Server 4.0.3 Opening a port

Question

Level 1

0 points

Server 4.0.3 Opening a port

I am running OS X Server 4.0.3, and need to open a specific port for remote backup software. It appears that I *should* be able to do this now in server.app under the server | Access tab however when I add an entry to custom access and the port number that I want to open I still get a refused telnet connection to that port when I try to test it. I have also tried opening all services manually with the pf firewall on the command line, but I still have the same issue as it appears that the access pane gets first priority, and there doesn't appear to be a way to disable it and run without any sort of firewall. What's more, I even try some of the ports that the system has generated as open, and some of those don't work either when tested with telnet.

Anyone have any ideas?

Mac mini, OS X Yosemite (10.10.2)

Posted on Mar 31, 2015 12:19 PM

Reply

Answer 1

Linc Davis

Level 10

209,541 points

Apr 1, 2015 8:32 AM in response to twc77

What happens if you allow connections from all networks?

Reply

Answer 2

twc77 Author

Level 1

0 points

Apr 1, 2015 9:48 AM in response to Linc Davis

No change in the ports that are accepted and the ones that are refused.

Reply

Answer 3

Linc Davis

Level 10

209,541 points

Apr 1, 2015 11:42 AM in response to twc77

Then the problem is not caused by the firewall. Telnet doesn't work with all services. Have you actually tested the backup software on the server itself?

Reply

Answer 4

Apr 3, 2015 3:44 PM in response to Linc Davis

Yes, the connection predictably gets refused. Telnet is a fairly common way to test ports from a remote machine. The port was open before upgrading the machine to 10.10.2 from 10.9.5, and the only thing that Apple changed is the way the firewall was handled, which would be the first place one would think to start. If it is truly not a firewall issue, and all ports were truly open then telnet would connect to the vast majority of them, and not have the same result as when only a few ports were open.

Reply