Problems with TELNET and FTP since MultiNet 5.2 upgrade

Discussion:

(too old to reply)

Jeremy Begg

2007-07-11 08:39:19 UTC

Hi,

Process Software MultiNet V5.2 Rev A-X, HP rx2600 (900MHz/1.5MB), OpenVMS
I64 V8.3

I just found I can't FTP or TELNET to this machine, and I suspect this has
happened since I upgraded to MultiNet 5.2. I have all the patches
installed.

Using my Mac or UCX FTP client I get this error trying to connect:

421 Service not available, remote server has closed connection.

TELNET also fails, the client reports "Connection closed by foreign host"
before I get a Username prompt, and this OPCOM message is displayed on the
MultiNet system:

MultiNet Server: TELNET (rejected) from ::ffff:150.101.13.22 54696 (saturn.vsm.com.au)

The MultiNet Server is configured as follows:

SERVER-CONFIG>show/full telnet
Service "TELNET":
TCP socket (AF_INET6,SOCK_STREAM), Port 23
Socket Options = SO_KEEPALIVE
INIT() = Merge_Image
LISTEN() = TCP_Listen
CONNECTED() = TCP_Connected
SERVICE() = Internal_Telnet
Program = "MULTINET:LOADABLE_KERBEROS_TELNET"
Accept Hosts = IP-127.0.0.1 , IP-150.101.228.98
Accept Nets = IP-150.101.13.0
Reject by default all other hosts and nets
Log for Accepts & Rejects = OPCOM

SERVER-CONFIG>show/full ftp
Service "FTP":
TCP socket (AF_INET6,SOCK_STREAM), Port 21
Socket Options = SO_KEEPALIVE
Flags = PASS_FOREIGN_SOCKET
INIT() = TCP_Init
LISTEN() = TCP_Listen
CONNECTED() = TCP_Connected
SERVICE() = Internal_FTP
Program = "MULTINET:FTP_SERVER.COM"
Working Set Quota = 100

The OPCOM broadcast suggests that the TELNET issue might be something to do
with IPv6, which I have not (knowingly!) configured. But I can't see any
reason for FTP not to work.

Thanks,

Jeremy Begg

+---------------------------------------------------------+
| VSM Software Services Pty. Ltd. |
| http://www.vsm.com.au/ |
| "OpenVMS Systems Management & Programming" |
|---------------------------------------------------------|
| P.O.Box 402, Walkerville, | E-Mail: ***@vsm.com.au |
| South Australia 5081 | Phone: +61 8 8221 5188 |
|---------------------------| Mobile: 0414 422 947 |
| A.C.N. 068 409 156 | FAX: +61 8 8221 7199 |
+---------------------------------------------------------+

Michael Corbett

2007-07-11 12:53:43 UTC

Permalink

Post by Jeremy Begg
Hi,
Process Software MultiNet V5.2 Rev A-X, HP rx2600 (900MHz/1.5MB), OpenVMS
I64 V8.3
I just found I can't FTP or TELNET to this machine, and I suspect this has
happened since I upgraded to MultiNet 5.2. I have all the patches
installed.
421 Service not available, remote server has closed connection.
TELNET also fails, the client reports "Connection closed by foreign host"
before I get a Username prompt, and this OPCOM message is displayed on the
MultiNet Server: TELNET (rejected) from ::ffff:150.101.13.22 54696 (saturn.vsm.com.au)
SERVER-CONFIG>show/full telnet
TCP socket (AF_INET6,SOCK_STREAM), Port 23
Socket Options = SO_KEEPALIVE
INIT() = Merge_Image
LISTEN() = TCP_Listen
CONNECTED() = TCP_Connected
SERVICE() = Internal_Telnet
Program = "MULTINET:LOADABLE_KERBEROS_TELNET"
Accept Hosts = IP-127.0.0.1 , IP-150.101.228.98
Accept Nets = IP-150.101.13.0
Reject by default all other hosts and nets
Log for Accepts & Rejects = OPCOM
SERVER-CONFIG>show/full ftp
TCP socket (AF_INET6,SOCK_STREAM), Port 21
Socket Options = SO_KEEPALIVE
Flags = PASS_FOREIGN_SOCKET
INIT() = TCP_Init
LISTEN() = TCP_Listen
CONNECTED() = TCP_Connected
SERVICE() = Internal_FTP
Program = "MULTINET:FTP_SERVER.COM"
Working Set Quota = 100
The OPCOM broadcast suggests that the TELNET issue might be something to do
with IPv6, which I have not (knowingly!) configured. But I can't see any
reason for FTP not to work.

You can disable the services from doing IPV6 by changing the
socket-family from AF_INET6 to AF_INET.

$ multinet configure/server
select telnet
set socket-family af_inet
write
exit
$ !

We're working on some of the issues with IPV6 adddresses and
accept and reject lists, intrusion records, and the like.

regards
Mike

--
+-------------------------------------------------------------------------+
Michael Corbett Email: ***@process.com
Process Software Phone: 800 722-7770 x369
959 Concord St. 508 879-6994 x369
Framingham MA 01701-4682 FAX: 508 879-0042

Malcolm Smeaton

2007-07-17 20:44:08 UTC

Permalink

Hello Jeremy

I'm sure you have already done this but for the record...

I had similar behaviour with nodes in our cluster after upgrading to
Multinet V5.2 but before rebooting all the nodes.
--
Regards, Malcolm Smeaton

-----Original Message-----
Sent: Wednesday, 11 July 2007 8:39 p.m.
Subject: Problems with TELNET and FTP since MultiNet 5.2 upgrade
Hi,
Process Software MultiNet V5.2 Rev A-X, HP rx2600 (900MHz/1.5MB),

OpenVMS

I64 V8.3
I just found I can't FTP or TELNET to this machine, and I suspect this

has

happened since I upgraded to MultiNet 5.2. I have all the patches
installed.
421 Service not available, remote server has closed connection.
TELNET also fails, the client reports "Connection closed by foreign

host"

before I get a Username prompt, and this OPCOM message is displayed on

the

MultiNet Server: TELNET (rejected) from ::ffff:150.101.13.22 54696
(saturn.vsm.com.au)
SERVER-CONFIG>show/full telnet
TCP socket (AF_INET6,SOCK_STREAM), Port 23
Socket Options = SO_KEEPALIVE
INIT() = Merge_Image
LISTEN() = TCP_Listen
CONNECTED() = TCP_Connected
SERVICE() = Internal_Telnet
Program = "MULTINET:LOADABLE_KERBEROS_TELNET"
Accept Hosts = IP-127.0.0.1 , IP-150.101.228.98
Accept Nets = IP-150.101.13.0
Reject by default all other hosts and nets
Log for Accepts & Rejects = OPCOM
SERVER-CONFIG>show/full ftp
TCP socket (AF_INET6,SOCK_STREAM), Port 21
Socket Options = SO_KEEPALIVE
Flags = PASS_FOREIGN_SOCKET
INIT() = TCP_Init
LISTEN() = TCP_Listen
CONNECTED() = TCP_Connected
SERVICE() = Internal_FTP
Program = "MULTINET:FTP_SERVER.COM"
Working Set Quota = 100
The OPCOM broadcast suggests that the TELNET issue might be something

do
with IPv6, which I have not (knowingly!) configured. But I can't see

any

reason for FTP not to work.
Thanks,
Jeremy Begg
+---------------------------------------------------------+
| VSM Software Services Pty. Ltd. |
| http://www.vsm.com.au/ |
| "OpenVMS Systems Management & Programming" |
|---------------------------------------------------------|
| South Australia 5081 | Phone: +61 8 8221 5188 |
|---------------------------| Mobile: 0414 422 947 |
| A.C.N. 068 409 156 | FAX: +61 8 8221 7199 |
+---------------------------------------------------------+

Jeremy Begg

2007-07-18 00:38:45 UTC

Permalink

Hi Malcolm,

Post by Malcolm Smeaton
I'm sure you have already done this but for the record...
I had similar behaviour with nodes in our cluster after upgrading to
Multinet V5.2 but before rebooting all the nodes.

Yes. Changing the TCP socket to AF_INET (instead of AF_INETV6) fixed the
TELNET problem. The FTP server started responding again when I restarted
the MultiNet MASTER_SERVER process. I'm not sure why it ever stopped
responding.

Jeremy

Post by Malcolm Smeaton

OpenVMS

I64 V8.3
I just found I can't FTP or TELNET to this machine, and I suspect this

has

host"

before I get a Username prompt, and this OPCOM message is displayed on

the

do
with IPv6, which I have not (knowingly!) configured. But I can't see

any

Ross Smith

2007-07-18 12:18:29 UTC

Permalink

Hmmm...

Now that I look, I have the same changes (AF_INET6 for AF_INET) in
both "telnet" (disabled, I'm using ktelnet which was OK) and "ftp".
The interesting thing is that the ftp server has been working with
AF_INET6 (why isn't this fatal?). It still seems to work with
AF_INET, thank heavens ...

-Ross Smith-

$ mu sho /ver
Process Software MultiNet V5.2 Rev A-X, HP rx2600 (1.40GHz/1.5MB),
OpenVMS I64 V8.3

Post by Malcolm Smeaton
Hello Jeremy
I'm sure you have already done this but for the record...
I had similar behaviour with nodes in our cluster after upgrading to
Multinet V5.2 but before rebooting all the nodes.
--
Regards, Malcolm Smeaton

OpenVMS

I64 V8.3
I just found I can't FTP or TELNET to this machine, and I suspect
this

has

host"

before I get a Username prompt, and this OPCOM message is
displayed on

the

MultiNet Server: TELNET (rejected) from ::ffff:150.101.13.22
54696
(saturn.vsm.com.au)
SERVER-CONFIG>show/full telnet
TCP socket (AF_INET6,SOCK_STREAM), Port 23
Socket Options = SO_KEEPALIVE
INIT() = Merge_Image
LISTEN() = TCP_Listen
CONNECTED() = TCP_Connected
SERVICE() = Internal_Telnet
Program = "MULTINET:LOADABLE_KERBEROS_TELNET"
Accept Hosts = IP-127.0.0.1 , IP-150.101.228.98
Accept Nets = IP-150.101.13.0
Reject by default all other hosts and nets
Log for Accepts & Rejects = OPCOM
SERVER-CONFIG>show/full ftp
TCP socket (AF_INET6,SOCK_STREAM), Port 21
Socket Options = SO_KEEPALIVE
Flags = PASS_FOREIGN_SOCKET
INIT() = TCP_Init
LISTEN() = TCP_Listen
CONNECTED() = TCP_Connected
SERVICE() = Internal_FTP
Program = "MULTINET:FTP_SERVER.COM"
Working Set Quota = 100
The OPCOM broadcast suggests that the TELNET issue might be something

do
with IPv6, which I have not (knowingly!) configured. But I can't see

any

Richard Whalen

2007-07-18 13:36:22 UTC

Permalink

Telnet and FTP were changed to listen on AF_INET6 as part of MultiNet V5.2
IPv6 support.
An IPv4 TCP packet that does not find a matching connection in the IPv4
tables will automatically search the IPv6 tables. This allows applications
to be updated to support IPv6 and have then support IPv4 at the same time.
When an application gets one of these IPv4 connections the address presented
is an IPv4 mapped IPv6 address. This address has the form
::FFFF:192.168.1.5.

The MultiNet master server can perform address restricting checks
(accept-host, accept-nets, reject-hosts, reject-nets) for incoming sessions.
When we made the changes to support IPv6 we accidentially omitted checks in
the IPv6 address handling to support matching IPv4 mapped addresses with
IPv4 addresses that were currently in the accept and reject lists. This
causes configurations that use a combination of accept lists and reject by
default to have problems after the change of the address family from AF_INET
to AF_INET6. Changing the family back to AF_INET gets around this problem.