Bind or Firewall Problems causing DNS Errors on ISPconfig 3 Ubuntu 12.04

Discussion in 'Installation/Configuration' started by sheshes, Mar 27, 2013.

  1. sheshes

    sheshes Member

    Guys I am having a few problems with my setup of ISPconfig 3 with BIND and bastille firewall.

    It seems that some ports appear to be closed where they are open and accessible and some services don't LISTEN on required ports. Here is the output of netstat -tap and netstat -uap


    Active Internet connections (servers and established)
    Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
    tcp 0 0 localhost.localdo:10025 *:* LISTEN 29509/master
    tcp 0 0 *:mysql *:* LISTEN 26715/mysqld
    tcp 0 0 localhost.localdo:spamd *:* LISTEN 7401/spamd.pid
    tcp 0 0 *:http-alt *:* LISTEN 3963/apache2
    tcp 0 0 *:http *:* LISTEN 3963/apache2
    tcp 0 0 *:tproxy *:* LISTEN 3963/apache2
    tcp 0 0 server.sheshes-w:domain *:* LISTEN 10748/named
    tcp 0 0 localhost.locald:domain *:* LISTEN 10748/named
    tcp 0 0 *:ssh *:* LISTEN 29337/sshd
    tcp 0 0 localhost.localdoma:953 *:* LISTEN 10748/named
    tcp 0 0 *:smtp *:* LISTEN 10837/smtpd
    tcp 0 0 *:https *:* LISTEN 3963/apache2
    tcp 0 0 *:2812 *:* LISTEN 5928/monit
    tcp 0 0 localhost.localdo:10024 *:* LISTEN 4554/amavisd (ch3-a
    tcp 0 0 localhost.localdom:9000 *:* LISTEN 7234/php-fpm.conf)
    tcp 0 240 server.sheshes-worl:ssh 87-250-04.netrun.:51223 ESTABLISHED 10023/sshd: adminis
    tcp 0 0 localhost.localdom:http localhost.localdo:45011 TIME_WAIT -
    tcp 0 0 localhost.localdo:53690 localhost.localdo:mysql ESTABLISHED 4554/amavisd (ch3-a
    tcp 0 0 localhost.localdo:mysql localhost.localdo:53762 ESTABLISHED 26715/mysqld
    tcp 0 0 localhost.localdo:mysql localhost.localdo:53690 ESTABLISHED 26715/mysqld
    tcp 0 0 localhost.localdo:53762 localhost.localdo:mysql ESTABLISHED 5588/amavisd (ch3-a
    tcp 0 0 localhost.localdo:45011 localhost.localdom:http TIME_WAIT -
    tcp6 0 0 [::]:pop3 [::]:* LISTEN 7136/couriertcpd
    tcp6 0 0 [::]:imap2 [::]:* LISTEN 7064/couriertcpd
    tcp6 0 0 [::]:domain [::]:* LISTEN 10748/named
    tcp6 0 0 [::]:ssh [::]:* LISTEN 29337/sshd
    tcp6 0 0 ::1%12532608:953 [::]:* LISTEN 10748/named
    tcp6 0 0 [::]:smtp [::]:* LISTEN 10837/smtpd
    tcp6 0 0 [::]:imaps [::]:* LISTEN 7103/couriertcpd
    tcp6 0 0 [::]:pop3s [::]:* LISTEN 7175/couriertcpd
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49232 ESTABLISHED 7682/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49224 ESTABLISHED 7648/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49208 ESTABLISHED 7602/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49238 ESTABLISHED 7702/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49216 ESTABLISHED 7631/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49250 ESTABLISHED 7737/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49235 ESTABLISHED 7694/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49210 ESTABLISHED 7618/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49231 ESTABLISHED 7685/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49229 ESTABLISHED 7671/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49195 ESTABLISHED 7570/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49205 ESTABLISHED 7607/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49249 ESTABLISHED 7735/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49252 ESTABLISHED 7745/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49230 ESTABLISHED 7676/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49253 ESTABLISHED 7748/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49245 ESTABLISHED 7722/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49215 ESTABLISHED 7634/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49198 ESTABLISHED 7578/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49233 ESTABLISHED 7687/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49234 ESTABLISHED 7690/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49199 ESTABLISHED 7581/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49258 ESTABLISHED 7754/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49190 ESTABLISHED 7553/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49243 ESTABLISHED 7714/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49254 ESTABLISHED 7751/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49206 ESTABLISHED 7605/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49201 ESTABLISHED 7589/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49222 ESTABLISHED 7654/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49227 ESTABLISHED 7675/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49212 ESTABLISHED 7621/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49214 ESTABLISHED 7627/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49207 ESTABLISHED 7610/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49237 ESTABLISHED 7699/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49226 ESTABLISHED 7669/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49223 ESTABLISHED 7656/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49213 ESTABLISHED 7624/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49225 ESTABLISHED 7661/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49188 ESTABLISHED 7547/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49239 ESTABLISHED 7705/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49193 ESTABLISHED 7561/couriertls
    tcp6 0 0 server.sheshes-wo:imap2 192.168.1.182%1:49218 ESTABLISHED 7639/couriertls

    netstat -uap
    Active Internet connections (servers and established)
    Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
    udp 0 0 server.sheshes-w:domain *:* 10748/named
    udp 0 0 localhost.locald:domain *:* 10748/named
    udp 0 0 server.sheshes-worl:ntp *:* 29388/ntpd
    udp 0 0 localhost.localdoma:ntp *:* 29388/ntpd
    udp 0 0 *:ntp *:* 29388/ntpd
    udp6 0 0 [::]:domain [::]:* 10748/named
    udp6 0 0 ::1%1944448:ntp [::]:* 29388/ntpd
    udp6 0 0 fe80::20d:9dff:fedc:ntp [::]:* 29388/ntpd
    udp6 0 0 [::]:ntp [::]:* 29388/ntpd

    nmap -sS -v MY_OUTSIDE_IP
    PORT STATE SERVICE
    20/tcp closed ftp-data
    21/tcp closed ftp
    22/tcp open ssh
    25/tcp open smtp
    53/tcp open domain
    80/tcp open http
    110/tcp open pop3
    143/tcp open imap
    443/tcp closed https
    1723/tcp closed pptp
    3306/tcp open mysql
    5550/tcp open sdadmind
    5555/tcp open freeciv
    8080/tcp open http-proxy
    10000/tcp closed snet-sensor-mgmt

    Any ideas?
     
    sheshes, Mar 27, 2013
    #1

Share This Page