Hi all. Trying to setup my DNS server using BIND 9.x. When I go to run the ''rndc start command, I get this error: rndc: connect: connection refused I''m assuming it''s something to do with my ipchains setting, which those are as follows, with editing of course: Chain input (policy ACCEPT): target prot opt source destination ports ACCEPT udp ------ ns2.xxxxxx.com anywhere domain -> any ACCEPT udp ------ dns.xxxxxx.com anywhere domain -> any ACCEPT udp ------ web1 anywhere domain -> any ACCEPT tcp -y---- anywhere anywhere any -> smtp ACCEPT tcp -y---- anywhere anywhere any -> http ACCEPT tcp -y---- anywhere anywhere any -> ftp ACCEPT tcp -y---- anywhere anywhere any -> ssh ACCEPT all ------ anywhere anywhere n/a ACCEPT all ------ anywhere anywhere n/a REJECT tcp -y---- anywhere anywhere any -> 0:1023 REJECT tcp -y---- anywhere anywhere any -> nfs REJECT udp ------ anywhere anywhere any -> 0:1023 REJECT udp ------ anywhere anywhere any -> nfs REJECT tcp -y---- anywhere anywhere any -> x11:6009 REJECT tcp -y---- anywhere anywhere any -> xfs Chain forward (policy ACCEPT): Chain output (policy ACCEPT): The situation is that we''re wanting to move DNS in house so, the first couple lines are for our current DNS provider''s systems. I''ve been somewhat stuck here, any ideas would be greatly appreciated. Kevin M. Sayre
DNS connection refusedHave you tried using the ip address as the source in the input. Without access to the DNS, perhaps it can''t resolve the ns2.xxxxxx.com. Jerry ----- Original Message ----- From: Kevin Sayre To: ''redhat-secure-server@redhat.com'' Sent: Friday, August 17, 2001 10:18 AM Subject: DNS connection refused Hi all. Trying to setup my DNS server using BIND 9.x. When I go to run the ''rndc start command, I get this error: rndc: connect: connection refused I''m assuming it''s something to do with my ipchains setting, which those are as follows, with editing of course: Chain input (policy ACCEPT): target prot opt source destination ports ACCEPT udp ------ ns2.xxxxxx.com anywhere domain -> any ACCEPT udp ------ dns.xxxxxx.com anywhere domain -> any ACCEPT udp ------ web1 anywhere domain -> any ACCEPT tcp -y---- anywhere anywhere any -> smtp ACCEPT tcp -y---- anywhere anywhere any -> http ACCEPT tcp -y---- anywhere anywhere any -> ftp ACCEPT tcp -y---- anywhere anywhere any -> ssh ACCEPT all ------ anywhere anywhere n/a ACCEPT all ------ anywhere anywhere n/a REJECT tcp -y---- anywhere anywhere any -> 0:1023 REJECT tcp -y---- anywhere anywhere any -> nfs REJECT udp ------ anywhere anywhere any -> 0:1023 REJECT udp ------ anywhere anywhere any -> nfs REJECT tcp -y---- anywhere anywhere any -> x11:6009 REJECT tcp -y---- anywhere anywhere any -> xfs Chain forward (policy ACCEPT): Chain output (policy ACCEPT): The situation is that we''re wanting to move DNS in house so, the first couple lines are for our current DNS provider''s systems. I''ve been somewhat stuck here, any ideas would be greatly appreciated. Kevin M. Sayre
Yes, it looks like ipchains. You need a rule allowing incoming domain request (any -> domain). udp for lookups, tcp if you''re allowing zone transfers (or ''ls''-type queries...), though I typically only enable zone transfers to specific hosts. Edit you /etc/sysconfig/ipchains file and add something like: -A input -p udp -s 0/0 -d 0/0 53 -j ACCEPT somewhere above your default deny rule. (You might want to make the destination a specific ip address...) <Steve Reppucci> On Fri, 17 Aug 2001, Kevin Sayre wrote:> Hi all. Trying to setup my DNS server using BIND 9.x. When I go to run the > ''rndc start command, I get this error: > > rndc: connect: connection refused > > I''m assuming it''s something to do with my ipchains setting, which those are > as follows, with editing of course: > > Chain input (policy ACCEPT): > target prot opt source destination ports > ACCEPT udp ------ ns2.xxxxxx.com anywhere domain -> > any > ACCEPT udp ------ dns.xxxxxx.com anywhere domain -> > any > ACCEPT udp ------ web1 anywhere domain -> > any > ACCEPT tcp -y---- anywhere anywhere any -> > smtp > ACCEPT tcp -y---- anywhere anywhere any -> > http > ACCEPT tcp -y---- anywhere anywhere any -> > ftp > ACCEPT tcp -y---- anywhere anywhere any -> > ssh > ACCEPT all ------ anywhere anywhere n/a > ACCEPT all ------ anywhere anywhere n/a > REJECT tcp -y---- anywhere anywhere any -> > 0:1023 > REJECT tcp -y---- anywhere anywhere any -> > nfs > REJECT udp ------ anywhere anywhere any -> > 0:1023 > REJECT udp ------ anywhere anywhere any -> > nfs > REJECT tcp -y---- anywhere anywhere any -> > x11:6009 > REJECT tcp -y---- anywhere anywhere any -> > xfs > Chain forward (policy ACCEPT): > Chain output (policy ACCEPT): > > The situation is that we''re wanting to move DNS in house so, the first > couple lines are for our current DNS provider''s systems. I''ve been somewhat > stuck here, any ideas would be greatly appreciated. > > Kevin M. Sayre >-- Steve Reppucci sgr@logsoft.com | Logical Choice Software http://logsoft.com/ | =-=-=-=-=-=-=-=-=-=- My God! What have I done? -=-=-=-=-=-=-=-=-=-=
I have my Apache server running, but I am missing something either
in the configuration, or in the file permissions in my html directory. What
I am getting when I try to hit the page is:
Forbidden
You don''t have permission to access / on this server.
Help???
Andrew J. McQuade
--------------------------------------------
*Email(s): mailto:amcquade@waryak.net
mailto:amcquade@waryak.net
On Mon, Aug 20, 2001 at 07:46:23PM -0600, Andrew J. McQuade wrote:> I have my Apache server running, but I am missing something either > in the configuration, or in the file permissions in my html directory. What > I am getting when I try to hit the page is: > > Forbidden > You don''t have permission to access / on this server. > > Help???put index.html into that directory, or change the directives in # directory index. Separate multiple entries with spaces. DirectoryIndex index.html
I have that already, both index.html, and .htm in the correct directory
Andrew J. Mcquade
AKA: Lonewolf, KC5HHR
*Email(s): mailto:amcquade@waryak.net
mailto:lonewolf@waryak.net
I think you need ''Options +Indexes'' in there too... On Mon, 20 Aug 2001, Andrew J. McQuade wrote:> I have that already, both index.html, and .htm in the correct directory > > Andrew J. Mcquade > AKA: Lonewolf, KC5HHR > *Email(s): mailto:amcquade@waryak.net > mailto:lonewolf@waryak.net > > > > > > > _______________________________________________ > Redhat-secure-server mailing list > Redhat-secure-server@redhat.com > https://listman.redhat.com/mailman/listinfo/redhat-secure-server >-- Steve Reppucci sgr@logsoft.com | Logical Choice Software http://logsoft.com/ | =-=-=-=-=-=-=-=-=-=- My God! What have I done? -=-=-=-=-=-=-=-=-=-=
Hey Andrew,
Check the preceding directory''s to your document root and make sure
they have public execute permissions.
This is a common problem on a stock RedHat install and you add a new user and
that users directory becomes his/hers web site.
By default a users directory does not have public execute permissions. And you
result in the same error that you gave.
Hope this helps,
Brent Canipe
Network Admin at CyberStation X
Brent@CyberStationX.com
*********** REPLY SEPARATOR ***********
On 8/20/2001 at 8:48 PM Andrew J. McQuade wrote:
I have my Apache server running, but I am missing something either in
the configuration, or in the file permissions in my html directory. What I am
getting when I try to hit the page is:
Forbidden
You don''t have permission to access / on this server.
Help???
Andrew J. McQuade
--------------------------------------------
*Email(s): mailto:amcquade@waryak.net
mailto:amcquade@waryak.net
<html> If you configured using Red Hats Linux Conf then you may have messed your conf file. This is in the FAQ on the apache website.<br> <br> Travis<br> <br> At 08:48 PM 8/20/2001 -0500, you wrote:<br> <br> <font face="Times New Roman, Times" size=4 color="#FF0000"><blockquote type=cite cite> </font><font face="Comic Sans MS">I have my Apache server running, but I am missing something either in the configuration, or in the file permissions in my html directory. What I am getting when I try to hit the page is:<br> </font><br> <h1><b>Forbidden</b></h1><br> <br> </b></h1><font face="Comic Sans MS">You don''t have permission to access / on this server.<br> </font><br> Help???<br> <br> <font face="Times New Roman, Times" size=4 color="#FF0000">Andrew J. McQuade </font><br> <font face="arial" size=2>--------------------------------------------</font><font face="Comic Sans MS"> <br> </font><font face="wingdings" size=2 color="#FF0000">*</font><font face="arial" size=2 color="#FF0000">Email(s):</font><font face="Comic Sans MS"> </font><a href="mailto:amcquade@waryak.net"><font face="Times New Roman, Times">mailto:</a>amcquade@waryak.net</font><font face="Comic Sans MS"> <br> </font><font face="Times New Roman, Times" color="#FF0000"> <a href="mailto:amcquade@waryak.net">mailto:amcquade@waryak.net</a></font><font face="Comic Sans MS"> </font></blockquote></html>