port forwarding timeouts



Hi all,

I'm trying this command:

ssh -v -L 8000:10.101.41.127:8000 root@xxxxxxxxxxxxx

My localhost - 10.101.41.127 shows 8000 as open:

/root> nmap -p8000 localhost

Starting nmap 3.81 ( http://www.insecure.org/nmap/ ) at 2006-01-17
18:12 BRST
Interesting ports on localhost (127.0.0.1):
PORT STATE SERVICE
8000/tcp open http-alt

The remote machine - 10.222.29.35 - also shows 8000 open:

After a couple of minutes trying to connect to localhost:8000 , I get
these messages:

debug1: Connection to port 8000 forwarding to 10.101.41.127 port 8000
requested.
debug1: channel 3: new [direct-tcpip]
channel 7: open failed: connect failed: Connection timed out
debug1: channel 7: free: direct-tcpip: listening port 8000 for
10.101.41.127 port 8000, connect from 127.0.0.1 port 1773, nchannels 5
debug1: Connection to port 8000 forwarding to 10.101.41.127 port 8000
requested.
debug1: channel 4: new [direct-tcpip]

channel 3: open failed: connect failed: Connection timed out
debug1: channel 3: free: direct-tcpip: listening port 8000 for
10.101.41.127 port 8000, connect from 127.0.0.1 port 1774, nchannels 5
channel 4: open failed: connect failed: Connection timed out
debug1: channel 4: free: direct-tcpip: listening port 8000 for
10.101.41.127 port 8000, connect from 127.0.0.1 port 1775, nchannels 4

I can, however, run telnet (just a test of course) :

/root> telnet localhost 8000
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.

Any ideas?
iksrazal

.



Relevant Pages

  • Re: ipfw issue with nmap false alarms
    ... That is the problem, your scanning localhost. ... I was told/read that nmap may sometimes ... >> Port State Service ...
    (FreeBSD-Security)
  • Re: Help Closing Ports (Debian Woody)
    ... You scanned from localhost, ... > Port State Service ... if root login not disabled). ... This should be closed to all but local hosts. ...
    (comp.os.linux.setup)
  • OpenSSH_4.5p1 on GNU/Linux: connection unexpectedly closed
    ... grsecurity patch enabled, i686 (Gentoo GNU/Linux, Hardened profile) ... debug output gave me this on server (scp localhost - localhost): ... debug2: channel 0: rcvd adjust 4096 ...
    (SSH)
  • OpenSSH_4.5p1 on GNU/Linux: connection unexpectedly closed
    ... grsecurity patch enabled, i686 (Gentoo GNU/Linux, Hardened profile) ... debug output gave me this on server (scp localhost - localhost): ... debug2: channel 0: rcvd adjust 4096 ...
    (SSH)
  • Re: leafnode and host name
    ... > I have read the install readme and the one on unique qualified host ... > I got leafnode to connect and download a list of groups by making ... As server you choose 'news' or 'localhost'. ... it do 'telnet localhost 119'. ...
    (alt.os.linux.suse)