setting up svn server - Connection refused
mexas at bristol.ac.uk
Fri Feb 25 15:11:52 UTC 2011
On Fri, Feb 25, 2011 at 09:59:54AM -0500, Greg Larkin wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> On 2/25/11 9:32 AM, Anton Shterenlikht wrote:
> > Many thanks for your help, Greg.
> > However, following David Kelly's advice,
> > I switched to svn+ssh, and that seems
> > to work fine. Nevertheless, I'm curious
> > to find out why svnserve is not working
> > as expected.
> > Anton
> Hi Anton,
> Frank Shute mentioned /etc/hosts.allow in his reply. Is there anything
> in that file that prevents the connection to TCP port 3690?
not sure, here it is:
# hosts.allow access control file for "tcp wrapped" applications.
# $FreeBSD: head/etc/hosts.allow 161710 2006-08-29 09:20:48Z ru $
# NOTE: The hosts.deny file is deprecated.
# Place both 'allow' and 'deny' rules in the hosts.allow file.
# See hosts_options(5) for the format of this file.
# hosts_access(5) no longer fully applies.
# Protect against simple DNS spoofing attacks by checking that the
# forward and reverse records for the remote host match. If a mismatch
# occurs, access is denied, and any positive ident response within
# 20 seconds is logged. No protection is afforded against DNS poisoning,
# IP spoofing or more complicated attacks. Hosts with no reverse DNS
# pass this rule.
ALL : PARANOID : RFC931 20 : deny
# Allow anything from localhost. Note that an IP address (not a host
# name) *MUST* be specified for rpcbind(8).
ALL : localhost 127.0.0.1 : allow
# Comment out next line if you build libwrap without IPv6 support.
ALL : [::1] : allow
#ALL : my.machine.example.com 192.0.2.35 : allow
# To use IPv6 addresses you must enclose them in 's
#ALL : [fe80::%fxp0]/10 : allow
#ALL : [fe80::]/10 : deny
#ALL : [2001:db8:2:1:2:3:4:3fe1] : deny
#ALL : [2001:db8:2:1::]/64 : allow
# Sendmail can help protect you against spammers and relay-rapers
sendmail : localhost : allow
#sendmail : .nice.guy.example.com : allow
#sendmail : .evil.cracker.example.com : deny
sendmail : ALL : allow
# Rpcbind is used for all RPC services; protect your NFS!
# (IP addresses rather than hostnames *MUST* be used here)
#rpcbind : 192.0.2.32/255.255.255.224 : allow
#rpcbind : 192.0.2.96/255.255.255.224 : allow
rpcbind : ALL : deny
# NIS master server. Only local nets should have access
# (Since this is an RPC service, rpcbind needs to be considered)
ypserv : localhost : allow
#ypserv : .unsafe.my.net.example.com : deny
#ypserv : .my.net.example.com : allow
ypserv : ALL : deny
sshd : ALL : allow
svn : ALL : allow
# allow all access from TZAV and pointyhat.freebsd.org
ALL : 22.214.171.124 : allow
ALL : 126.96.36.199 : allow
ALL : 10.10.10.31 : allow
# The rest of the daemons are protected.
ALL : ALL \
: severity auth.info \
: twist /bin/echo "You are not welcome to use %d from %h."
> Otherwise, I didn't see anything in the output of your commands that
> indicate a problem. When I have a problem like this, I often run the
> failing command under truss(1) or strace to help me determine why a
> connection fails or a file cannot be opened. That may help, but I'm
> glad svn+ssh:// is working in the mean time.
Ok, I might try to learn how to use this tool..
Room 2.6, Queen's Building
Mech Eng Dept
University Walk, Bristol BS8 1TR, UK
Tel: +44 (0)117 331 5944
Fax: +44 (0)117 929 4423
More information about the freebsd-questions