From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <glas-sysadmins@m.gmane.org>
X-Injected-Via-Gmane: http://gmane.org/
To: sysadmins@lists.altlinux.org
From: =?UTF-8?B?0JLQsNC00LjQvCDQmNC70LvQsNGA0LjQvtC90L7Qsg==?=
	<master@usib.irkps.ru>
Date: Tue, 15 May 2007 17:43:49 +0900
Organization: =?UTF-8?B?0KPRgdC+0LvRjNC1LdCh0LjQsdC40YDRgdC60LjQuSDQv9C+0YfRgtCw0LzRgg==?=
Message-ID: <f2brs9$pf3$1@sea.gmane.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8Bit
X-Complaints-To: usenet@sea.gmane.org
X-Gmane-NNTP-Posting-Host: 82.211.160.248
User-Agent: KNode/0.10.4
Sender: news <news@sea.gmane.org>
Subject: [Sysadmins] =?utf-8?b?0J/QvtGA0YLRiyByc3luYw==?=
X-BeenThere: sysadmins@lists.altlinux.org
X-Mailman-Version: 2.1.9rc1
Precedence: list
Reply-To: ALT Linux sysadmin discuss <sysadmins@lists.altlinux.org>
List-Id: ALT Linux sysadmin discuss <sysadmins.lists.altlinux.org>
List-Unsubscribe: <https://lists.altlinux.org/mailman/listinfo/sysadmins>,
	<mailto:sysadmins-request@lists.altlinux.org?subject=unsubscribe>
List-Archive: <http://lists.altlinux.org/pipermail/sysadmins>
List-Post: <mailto:sysadmins@lists.altlinux.org>
List-Help: <mailto:sysadmins-request@lists.altlinux.org?subject=help>
List-Subscribe: <https://lists.altlinux.org/mailman/listinfo/sysadmins>,
	<mailto:sysadmins-request@lists.altlinux.org?subject=subscribe>
X-List-Received-Date: Tue, 15 May 2007 08:45:17 -0000
Archived-At: <http://lore.altlinux.org/sysadmins/f2brs9$pf3$1@sea.gmane.org/>
List-Archive: <http://lore.altlinux.org/sysadmins/>

Пытаюсь подключиться к rsync-серверу с машинки, где в iptables Policy=DROP,
но порт 873 с/на сервер открыт и по UDP, и по TCP:

iptables -t filter -A INPUT  -p tcp -s xx.xx.xx.xx --sport rsync -j ACCEPT
iptables -t filter -A INPUT  -p udp -s xx.xx.xx.xx --sport rsync -j ACCEPT
iptables -t filter -A OUTPUT -p tcp -d xx.xx.xx.xx --dport rsync -j ACCEPT
iptables -t filter -A OUTPUT -p udp -d xx.xx.xx.xx --dport rsync -j ACCEPT

Телнетом получаю следующее:
$ telnet xx.xx.xx.xx rsync
Trying xx.xx.xx.xx...
Connected to xx.xx.xx.xx (xx.xx.xx.xx).
Escape character is '^]'.
Connection closed by foreign host.

Попатка синхронизации приводит к следующему:
$ rsync -vat --delete xx.xx.xx.xx::resource /dest/dir
rsync: read error: Connection reset by peer (104)
rsync error: error in rsync protocol data stream (code 12) at io.c(614)
[receiver=2.6.8]

tcpdump с этого клиента при попытке соединения показывает:
# tcpdump -i any host usib.irkps.ru and port rsync
tcpdump: WARNING: Promiscuous mode not supported on the "any" device
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on any, link-type LINUX_SLL (Linux cooked), capture size 96 bytes
17:36:46.562821 IP yy.yy.yy.yy.60546 > xx.xx.xx.xx.rsync: S
1642475883:1642475883(0) win 5808 <mss 1452,sackOK,timestamp 81491190
0,nop,wscale 6>
17:36:46.567922 IP xx.xx.xx.xx.rsync > yy.yy.yy.yy.60546: S
3794370669:3794370669(0) ack 1642475884 win 5808 <mss
1412,nop,nop,sackOK,nop,wscale 2>
17:36:46.568047 IP yy.yy.yy.yy.60546 > xx.xx.xx.xx.rsync: . ack 1 win 91
17:36:46.568251 IP yy.yy.yy.yy.60546 > xx.xx.xx.xx.rsync: P 1:13(12) ack 1
win 91
17:36:46.573249 IP xx.xx.xx.xx.rsync > yy.yy.yy.yy.60546: . ack 13 win 1452
17:36:46.586749 IP xx.xx.xx.xx.rsync > yy.yy.yy.yy.60546: R 1:1(0) ack 13
win 1452

От других же клиентов подключаюсь-синхронизируюсь без проблем.

В чём может быть затык? Не нужны ли rsync ещё какие-то порты?