[問題] httpd 80port 一直connection refused

[dododavid006 (朔雪)]

我的電腦目前是ubuntu14.10 kernel 3.16.0-23

今天原本想在自己電腦上測試一些網頁

便用了apache 之後用netstat確定port有

但是nmap localhost 卻掃描不到

還有nc也是connection  refused

之後換用nginx也是同樣的狀況

於是我直接換用nc在80port監聽

listen的nc完全沒有任何訊息 但連線的nc一樣是connection refused

這時我換用其它port就正常了 (測了一個1024內的 跟一個1024以上的)

syslog也沒有相關的訊息

這要如何解決

另外我是第一次碰到這類的問題

不知道該提供什麼樣的資訊才有幫助

如果還需要什麼隨時補充

謝謝

--
※ 發信站: 批踢踢實業坊(ptt.cc), 來自: 1.175.71.186
※ 文章網址: http://www.ptt.cc/bbs/Linux/M.1415286280.A.FB3.html
→ OrzOGC: 看你怎麼啟動nginx的
→ dododavid006: service nginx start
→ danny8376: 防火牆?
→ dododavid006: 我是在本機連的 應該是不會的
→ dirkc: iptables -A INPUT -i lo -p TCP --dport 80 -j DROP
→ dirkc: 擋localhost不困難啊
→ qoopichu: 但是正常來說預設不會擋
→ dododavid006: 我是用ufw 沒有直接碰到iptables ufw的規則預設是放
→ dododavid006: 行本機的 我也確定我沒在ufw上加上擋本機的設定
→ dododavid006: 不過保險起見等下我會查查iptables
→ dododavid006: 剛剛看了一下 應該是沒有類的的規則 另外也看過log
→ dododavid006: 沒有看到對於80 port的block記錄
→ dododavid006: 剛才又測試了將ufw disable確定iptable清空後 再用
→ dododavid006: nc做一次測試 依然無法連線
→ final01: 權限問題??你google"nginx port 80"有人再討論
→ final01: 不然就是設定有問題
→ dododavid006: 問題是我已經用sudo 跑nc 也發生一樣的事了
推 dirkc: iptables的policy是accept?另tcpdump -ni lo 'tcp port 80'
→ dirkc: 有handshake?apache/nginx的log有秀正常啟動嗎?
→ dododavid006: tcpdump 的部份 syn後是馬上收到一個rst ack的
→ dododavid006: iptables我整個貼上來好了
Chain INPUT (policy DROP)
target     prot opt source               destination
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:domain
ACCEPT     udp  --  anywhere             anywhere             udp dpt:domain
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:bootps
ACCEPT     udp  --  anywhere             anywhere             udp dpt:bootps
ufw-before-logging-input  all  --  anywhere             anywhere
ufw-before-input  all  --  anywhere             anywhere
ufw-after-input  all  --  anywhere             anywhere
ufw-after-logging-input  all  --  anywhere             anywhere
ufw-reject-input  all  --  anywhere             anywhere
ufw-track-input  all  --  anywhere             anywhere

Chain FORWARD (policy DROP)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere
ufw-before-logging-forward  all  --  anywhere             anywhere
ufw-before-forward  all  --  anywhere             anywhere
ufw-after-forward  all  --  anywhere             anywhere
ufw-after-logging-forward  all  --  anywhere             anywhere
ufw-reject-forward  all  --  anywhere             anywhere
ufw-track-forward  all  --  anywhere             anywhere

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
ufw-before-logging-output  all  --  anywhere             anywhere
ufw-before-output  all  --  anywhere             anywhere
ufw-after-output  all  --  anywhere             anywhere
ufw-after-logging-output  all  --  anywhere             anywhere
ufw-reject-output  all  --  anywhere             anywhere
ufw-track-output  all  --  anywhere             anywhere

Chain ufw-after-forward (1 references)
target     prot opt source               destination

Chain ufw-after-input (1 references)
target     prot opt source               destination
ufw-skip-to-policy-input  udp  --  anywhere             anywhere             udp dpt:netbios-ns
ufw-skip-to-policy-input  udp  --  anywhere             anywhere             udp dpt:netbios-dgm
ufw-skip-to-policy-input  tcp  --  anywhere             anywhere             tcp dpt:netbios-ssn
ufw-skip-to-policy-input  tcp  --  anywhere             anywhere             tcp dpt:microsoft-ds
ufw-skip-to-policy-input  udp  --  anywhere             anywhere             udp dpt:bootps
ufw-skip-to-policy-input  udp  --  anywhere             anywhere             udp dpt:bootpc
ufw-skip-to-policy-input  all  --  anywhere             anywhere             ADDRTYPE match dst-type BROADCAST

Chain ufw-after-logging-forward (1 references)
target     prot opt source               destination
LOG        all  --  anywhere             anywhere             limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "

Chain ufw-after-logging-input (1 references)
target     prot opt source               destination
LOG        all  --  anywhere             anywhere             limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "

Chain ufw-after-logging-output (1 references)
target     prot opt source               destination

Chain ufw-after-output (1 references)
target     prot opt source               destination

Chain ufw-before-forward (1 references)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere             ctstate RELATED,ESTABLISHED
ACCEPT     icmp --  anywhere             anywhere             icmp destination-unreachable
ACCEPT     icmp --  anywhere             anywhere             icmp source-quench
ACCEPT     icmp --  anywhere             anywhere             icmp time-exceeded
ACCEPT     icmp --  anywhere             anywhere             icmp parameter-problem
ACCEPT     icmp --  anywhere             anywhere             icmp echo-request
ufw-user-forward  all  --  anywhere             anywhere

Chain ufw-before-input (1 references)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere             ctstate RELATED,ESTABLISHED
ufw-logging-deny  all  --  anywhere             anywhere             ctstate INVALID
DROP       all  --  anywhere             anywhere             ctstate INVALID
ACCEPT     icmp --  anywhere             anywhere             icmp destination-unreachable
ACCEPT     icmp --  anywhere             anywhere             icmp source-quench
ACCEPT     icmp --  anywhere             anywhere             icmp time-exceeded
ACCEPT     icmp --  anywhere             anywhere             icmp parameter-problem
ACCEPT     icmp --  anywhere             anywhere             icmp echo-request
ACCEPT     udp  --  anywhere             anywhere             udp spt:bootps dpt:bootpc
ufw-not-local  all  --  anywhere             anywhere
ACCEPT     udp  --  anywhere             224.0.0.251          udp dpt:mdns
ACCEPT     udp  --  anywhere             239.255.255.250      udp dpt:1900
ufw-user-input  all  --  anywhere             anywhere

Chain ufw-before-logging-forward (1 references)
target     prot opt source               destination

Chain ufw-before-logging-input (1 references)
target     prot opt source               destination

Chain ufw-before-logging-output (1 references)
target     prot opt source               destination

Chain ufw-before-output (1 references)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere             ctstate RELATED,ESTABLISHED
ufw-user-output  all  --  anywhere             anywhere

Chain ufw-logging-allow (0 references)
target     prot opt source               destination
LOG        all  --  anywhere             anywhere             limit: avg 3/min burst 10 LOG level warning prefix "[UFW ALLOW] "

Chain ufw-logging-deny (2 references)
target     prot opt source               destination
RETURN     all  --  anywhere             anywhere             ctstate INVALID limit: avg 3/min burst 10
LOG        all  --  anywhere             anywhere             limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] "

Chain ufw-not-local (1 references)
target     prot opt source               destination
RETURN     all  --  anywhere             anywhere             ADDRTYPE match dst-type LOCAL
RETURN     all  --  anywhere             anywhere             ADDRTYPE match dst-type MULTICAST
RETURN     all  --  anywhere             anywhere             ADDRTYPE match dst-type BROADCAST
ufw-logging-deny  all  --  anywhere             anywhere             limit: avg 3/min burst 10
DROP       all  --  anywhere             anywhere

Chain ufw-reject-forward (1 references)
target     prot opt source               destination

Chain ufw-reject-input (1 references)
target     prot opt source               destination

Chain ufw-reject-output (1 references)
target     prot opt source               destination

Chain ufw-skip-to-policy-forward (0 references)
target     prot opt source               destination
DROP       all  --  anywhere             anywhere

Chain ufw-skip-to-policy-input (7 references)
target     prot opt source               destination
DROP       all  --  anywhere             anywhere

Chain ufw-skip-to-policy-output (0 references)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere

Chain ufw-track-forward (1 references)
target     prot opt source               destination

Chain ufw-track-input (1 references)
target     prot opt source               destination

Chain ufw-track-output (1 references)
target     prot opt source               destination
ACCEPT     tcp  --  anywhere             anywhere             ctstate NEW
ACCEPT     udp  --  anywhere             anywhere             ctstate NEW

Chain ufw-user-forward (1 references)
target     prot opt source               destination

Chain ufw-user-input (1 references)
target     prot opt source               destination
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:6881
ACCEPT     udp  --  anywhere             anywhere             udp dpt:6881
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:24800
ACCEPT     udp  --  anywhere             anywhere             udp dpt:24800

Chain ufw-user-limit (0 references)
target     prot opt source               destination
LOG        all  --  anywhere             anywhere             limit: avg 3/min burst 5 LOG level warning prefix "[UFW LIMIT BLOCK] "
REJECT     all  --  anywhere             anywhere             reject-with icmp-port-unreachable

Chain ufw-user-limit-accept (0 references)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere

Chain ufw-user-logging-forward (0 references)
target     prot opt source               destination

Chain ufw-user-logging-input (0 references)
target     prot opt source               destination

Chain ufw-user-logging-output (0 references)
target     prot opt source               destination

Chain ufw-user-output (1 references)
target     prot opt source               destination
※ 編輯: dododavid006 (113.61.208.1), 11/08/2014 22:40:04
→ dirkc: 我沒用ufw所以不確定,不過看起來default policy是drop
→ dirkc: 要不要試試先全關掉,測簡單的環境:http://ppt.cc/UvLq
→ dirkc: 你收到rst是用nc測的嗎?
→ dododavid006: 是的 連線的部份是nc server有測apache,nc
→ dododavid006: 剛才原先要嘗試照著iptables的部份做 但第一部就出
→ dododavid006: 現了 iptables: Too many links. 於是我換成用
→ dododavid006: ufw disable(這其實在之前也有試過) 結果一樣
→ dirkc: 抱歉,剛發現網頁給的步驟少了flush,試:http://ppt.cc/J5qm
→ dirkc: 會收到rst很令人納悶
→ dododavid006: 測試過了 這次沒有出現錯誤 但結果一樣
推 dirkc: 扣除掉fw因素,rst我只想到兩個可能 1.port沒開 2.軟體沒
→ dirkc: accept(), 你說port有開成功,而nc在80不行在其他port可,
→ dirkc: 我只能亂想是別的程式從中作梗,或OS或其他更底層的問題
→ dododavid006: 真的沒辦法嗎 雖然目前可以用換port的方式就是了…
推 dirkc: 很奇怪的現象,也無法複製環境。或許版上高手有其他辦法。
→ dirkc: 我也喜歡用ubuntu,可惜沒辦法幫到你...