opened in the firewall. If you want to connect to the SQL Server instance, you 'd better to
use the port number.
In my opinion, by default, the default instance of the Database Engine uses port 1433, usually, if you have configured the server to listen on a non-default port number, when an instance of SQL Server uses dynamic port allocation, the connection string that
is built at the SQL Server client does not specify the destination TCP/IP port unless the user or the programmer explicitly specifies the port. Therefore, the SQL Server client library queries the server on UDP port 1434 to collect the information about the
destination instance of SQL Server.
If UDP port 1434 is disabled, the SQL Server client cannot dynamically determine the port of the named instance of SQL Server. Therefore, the SQL Server client may be unable to connect to the named instance of SQL Server. In this situation, the SQL Server
client must specify the dynamically allocated port where the named instance of SQL Server is listening.
For more information about configuring an instance of SQL Server to listen on a specific TCP port or dynamic port, you can review the following article.
https://support.transfrm.com/entries/503111-How-to-configure-an-instance-of-SQL-Server-to-listen-on-a-specific-TCP-port-or-dynamic-port
Thanks,
Sofiya Li
Sofiya Li
TechNet Community Support

How to use WAN IP with port number in TCP Open Connection ?

I have a code to write / read a WiFi device server that gets DIO / AI data through a serial port. See attachment.
The device driver has a static IP of 192.168.1.10 and port 30704 for data stream. I have a router which links my laptop and this device driver in a LAN and all is fine.
But now I want to access my device driver through the internet. For this I already have done a port forwarding in my router to direct incoming requests on 30704 port to my device driver.
The issue : I cannot reach my device driver when I enter the WAN side IP of my router like 52.23.45.131 and the Port as 30704 in the TCP Open connection.
Any suggestions ?
Thanks
Raghunathan
LV2012 to Automate Hydraulic Test rigs.
Attachments:
Remote_Logger.vi ‏32 KB

Hello,
without looking at your vi:
Did you try to reach your device from an external Computer?
Because NAT Translation cant be done (by most routers) if you try to reach yourself from the inside.
I am correct that the device created a virtual Networkcard on your computer at which you can communicate locally, right?
Did you try to use another computer in your Network, to reach your computer and the attached device?
If it is not possible, try to enable Routing at your computer.
If it is possible, your router is not forwarding (or you answered at with "no" at the first question or both).
If you are using an external computer and the networkinternal connection from another PC is working and you are 100% sure the router is set up correctly, try to disable all local firewalls and test again. (if it works you need to setup a proper fwrule).
Regards
Rene

Opening TCP 1802 Port on WRT45G

I was browsing the forums and found several threads about opening ports, but none that I looked at seemed to outline or actually explain exactly what to do (unless I'm just missing something). I hope by posting a this thread I can get specific answers rather than trying to have to figure out what other people did and how to apply it my situation.
My Situation:
I'm trying to get the application "Fantasy Grounds" to work, which requires a direct connect through TCP port 1802 and 1803. At the moment I have the ports forwarded to my laptop (static IP 192.168.1.102), triggered, open on my modem, and open on my windows firewall (better than nothing eh?). Every time I try to connect to it, it fails (It has worked on my internal network before, but I'm not sure if it still does). I've run PCflank port scanners, which report it as being "closed" (At one time it was "stealthed".).
After fiddling with this problem for so long, I'm fresh out of ideas. I've tried both the software company, and my ISP tech support, neither helped too much.
Here are some screenshots of what I have set up (Triggering, Forwarding, Modem, and Firewall, respectively). I don't think I set them up incorrectly, but you never know.
http://www.geocities.com/dungeonmaster813/TechSupport.jpg
I have a WRT45G Linksys Router and a Speedtouch 516 Modem if that makes any difference.
Thanks in advance,
MattMessage Edited by OneRingShort on 05-24-200706:40 PM

hi , first off, either use "port forwarding" or "port triggering".....not both at the same time.....the way u have setup port forwarding is fine....i'd also suggest that u turn offf the "windows firewall" since u already have a NAT and a hardware firewall (router) .... my question to you is , does the router do the authentication for you ? ie - have you setup the router as PPPoE or automatic configuration DHCP ???
i'm assuming that it is automatic conenction DHCP , since you have mentioned opening ports on the modem...
if that is the case....you will first have to convert the modem to a "bridge" mode , configure the router to PPPoE and then setup port forwarding on the router only.
by converting the modem to a "bridge" , you will in effect be disabling the NAT and teh authentication will pass on to the router.....
i figure the problem is that u have one too many firewalls ...... the modem if not in a bridge mode has a NAT , the router has a NAT and SPI firewall , and there is also the "windows firewall"
let me if if the above works for u.

Cisco E900 ports 1990/tcp and 5916/tcp open on the LAN. Cannot close them.

Hello,
I just bought a Cisco Linksys E900 wireless router. Can someone explain to me why the router (192.168.1.1 on my case) has ports 1990/tcp and 5916/tcp open on the LAN?? I cannot find a way to close those ports.
Just do a simple:
telnet 192.168.1.1 1990
or
telnet 192.168.1.1 5916
and you'll see those ports are open.
1990/tcp = Cisco STUN Priority 1 port
5916/tcp = I have no idea
Every client on the LAN (wired and wireless) can connect to those ports on the router. I do not want that to happen. It is unncessary and it is just not secure. I only want the router to have port 443 open on the LAN for the web mgmt interface. I do not want any other unncessary port open.
It would be great to have a response from Cisco directly.
Thank you for your time.

JohnT66 wrote:
Thank you for your response.
The router is already updated to the latest firmware (1.0.04 Build 1).
I had to do the update as soon as I opened the box because the default firmware had an incredible serious bug: after setting up the web management interface on the LAN to work over SSL, it was impossible to access the interface because of an SSL bug in the router. The bug is in the release notes of the firmware... that alone says a lot about the very very poor quality of this router.. you can't have that kind of bug in a finished product....
I was able to close port 1990/tcp by disabling WPS in the router, although doing so was pure luck since the router's UI is terrible..
5916/tcp is still open.. since I was able to close 1990/tcp I don't think this is a defective router.. I cannot return a router to the store just because it leaves a port open, the store, sadly, will not take it back... so please Cisco, can you help with this? this product is faulty, it doesn't work as expected, it's your responsability.. please help
Reset the router manually then reconfigure the settings.

The access to our new chess hall may be blocked by your local firewall. You would need to reconfigure your firewall to open port 15010 for TCP traffic.

How do I do the following so I can get into my chess program??
The access to our new chess hall may be blocked by your
local firewall. You would need to reconfigure your firewall to open port 15010
for TCP traffic.

This is not really Firefox related.
What you need to do here is to read the firewall manual which usually explains how to create a rule for what you want to do.
If you're using the Windows XP firewall, see this Microsoft article: http://windows.microsoft.com/en-US/windows-vista/Firewall-frequently-asked-questions

Nimatlabserver indicates server running but port not open

I have a problem, where matlab release13 tells me that the server is running on xxx port when loaded but checking that with netstat -na from a command prompt the xxx port is not open. My main issue is that I can't figure out why the server doesn't open the port? Anyhting you might have learned would be helpful. I used the main.vi to call the SIT start server.vi and I can see then that the port 6011 is open. I tried multiple ports to open in matlab but nothing works. I am using SIT v2.0

Timmy,
If the SIT server is able to open port successfully, netstat -na will show a TCP port 6011 in Listening state. Failure to open the port should cause an error dialog and is most commonly caused by another application already using the port. More information is needed to diagnose the problem, but make sure that no windows security feature is interfering (ex. windows XP SP2 network security setting)
It is not possible to start multiple ports in one matlab process. You will need to start multiple matlab processes and start server by typing 'NiMatlabServer('start',6012)' for example.
-SumitG

DirectAccess - TCP open port not reachable

Similar Messages

Maybe you are looking for