Thread: Connection Refused

Having this problem for more than two years:

url 192.168.1.1 returns "connection refused ..."

Checked and rechecked all settings - nothing out of place.

ping 192.168.1.1 works fine. No problem in surfing, email, etc, everything normal. ipconfig shows network address correctly. (192.168.1.2, 255.255.255.0, 192.168.1.1) Have mutiple DNS addresses , openDNS, 192.168.1.1 as well as MTNL's recommended DNS servers.

Telnet to 192.168.1.1 works fine - can login as admin. Can't login as root. [Does anyone know root password]
Dyndys site shows possible blocking of port 80. No firewalls to block anything.

Could anyone please suggest remedies?

DSL502T / 256

Peculiar problem.
try this:
When you are connected to Internet
Check your Dynamic IP.
Current IP Check
Now in Browser address bar type this IP.
Does the modem menu page open or
you get a window to log in to the modem /.

2. Start RUN type cmd OK
New window opens
type ipconfig /all
Copy/paste data here.
3.

Default password for "root" can be password or root
Also if available third one: support PW password

4. REF:Dlink Settings for Broadband
suggests
http://192.168.1.1
Which browser you use ?

Thank you.

1. Current IP check - same problem - "connection refused ..."
2. Pasting ipconfig /all results at the end of the post
3. root password: Have tried all these and doesn't work.
4. Thanks for settings page. Browser: FF

Results of ipconfig

Windows IP Configuration

Host Name . . . . . . . . . . . . : Home
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Realtek RTL8168C(P)/8111C(P) PCI-E
igabit Ethernet NIC
Physical Address. . . . . . . . . : 00-1F-D0-E6-AA-AF
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 192.168.1.1
208.67.222.222
208.67.220.220
59.185.0.23
59.185.0.50

--

Ok. Now try this;
In TCP/Ip select obtain Ip address automatically.
Apply .save.
Check connecting to internet.
Again check ipconfig /all
Do you still get IP address 192.168.1.1 ? as modem address ?

Connection refused means the port is not open. So it is very much possible the http server on your modem/router is not turned on OR it's listening on a different port. Maybe someone could help better if you were to mention the make/model but a generic guess would be to try ports 81, 8000, 8080 as in http://192.168.1.1:8080/ etc.

If that doesn't work and you still need to access it, you could try a hard-reset on your modem/router and that should hopefully reset it to its defaults. And most modems/routers default to port 80.

Yes, I get the same IP address.
--

Originally Posted by essbebe

Ok. Now try this;
In TCP/Ip select obtain Ip address automatically.
Apply .save.
Check connecting to internet.
Again check ipconfig /all
Do you still get IP address 192.168.1.1 ? as modem address ?

Originally Posted by hexwiz

Connection refused means the port is not open. So it is very much possible the http server on your modem/router is not turned on OR it's listening on a different port. Maybe someone could help better if you were to mention the make/model but a generic guess would be to try ports 81, 8000, 8080 as in ht_tp://192.168.1.1:8080 etc.

Have tried all thatwithout success.
Strangely, the /etc/progdefs.xml file on the router shows http access on port 8080 disabled.

<service>
<name>http</name>
<enable>no</enable>
<protocol>tcp</protocol>
<port>8080</port>
<max>0</max>
<program>thttpd</program>
<arg>-l</arg>
</service>

Originally Posted by hexwiz

If that doesn't work and you still need to access it, you could try a hard-reset on your modem/router and that should hopefully reset it to its defaults. And most modems/routers default to port 80.

Trying to avoid hard reset.

--

DNS Servers . . . . . . . . . . . : 192.168.1.1
208.67.222.222
208.67.220.220
59.185.0.23
59.185.0.50

delete192.168.1.1 or enter in bottom of list

Originally Posted by essbebe

delete192.168.1.1 or enter in bottom of list

Same result; doesn't seem to help.

Delete here ( if 192.168.1.1) and enter
India Broadband Forum
208.67.220.220 and 208.67.222.222

If you can telnet then why dont you try edit and set the progdefs.xml to enable http on port 8080 and load it that way? You could always change it back if you dont want it but at least it might pull up the gui for you to check for once!

Originally Posted by essbebe

Delete here ( if 192.168.1.1) and enter
Broadband Forum
208.67.220.220 and 208.67.222.222

Well, I can't access that page unless I login to the router.

Originally Posted by hexwiz

If you can telnet then why dont you try edit and set the progdefs.xml to enable http on port 8080 and load it that way? You could always change it back if you dont want it but at least it might pull up the gui for you to check for once!

BusyBox does not have editing commands. Not sure if progdefs was meant to be that way or has been hacked by botnet worm.

@venkie
1. You could enter in the browser the address shown
on the top of the router page posted earlier.

2. You could delete the port address 8080 and try.
When i tried for my modem with port address,
I could not access the menu.

3. Confirm OS: XP Sp3 or Linux or both
I am familiar only with windows OS.

4.You could PM me the Dynamic IP, when both are on line,
so that to check whether I could access the modem settings.
If earlier you had changed the ID and password ,
include this info also.

(a)
If i cannot access No result.
b)
If I access , i can change those
(c)for DNS in the router page.
Or you can try this procedure with your friend.
Feedback.

INFO:
Option For Hard RESET not being tried.

Originally Posted by essbebe

@venkie
1. You could enter in the browser the address shown
on the top of the router page posted earlier.

2. Confirm OS: XP Sp3 or Linux or both
I am familiar only with windows OS.

Request illustrate in detail please. I get "connection refused ..." error.

Yes, XP. Router runs on linux.
--

I cannot access as I don't have this router.

See this for test by you or on your friend's computer.
Attachment 5872

Originally Posted by essbebe

I cannot access as I don't have this router.

See this for test by you or on your friend's computer.
Attachment 5872

Thank you Sir. But the primary problem is that I can not access the router - login and password page does not open at all. It shows "connection refused ..." error instead.
--

Assume that when you type your dynamic IP
not 192.168.1.1
you get a message connection refused ?
is that correct ?

Post screen shot as annexure. as a JPG picture.

why dont you use the admin a/c instead of root?same privileges right?

Originally Posted by venkie

Well, I can't access that page unless I login to the router.



BusyBox does not have editing commands. Not sure if progdefs was meant to be that way or has been hacked by botnet worm.

Since you mention BusyBox, telnet in and try this:

Code:

/usr/sbin/thttpd -g -d / -u root -p 8080

You should now be able to access the linux file system on port 8080 with something like http://192.168.1.1:8080

This is possible since the BusyBox uses the thttpd server daemon for its web functions. - thttpd

And...

On DLINK routers with the busybox shell the root password defaults to admin

And...

You could use common Linux shell commands - ifconfig, ls, gzip, hostname and even edit with my favorite editor on Linux - VI. But then again not all Linux commands may be available depending on how your shell was compiled.

.... at least that's what I found :5:

Wow !! That works like a shot !!! Thank you very much. I get the file system on the browser (index of / and so forth) Now, let me figure out how to edit files.

Y'day I tried router diagnostics (from neolics)
and found that ftp and http services are blocked. Settings are inaccessible. No clue as to how to repair the settings.

Not sure if the flash ROM suffered a psyb0t attack.

Following (limited) commands of BusyBox do not seem to support editing.

. : bg break builtin cd chdir continue eval exec exit export
false fc fg hash help jobs kill local pwd read readonly return
set setvar shift times trap true type ulimit umask unset wait

Thanks once again, let me try out a few random shots and revert.

Originally Posted by hexwiz

Code:

/usr/sbin/thttpd -g -d / -u root -p 8080

You should now be able to access the linux file system on port 8080 with something like 192.168.1.1:8080


On DLINK routers with the busybox shell the root password defaults to admin

And...

You could use common Linux shell commands - ifconfig, ls, gzip, hostname and even edit with my favorite editor on Linux - VI. But then again not all Linux commands may be available depending on how your shell was compiled.

.... at least that's what I found :5:

@hexwiz
Thanks for helping out and for your inputs.
Even though what you had posted is all greek to me.
No linux knowledge.
Rep++++ given .

Please let me know how many points I had given .
Please PM.

@Venkie
now please confirm you get the modem access page,
normally or by typing IP address.

Well, my knowledge of linux is limited to simple commands such as ls, cat, cd, pwd and chmod. Forced to learn during my VSNL shell account days. Late 1995 I think. Used a knoppix & DSL live CD a few times. That's all

Telnet gave me basic command line access to the router, browse the contents, nothing more. I still do not get the browser access page, but I can browse the router contents thro' the browser instead of from a terminal. It is quite possible that my router was hacked, since the webcm page does not exist on the router. I can always reset the router, but then since it's not hindering my net access, I thought a bit of R&D could provide some insights.

Next, I intend to try and find the missing webcm and see if can upload it to the router. This could be useful, since I have not noted down my router settings which would be lost if I use hard reset.

Originally Posted by essbebe

@hexwiz
Thanks for helping out and for your inputs.
Even though what you had posted is all greek to me.
No linux knowledge.
Rep++++ given .

Please let me know how many points I had given .
Please PM.

@Venkie
now please confirm you get the modem access page,
normally or by typing IP address.

Originally Posted by superprash2003

why dont you use the admin a/c instead of root?same privileges right?

Yes, but if the router was hacked, root account might have been compromised, in which case, better to check and change password.

Thank you, but this does not work, I have already tried it.
--

Originally Posted by essbebe

4.You could PM me the Dynamic IP, when both are on line,
so that to check whether I could access the modem settings. If earlier you had changed the ID and password ,
include this info also.

Originally Posted by venkie

Wow !! That works like a shot !!! Thank you very much. I get the file system on the browser (index of / and so forth) Now, let me figure out how to edit files.

Y'day I tried router diagnostics (from neolics)
and found that ftp and http services are blocked. Settings are inaccessible. No clue as to how to repair the settings.

Not sure if the flash ROM suffered a psyb0t attack.

Following (limited) commands of BusyBox do not seem to support editing.

. : bg break builtin cd chdir continue eval exec exit export
false fc fg hash help jobs kill local pwd read readonly return
set setvar shift times trap true type ulimit umask unset wait

Thanks once again, let me try out a few random shots and revert.

I'm so happy for you. To edit files you could try the command -
vi filename.file at the telnet prompt. If you want to make changes just press the letter i and the editor will be in edit mode. To get back to command mode just press the escape key. Google vi commands for vi commands. Cheers!

It's a Linux core you have there so basic ftpd and other services are disabled by default. Check this out - http://www.busybox.net/downloads/BusyBox.html - might help better.

@ess
Not sure what's a rep and how I can check but thanks. You are an awesome helper as I've seen you on the site. Keep up the good work

Originally Posted by hexwiz

I'm so happy for you. To edit files you could try the command -
vi filename.file at the telnet prompt. If you want to make changes just press the letter i and the editor will be in edit mode. To get back to command mode just press the escape key. Google vi commands for vi commands. Cheers!

Just found out that webcm file exists in /usr/www but it has been rendered inaccessible thro' 8080: Tried chmod, doesn't work. Any ideas?


# ls -ls
1 drwxr-xr-x 1 504 504 115 May 30 2005 bin
0 drwxr-xr-x 1 504 504 0 Sep 14 14:00 lib
1 drwxr-xr-x 1 504 504 128 May 30 2005 sbin
1 drwxr-xr-x 1 504 504 13 Sep 14 14:00 share
0 drwx--x--x 1 504 504 46 May 30 2005 www
# chmod 755 www
www: Read-only file system

Well I'm guessing it's a read-only image like squashfs. You could try this command and if it works - well and good otherwise it probably is only an image and there's no way that I know of, that would you let you edit or make changes other than loading a new firmware.

Code:

mount -o remount,rw /

Also try this and do let me know if you are able to pull up a page from htpp://192.168.1.1/ These are just console commands for the router.

Code:

ip iphostname flush
config save
flashfs update
restart

I have attached a Dlink DSL50X utility and a file listing the console commands if it might help. Good luck

Thank you very much. Here are some results:

Originally Posted by hexwiz

Code:

mount -o remount,rw /

# mount -o remount, rw /
mount: Mounting rw on / failed: Permission denied

Originally Posted by hexwiz

Also try this and do let me know if you are able to pull up a page from htpp://192.168.1.1/ These are just console commands for the router.

Code:

ip iphostname flush
config save
flashfs update
restart

# ip iphostname flush
ip: No such file or directory
# config save
config: No such file or directory
# flashfs update
flashfs: No such file or directory

Originally Posted by hexwiz

I have attached a Dlink DSL50X utility and a file listing the console commands if it might help. Good luck

The utility hangs with a message "is not a valid integer value Will try to reinstall and run again.