Access to Port 7071 seems to be restricted

[roli8200]

Hello

I've installed ZCS 5.0.5 yesterday on our new dedicated host from my computer at home (ssh connection). The logged into the zimbra administration console on port 7071 (also from home). Everything worked fine. Now I'm sitting here in the office and try to access this port again. But I cannot get a connection.

When I tunnel the port 7071 trough a ssh login directly to the dedicated host, I can normaly login to the admin console. (https://localhost:7071) -> Tunnel -> Dedicated host -> localhost:7071
The Firewall is completely disabled and also selinux.

It seems to me, that zimbra internally restricts the access to the zimbra port to the ip address it was accessed in the first.

I noticed that problem also at previous installation on ZCS 4.5.x but there wasn't it a problem. But here we have mostly windows people who has no idea about linux , ssh and tunneling so I need this to get working soon.

Thanks

Roland Käser

[DEREKB]

zimbra doesn't restrict access to port 7071. That is controlled or restricted by your operating system and/or firewall.

Is your zimbra server in your office or in another site ?

[roli8200]

The Zimbra Server is installed on a dedicated host (for this problem): In the Internet.

The Firewall is deactivated.
SE-Linux is disabled
/etc/hosts.allow is empty
/etc/hosts.deny is empty

Its definitely !NOT! a operating system issue! Other servers that run on this system work fine from every location.

SSH works fine from any location
Zimbra HTTPS (webmail) works fine from any location
Zimbra IMAPS,POP3S works fine form any location
Apache http (for the webpages) works fine from any location

Every service works fine from any location, except the administration console on port 7071.

The administration console works only from my home office and after making a ssh tunnel directly to the dedicated host.

Roland

[DEREKB]

have you tried accessing via

https://yourservername:7071/zimbraAdmin

or

https://yourservername:7071

[Kallisti]

Have you thought about that the office might have a firewall blocking outgoing connections on 7071.. Pretty silly if ssh is open but you never know. Try telnetting on port 7071 and see if the connection goes through at all.

HTH/Kallisti

[cheros]

It seems that there is indeed a firewall somewhere in the path.

Why don't you try accessing the system via a tunnel during an SSH session (also safer than having the admin port out in the wild)?

I'm using a Windows XP box in the office, with PuTTY set up so it sets up an SSH tunnel from port 7071 to "localhost:7071", which means that I just open a session to localhost and SSH routes it via all obstacles. It also means you need an initial valid logon to the system before you can try logging onto the admin console.

= CH =