【发布时间】:2017-06-03 00:36:38
【问题描述】:
我有 3 台带有 WHM 的服务器,我想将一些文件从 server1 和 server2 传输到 server3。
我在 server1 上备份了文件,在 server2 上备份了数据库,现在我需要使用 SSH 将文件从 server1 和 server2 获取到 server3。
我使用 SSH 登录到 server3 并使用 wget 命令从 server1 获取文件 - 工作正常。当我尝试使用 wget 从 server2 获取文件时,出现“连接被拒绝”错误。
可能是什么问题?
编辑:我使用在线工具检查是否在 server2 上打开了端口,我发现端口 22 和 80 已关闭。这很奇怪,因为当我登录 WHM 并检查防火墙配置时,两个端口都列在 TCP_IN、TCP_OUT、UDP_IN 和 UDP_OUT 下。
如何使用 ssh 或 whm 打开端口?
我还检查了 server1 并且端口已打开,所以我想这就是我无法从 server2 获取文件的原因,因为端口 22 和 80 已关闭。
这是 netstat -lan | 的输出egrep 听听
tcp 0 0 127.0.0.1:3306 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:587 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:110 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:2095 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:143 0.0.0.0:* LISTEN
tcp 0 0 127.0.0.1:783 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:2096 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:465 0.0.0.0:* LISTEN
tcp 0 0 208.85.2.142:53 0.0.0.0:* LISTEN
tcp 0 0 208.85.2.141:53 0.0.0.0:* LISTEN
tcp 0 0 208.85.2.140:53 0.0.0.0:* LISTEN
tcp 0 0 208.85.2.139:53 0.0.0.0:* LISTEN
tcp 0 0 208.85.2.138:53 0.0.0.0:* LISTEN
tcp 0 0 127.0.0.1:53 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:21 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN
tcp 0 0 127.0.0.1:953 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:25 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:993 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:2082 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:2083 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:995 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:2086 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:2087 0.0.0.0:* LISTEN
tcp6 0 0 :::587 :::* LISTEN
tcp6 0 0 :::110 :::* LISTEN
tcp6 0 0 :::143 :::* LISTEN
tcp6 0 0 ::1:783 :::* LISTEN
tcp6 0 0 :::111 :::* LISTEN
tcp6 0 0 :::80 :::* LISTEN
tcp6 0 0 :::465 :::* LISTEN
tcp6 0 0 :::21 :::* LISTEN
tcp6 0 0 :::22 :::* LISTEN
tcp6 0 0 :::25 :::* LISTEN
tcp6 0 0 :::443 :::* LISTEN
tcp6 0 0 :::993 :::* LISTEN
tcp6 0 0 :::995 :::* LISTEN
unix 2 [ ACC ] STREAM LISTENING 238522 /var/cpanel/php-fpm/cpanelphpmyadmin/sock
unix 2 [ ACC ] STREAM LISTENING 1051941 /var/lib/mysql/mysql.sock
unix 2 [ ACC ] STREAM LISTENING 14357 /run/systemd/journal/stdout
unix 2 [ ACC ] STREAM LISTENING 743720 /var/run/dovecot/stats
unix 2 [ ACC ] STREAM LISTENING 743726 /var/run/dovecot/ssl-params
unix 2 [ ACC ] STREAM LISTENING 1329315 /usr/local/cpanel/var/cpauthd.sock
unix 2 [ ACC ] STREAM LISTENING 1329316 /usr/local/cpanel/var/cpdoveauthd.sock
unix 2 [ ACC ] STREAM LISTENING 1318256 /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket
unix 2 [ ACC ] STREAM LISTENING 743728 /var/run/dovecot/login/ssl-params
unix 2 [ ACC ] STREAM LISTENING 743732 /var/run/dovecot/replicator
unix 2 [ ACC ] STREAM LISTENING 743736 /var/run/dovecot/replication-notify
unix 2 [ ACC ] STREAM LISTENING 247837 /var/clamd
unix 2 [ ACC ] STREAM LISTENING 743739 /var/run/dovecot/login/pop3
unix 2 [ ACC ] STREAM LISTENING 1053251 /var/run/cphulkd.sock
unix 2 [ ACC ] STREAM LISTENING 743747 /var/run/dovecot/log-errors
unix 2 [ ACC ] STREAM LISTENING 743751 /var/run/dovecot/lmtp
unix 2 [ ACC ] STREAM LISTENING 743755 /var/run/dovecot/ipc
unix 2 [ ACC ] STREAM LISTENING 743757 /var/run/dovecot/login/ipc-proxy
unix 2 [ ACC ] STREAM LISTENING 25680 /run/systemd/private
unix 2 [ ACC ] STREAM LISTENING 743761 /var/run/dovecot/indexer-worker
unix 2 [ ACC ] STREAM LISTENING 962684 /var/cpanel/php-fpm/operationsports/sock
unix 2 [ ACC ] STREAM LISTENING 743765 /var/run/dovecot/indexer
unix 2 [ ACC ] STREAM LISTENING 743767 /var/run/dovecot/login/imap
unix 2 [ ACC ] STREAM LISTENING 753466 /var/cpanel/dnsadmin/sock
unix 2 [ ACC ] STREAM LISTENING 12377 /var/run/dbus/system_bus_socket
unix 2 [ ACC ] STREAM LISTENING 743771 /var/run/dovecot/imap-master
unix 2 [ ACC ] STREAM LISTENING 12380 /var/run/rpcbind.sock
unix 2 [ ACC ] STREAM LISTENING 743775 /var/run/dovecot/imap-urlauth-worker
unix 2 [ ACC ] STREAM LISTENING 743777 /var/run/dovecot/token-login/imap-urlauth
unix 2 [ ACC ] STREAM LISTENING 743781 /var/run/dovecot/imap-urlauth
unix 2 [ ACC ] STREAM LISTENING 743789 /var/run/dovecot/imap-hibernate
unix 2 [ ACC ] STREAM LISTENING 743793 /var/run/dovecot/doveadm-server
unix 2 [ ACC ] STREAM LISTENING 743797 /var/run/dovecot/dns-client
unix 2 [ ACC ] STREAM LISTENING 743801 /var/run/dovecot/director-admin
unix 2 [ ACC ] STREAM LISTENING 743805 /var/run/dovecot/dict
unix 2 [ ACC ] STREAM LISTENING 743809 /var/run/dovecot/dict-async
unix 2 [ ACC ] STREAM LISTENING 743813 /var/run/dovecot/config
unix 2 [ ACC ] STREAM LISTENING 743815 /var/run/dovecot/login/login
unix 2 [ ACC ] STREAM LISTENING 743817 /var/run/dovecot/token-login/tokenlogin
unix 2 [ ACC ] STREAM LISTENING 743821 /var/run/dovecot/auth-login
unix 2 [ ACC ] STREAM LISTENING 743825 /var/run/dovecot/auth-client
unix 2 [ ACC ] STREAM LISTENING 743829 /var/run/dovecot/auth-userdb
unix 2 [ ACC ] STREAM LISTENING 743833 /var/run/dovecot/auth-master
unix 2 [ ACC ] STREAM LISTENING 221082 /var/run/nscd/socket
unix 2 [ ACC ] STREAM LISTENING 743837 /var/run/dovecot/auth-worker
unix 2 [ ACC ] STREAM LISTENING 743841 /var/run/dovecot/anvil
unix 2 [ ACC ] SEQPACKET LISTENING 25763 /run/udev/control
unix 2 [ ACC ] STREAM LISTENING 743845 /var/run/dovecot/anvil-auth-penalty
unix 2 [ ACC ] STREAM LISTENING 743849 /var/run/dovecot/quota-status
unix 2 [ ACC ] STREAM LISTENING 743852 /var/run/dovecot/master
unix 2 [ ACC ] STREAM LISTENING 1313199 /etc/apache2/run/cgid_sock.28821
unix 2 [ ACC ] STREAM LISTENING 671672 /var/run/ftpd.sock
unix 2 [ ACC ] STREAM LISTENING 1329314 /usr/local/cpanel/var/cpwrapd.sock
unix 2 [ ACC ] STREAM LISTENING 238524 /var/cpanel/php-fpm/cpanelphppgadmin/sock
unix 2 [ ACC ] STREAM LISTENING 238526 /var/cpanel/php-fpm/cpanelroundcube/sock
编辑:我检查了 server1 和 server2 上的 /etc/ssh/sshd_config,一切都一样,但由于某种原因 server2 拒绝连接。
【问题讨论】:
-
如果您可以使用 ssh 登录,它也应该可以使用 scp:scp user@host:/path/to/file /destination/file
-
我得到同样的错误 [root@osdb3 ~]# scp root@xx.xx.xx.xx:/vBulletin.sql /vBulletin.sql ssh: connect to host xx.xx.xx.xx端口 22:连接被拒绝
-
可能是 SSH 服务器拒绝基于密码的 root 登录。您应该尝试使用不同于 root 的用户访问服务器。否则,如果您对服务器具有 sudo 访问权限,则可以在 /etc/ssh/sshd_config 中设置“PermitRootLogin yes”并重新启动 sshd 守护进程。
-
我打开 sshd_config 文件并取消注释“PermitRootLogin yes”,然后在命令行中输入“service sshd restart”...如果这是一个正确的命令,那么这并没有解决我得到的问题同样的错误。
-
检查
/etc/hosts.deny,也