UTMStack: error: one or more of the requiered ports are closed. Please open ports 9000 and 50051

[SimplyICT]

Ok the 8th time I have installed UTMstack. I had no trouble until I did, which then resulted in wiping the VPS and re-installing UTMstack. From then on, everytime I go to add an agent, whether it is on windows or linux, I get the message about ports not opened. 9000 and 50051.
I have run portscans to verify the ports are open.
I have no clue as to what is going on here. Does anyone have any tips or ideas that may help shed light on this.
It is running on a Cloud VPS running either Ubuntu 22. or 24 . i tried both. like I said I have wiped this machine heaps of times to re install. same result.

[osmontero]

Can you please provide more details about your local subnet?

Please try doing a traceroute from the server or workstation you are tring to install the linux agent. You can also try connecting from the same host you are installing the agent to both ports with telnet.

[SimplyICT]

Hi Telnet reports that port 9000 connects see image
telnet reports that 50051 actively refused connection
I do not see any reason for this. both ufw and fail2ban have been turned off

traceroute connects to the agent ip see image

[SimplyICT]

when i do a portscan, the port 50051 times out

[SimplyICT]

it appears that any machine I attempt to load the agent, windows or linux comes up with same error, even on a fresh installation. This did not happen to the first instance of UTM. I have checked the server ports on 2 installations and both sets of ports are open. just agents that fail

[osmontero]

There appears to be an issue with either the agent manager or the log proxy; please verify that both containers are operational and their logs are free of errors. You can use commands like:

$ sudo docker service ls
$ sudo docker ps
$ sudo docker service logs utmstack_[service_name]

[SimplyICT]

ok so here I found something weird I have been using an FQDN to try and register the agents. This has been failing. I just went back and used the IP of the FQDN and that worked perfectly. I went back over all the units then and proceeded to add all 12 agents back into UTM via the IP not the FQDN What could that issue be. I do use cloudflare. the IP is proxied. maybe that would cause the issue?

…

________________________________ From: Osmany Montero ***@***.***> Sent: Friday, February 14, 2025 8:08 PM To: utmstack/UTMStack ***@***.***> Cc: David Cartledge ***@***.***>; Author ***@***.***> Subject: Re: [utmstack/UTMStack] UTMStack: error: one or more of the requiered ports are closed. Please open ports 9000 and 50051 (Discussion #1020) There appears to be an issue with either the agent manager or the log proxy; please verify that both containers are operational and their logs are free of errors. You can use commands like: $ sudo docker service ls $ sudo docker ps $ sudo docker service logs utmstack_[service_name] — Reply to this email directly, view it on GitHub<#1020 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/BKY34YVNSW7GBJ6XW7DWWOD2PW6AJAVCNFSM6AAAAABW6XCXVOVHI2DSMVQWIX3LMV43URDJONRXK43TNFXW4Q3PNVWWK3TUHMYTEMJZHA4DQMA>. You are receiving this because you authored the thread.Message ID: ***@***.***>

[c3s4rfred]

Thanks @SimplyICT for the feedback, we'll take note of that for future testings. Please upgrade your instance to latest version, we had some improvements to agent communication protocols.

Best regards

[karlbrown87]

Hi @SimplyICT,

It is possible that Cloudflare’s proxy is affecting the FQDN resolution, as Cloudflare may be preventing it from resolving correctly. This can occur if the Cloudflare proxy interferes with DNS requests.

We recommend temporarily disabling the Cloudflare proxy and using the IP directly, as you did previously. This will help determine if the issue is resolved. If the problem persists, we suggest reviewing the network configuration or checking for any other potential interference.

Best Regards,
Carlos