[stunnel-users] stunnel4 stealing my ports (listening on ports it shouldn't be)

Wed Apr 12 04:21:08 CEST 2006

I have two stunnel processes. One listing on 443 -> localhost:80. The  
other listening on 8000 -> localhost:7001. (See configs below.)

However, when I stop the process listening on port 7001, both stunnel  
processes start listening on 7001 (and a few other ports). I'm  
completely confused as to why this would happen.

This is what I see normally:
mta4-tiny-support (epgate)[6]$ sudo lsof -p 25253 -p 25255 -a -i4
Password:
COMMAND    PID USER   FD   TYPE  DEVICE SIZE NODE NAME
stunnel4 25253 root    6u  IPv4 3439450       TCP *:8000 (LISTEN)
stunnel4 25255 root    6u  IPv4 3439456       TCP *:https (LISTEN)

This is what I see when stunnel appears to go bizerk: (after stopping  
the process that was listening on ports *:7000, localhost:7001 &  
localhost:7005)

COMMAND    PID USER   FD   TYPE  DEVICE SIZE NODE NAME
stunnel4 22788 root    5u  IPv4 1269640       TCP 127.0.0.1:4341- 
 >127.0.0.1:19996 (CLOSE_WAIT)
stunnel4 22788 root    6u  IPv4 1273504       TCP 127.0.0.1:7001  
(LISTEN)
stunnel4 22788 root    7u  IPv4 1273476       TCP 127.0.0.1:4606- 
 >127.0.0.1:19995 (ESTABLISHED)
stunnel4 22788 root    9u  IPv4 1273477       TCP 127.0.0.1:19995- 
 >127.0.0.1:4606 (ESTABLISHED)
stunnel4 22788 root   11u  IPv4 1273507       TCP *:7000 (LISTEN)
stunnel4 22788 root   17u  IPv4 1273515       TCP 127.0.0.1:7005  
(LISTEN)
stunnel4 22788 root   19u  IPv4 1274895       TCP 127.0.0.1:7001- 
 >127.0.0.1:1793 (CLOSE_WAIT)
stunnel4 22788 root   24u  IPv4 1275089       TCP *:8000 (LISTEN)
stunnel4 22790 root    5u  IPv4 1269640       TCP 127.0.0.1:4341- 
 >127.0.0.1:19996 (CLOSE_WAIT)
stunnel4 22790 root    6u  IPv4 1273504       TCP 127.0.0.1:7001  
(LISTEN)
stunnel4 22790 root    7u  IPv4 1273476       TCP 127.0.0.1:4606- 
 >127.0.0.1:19995 (ESTABLISHED)
stunnel4 22790 root    9u  IPv4 1273477       TCP 127.0.0.1:19995- 
 >127.0.0.1:4606 (ESTABLISHED)
stunnel4 22790 root   11u  IPv4 1273507       TCP *:7000 (LISTEN)
stunnel4 22790 root   17u  IPv4 1273515       TCP 127.0.0.1:7005  
(LISTEN)
stunnel4 22790 root   19u  IPv4 1274895       TCP 127.0.0.1:7001- 
 >127.0.0.1:1793 (CLOSE_WAIT)
stunnel4 22790 root   24u  IPv4 1275094       TCP *:443 (LISTEN)

Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address          
State       User       Inode      PID/Program name
tcp        0      0 127.0.0.1:7008          0.0.0.0:*                
LISTEN     0          1281907    24848/python
tcp        0      0 0.0.0.0:8000            0.0.0.0:*                
LISTEN     0          1275089    22788/stunnel4
tcp        0      0 0.0.0.0:1025            0.0.0.0:*                
LISTEN     0          1681       -
tcp        0      0 0.0.0.0:963             0.0.0.0:*                
LISTEN     0          1556       1205/rpc.statd
tcp        0      0 0.0.0.0:111             0.0.0.0:*                
LISTEN     0          1238       986/portmap
tcp        0      0 0.0.0.0:80              0.0.0.0:*                
LISTEN     0          1281911    24848/python
tcp        0      0 127.0.0.1:7025          0.0.0.0:*                
LISTEN     0          1281130    24605/master
tcp        0      0 127.0.0.1:7026          0.0.0.0:*                
LISTEN     0          1281542    24677/python
tcp        0      0 0.0.0.0:818             0.0.0.0:*                
LISTEN     0          1356       1061/ypbind
tcp        0      0 127.0.0.1:7027          0.0.0.0:*                
LISTEN     0          1281731    24777/python
tcp        0      0 127.0.0.1:7028          0.0.0.0:*                
LISTEN     0          1281910    24848/python
tcp        0      0 0.0.0.0:22              0.0.0.0:*                
LISTEN     0          1486       1195/sshd
tcp        0      0 0.0.0.0:7000            0.0.0.0:*                
LISTEN     0          1273507    22788/stunnel4
tcp        0      0 127.0.0.1:5432          0.0.0.0:*                
LISTEN     400        1269115    20559/postmaster
tcp        0      0 172.16.80.213:25        0.0.0.0:*                
LISTEN     0          1281126    24605/master
tcp        0      0 172.16.80.212:25        0.0.0.0:*                
LISTEN     0          1280994    24584/master
tcp        0      0 127.0.0.1:7001          0.0.0.0:*                
LISTEN     0          1273504    22788/stunnel4
tcp        0      0 0.0.0.0:443             0.0.0.0:*                
LISTEN     0          1275094    22790/stunnel4
tcp        0      0 127.0.0.1:955           0.0.0.0:*                
LISTEN     0          1518       1201/famd
tcp        0      0 127.0.0.1:7005          0.0.0.0:*                
LISTEN     0          1273515    22788/stunnel4
tcp        0      0 127.0.0.1:7006          0.0.0.0:*                
LISTEN     0          1281540    24677/python
tcp        0      0 127.0.0.1:7007          0.0.0.0:*                
LISTEN     0          1281724    24777/python

I'm running stunnel 4.09 on Debian 3.1/Linux 2.6 Kernel. My  
configurations are:
pid=/var/run/epgate_admin_stunnel4.pid
cert=/epgate/etc/ssl/admin.stunnel

[Admin]
accept=8000
connect=7001

and:
pid=/var/run/epgate_quarantine_stunnel4.pid
cert=/epgate/etc/ssl/quar.stunnel

[Quarantine]
accept=443
connect=80

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.stunnel.org/pipermail/stunnel-users/attachments/20060411/98e6d525/attachment.html>