Telnet "Connection closed by foreign host"

Mr. C. · 06-26-2008, 02:58 PM

And this outcome is different that when telnet was started by inetd, right ? Those attempts failed previous, by now at least you are getting to the password connection dialog, right?

jhilton · 06-26-2008, 03:02 PM

Yes, previously when xinetd handled telnetd I was not getting the password, or even the login dialogue. Now with telnetd being ran from the command line I am getting the password and login prompts.

Mr. C. · 06-26-2008, 04:40 PM

Good. This proves the issue is with an authentication or access-control layer such as SELINUX, tcpwrappers (hosts.allow,deny), or pam, or and IDS, or fail2ban, or ?

You're going to need to determine how each of these is configured, and which one is causing the connection to be closed summarily from the server end.

Mr. C. · 06-26-2008, 09:15 PM

FYI: you are aware of the Freshports for Solaris, where you can download a binary SSH package for your Solaris systems, right ? This is probabably a better choice overall.

jhilton · 06-27-2008, 07:04 AM

Alright, thank you for all your help Mr. C. I'll take a look into all your suggestions and try to narrow it down, however I'm beginning to think it might be PAM.

I'll let my boss know about Freshports for Solaris, but however due to the nature of the network and the situation I doubt this idea will make it very far.

Ryand833 · 03-30-2009, 10:37 AM

I know this is an old post and I'm aware of the rules for reviving dead posts, but this issue appears to still be open and I have some information that might help.

When I had my telnetd running through xinetd, I confirmed that it was running by looking at the results of netstat -a.

I would attempt to make a connection from the same machine by doing:

Code:

telnet localhost

It immediately failed with the following:

Code:

[root@homeb /etc] # telnet localhost
Trying 127.0.0.1...
Connected to <hostname>.
Escape character is '^]'.
Connection closed by foreign host.

I checked my /var/log/messages and found the following:

Code:

Mar 30 10:26:44 home xinetd[7448]: FAIL: telnet address from=127.0.0.1

I noticed in my /etc/xinetd.conf file, the default setting for the only_from configuration was localhost. I changed it to read:

Code:

only_from     = localhost 127.0.0.1 192.168.0.0

I then restarted xinetd, and the connection finally made it through to login. I hope this helps somebody.

jaary2000 · 05-20-2009, 03:57 PM

if: netstat -an |grep 23 (ok=LISTEN)
check System/Administration/Server Settings/Services/On Demand Services
make sure On Demand Service, krb5-telnet selected and running
if not, check/save then restart xinetd service

nanasupriatna0902 · 03-29-2016, 04:33 AM

Click image for larger version

Name: eror.jpg
Views: 484
Size: 15.3 KB
ID: 21292

please help me what worng with my configuration