Out of the blue connection attempts to TCP port 2222 are getting refused!

[Lucius]

Hi Gents,

Out of the blue connection attempts to port 2222 are giving back a reset (After a sync a reset is sent back).

root@speed:/usr/local/directadmin/conf # tcpdump port 2222
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on em0, link-type EN10MB (Ethernet), capture size 65535 bytes
17:09:17.325262 IP ip212-238-85-19.hotspotsvankpn.com.62929 > www.xxxxx.xx.2222: Flags , seq 981328218, win 65535, options [mss 1418,nop,wscale 4,nop,nop,TS val 686496295 ecr 0,sackOK,eol], length 0
17:09:17.325530 IP www.xxxxx.xx.2222 > ip212-238-85-19.hotspotsvankpn.com.62929: Flags [R.], seq 0, ack 981328219, win 65535, length 0

Although we have a socket:

root@speed:/usr/local/directadmin/conf # netstat -a | grep LISTEN||2222
tcp46 0 0 *.2222 *.* LISTEN

The Log file is really quiet:

root@speed:/var/log/directadmin # more error.log
Feb 21 00:00:00 speed newsyslog[46742]: logfile turned over

The other log files are not saying anything particular...

After stopping Directadmin and starting it in debug mode and trying to connect again.. nothing shows..

root@speed:/usr/local/directadmin # ./directadmin b2000
Debug mode. Level 2000

IP Aliases found on em0:
listType: 0
0: 00:0c:29:15:ee:e4
1: nn.nn.nn.nn
DirectAdmin 1.41.1
Accepting Connections on port 2222

The mac address is right and the IP address too..
Still nothing happens.. no logs, no warnings.. nothing!

So now I am lost... any help appreciated

 

[chatwizrd]

Disable your firewall and try again. Also obscuring your ip address isnt going to help as now we cant test it.

 

[Lucius]

mouse

Disable your firewall and try again. Also obscuring your ip address isnt going to help as now we cant test it.

damn.. when I had this I adjusted my ipf ruleset a couple of times and flushed it and reloaded it without effect.
Once at home I was able to connect.. now I read your response and I think that you are right.. somehow in between something funky happened at the L3 filtering

Now for something strange.. I wasn't able to login as admin anymore.. no sweat since "passwd admin" should work.. but no.. still not being able to log in.
So the following did the trick:
in directadmin.conf change lost_password=0 to lost_password=1 .. use mailx or mutt or pine or whatever and
follow the procedure.. sometimes being creative helps