Web lists-archives.com

Debian 9 tftp issue




Hello everyone,

I am trying to setup a PXE server on a computer on which I've just installed Debian 9.2.

So I've installed tftpd-hpa, and left the configuration as it was:
TFTP_USERNAME="tftp"
TFTP_DIRECTORY="/srv/tftp"
TFTP_ADDRESS="0.0.0.0:69"
TFTP_OPTIONS="--secure"

But, I can't connect to port 69, from other computers. I'm getting a timeout

This seems very strange, since I can see the tftp service in netstat:

:~$ sudo netstat -tulpn
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name    
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      488/sshd            
tcp        0      0 127.0.0.1:25            0.0.0.0:*               LISTEN      922/exim4           
tcp6       0      0 :::22                   :::*                    LISTEN      488/sshd            
tcp6       0      0 ::1:25                  :::*                    LISTEN      922/exim4           
udp        0      0 0.0.0.0:68              0.0.0.0:*                           535/dhclient        
udp        0      0 0.0.0.0:69              0.0.0.0:*                           1117/in.tftpd       
udp        0      0 0.0.0.0:5353            0.0.0.0:*                           465/avahi-daemon: r 
udp        0      0 0.0.0.0:1900            0.0.0.0:*                           664/minissdpd       
udp        0      0 0.0.0.0:51554           0.0.0.0:*                           465/avahi-daemon: r 
udp6       0      0 :::52077                :::*                                465/avahi-daemon: r 
udp6       0      0 :::5353                 :::*                                465/avahi-daemon: r 

The firewall was left with its defaults on this computer:

:~$ sudo iptables -L -nv
Chain INPUT (policy ACCEPT 968 packets, 96829 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 525 packets, 129K bytes)
 pkts bytes target     prot opt in     out     source               destination         


However, if I check the ports from other computers, it seems that nothing's listening there:

:~$ nc -vz lab 69
lab.home.org [192.168.1.179] 69 (?) : Connection refused
:~$ nc -vz lab 22
lab.home.org [192.168.1.179] 22 (ssh) open

But, if I try to connect from localhost, I can get a test file that I've created in /srv/tftp/:

:~$ echo "get hello.txt" | tftp 192.168.1.179
tftp> Received 7 bytes in 0.0 seconds
tftp> 

Does anybody know what's happening here? What I should check?
Please help me with any suggestions or ideas you might have.

Thank you,


--