setting up svn server - Connection refused

[Anton Shterenlikht]

On Fri, Feb 25, 2011 at 09:59:54AM -0500, Greg Larkin wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On 2/25/11 9:32 AM, Anton Shterenlikht wrote:
> [...]
> > 
> > 
> > Many thanks for your help, Greg.
> > 
> > However, following David Kelly's advice,
> > I switched to svn+ssh, and that seems
> > to work fine. Nevertheless, I'm curious
> > to find out why svnserve is not working
> > as expected. 
> > 
> > Anton
> > 
> 
> Hi Anton,
> 
> Frank Shute mentioned /etc/hosts.allow in his reply. Is there anything
> in that file that prevents the connection to TCP port 3690?

not sure, here it is:

#
# hosts.allow access control file for "tcp wrapped" applications.
# $FreeBSD: head/etc/hosts.allow 161710 2006-08-29 09:20:48Z ru $
#
# NOTE: The hosts.deny file is deprecated.
#       Place both 'allow' and 'deny' rules in the hosts.allow file.
#	See hosts_options(5) for the format of this file.
#	hosts_access(5) no longer fully applies.

# Protect against simple DNS spoofing attacks by checking that the
# forward and reverse records for the remote host match. If a mismatch
# occurs, access is denied, and any positive ident response within
# 20 seconds is logged. No protection is afforded against DNS poisoning,
# IP spoofing or more complicated attacks. Hosts with no reverse DNS
# pass this rule.
ALL : PARANOID : RFC931 20 : deny

# Allow anything from localhost.  Note that an IP address (not a host
# name) *MUST* be specified for rpcbind(8).
ALL : localhost 127.0.0.1 : allow

# Comment out next line if you build libwrap without IPv6 support.
ALL : [::1] : allow
#ALL : my.machine.example.com 192.0.2.35 : allow

# To use IPv6 addresses you must enclose them in []'s
#ALL : [fe80::%fxp0]/10 : allow
#ALL : [fe80::]/10 : deny
#ALL : [2001:db8:2:1:2:3:4:3fe1] : deny
#ALL : [2001:db8:2:1::]/64 : allow

# Sendmail can help protect you against spammers and relay-rapers
sendmail : localhost : allow
#sendmail : .nice.guy.example.com : allow
#sendmail : .evil.cracker.example.com : deny
sendmail : ALL : allow

# Rpcbind is used for all RPC services; protect your NFS!
# (IP addresses rather than hostnames *MUST* be used here)
#rpcbind : 192.0.2.32/255.255.255.224 : allow
#rpcbind : 192.0.2.96/255.255.255.224 : allow
rpcbind : ALL : deny

# NIS master server. Only local nets should have access
# (Since this is an RPC service, rpcbind needs to be considered)
ypserv : localhost : allow
#ypserv : .unsafe.my.net.example.com : deny
#ypserv : .my.net.example.com : allow
ypserv : ALL : deny

#
sshd : ALL : allow
svn : ALL : allow

# allow all access from TZAV and pointyhat.freebsd.org
ALL : 137.222.187.241 : allow
ALL : 69.147.83.43 : allow
ALL : 10.10.10.31 : allow

# The rest of the daemons are protected.
ALL : ALL \
	: severity auth.info \
	: twist /bin/echo "You are not welcome to use %d from %h."


> 
> Otherwise, I didn't see anything in the output of your commands that
> indicate a problem.  When I have a problem like this, I often run the
> failing command under truss(1) or strace to help me determine why a
> connection fails or a file cannot be opened.  That may help, but I'm
> glad svn+ssh:// is working in the mean time.

Ok, I might try to learn how to use this tool..

Many thanks
Anton


-- 
Anton Shterenlikht
Room 2.6, Queen's Building
Mech Eng Dept
Bristol University
University Walk, Bristol BS8 1TR, UK
Tel: +44 (0)117 331 5944
Fax: +44 (0)117 929 4423