java.net.SocketException: Permission denied（将80端口重定向到8080端口）

Posted 2023-02-26 阿奇XS

很多时候，tomcat是非root账号，直接将8080改成80，tomcat会报错 Java.NET.SocketException: Permission denied。原因是非root用户不能访问1024一下的端口。

为了解决这种问题，有方法如下：1.将当前用户配置到sudo规则里面（待验证）；2.再起一个apache，通过apache路由；3.通过iptable重定向。

下面将按照

Mar 14, 2017 9:56:15 AM winstone.Logger logInternal
SEVERE: Container startup failed
java.io.IOException: Failed to start Jetty
        at winstone.Launcher.<init>(Launcher.java:154)
        at winstone.Launcher.main(Launcher.java:352)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.lang.reflect.Method.invoke(Method.java:498)
        at Main._main(Main.java:264)
        at Main.main(Main.java:112)
Caused by: java.net.SocketException: Permission denied
        at sun.nio.ch.Net.bind0(Native Method)
        at sun.nio.ch.Net.bind(Net.java:433)
        at sun.nio.ch.Net.bind(Net.java:425)
        at sun.nio.ch.ServerSocketChannelImpl.bind(ServerSocketChannelImpl.java:223)
        at sun.nio.ch.ServerSocketAdaptor.bind(ServerSocketAdaptor.java:74)
        at org.eclipse.jetty.server.ServerConnector.open(ServerConnector.java:321)
        at org.eclipse.jetty.server.AbstractNetworkConnector.doStart(AbstractNetworkConnector.java:80)
        at org.eclipse.jetty.server.ServerConnector.doStart(ServerConnector.java:236)
        at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
        at org.eclipse.jetty.server.Server.doStart(Server.java:366)
        at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
        at winstone.Launcher.<init>(Launcher.java:152)
        ... 7 more

安装iptable，我的是阿里云服务器，iptable包已经安装，但是在lsmod |grep iptable里面找不到，需要自己加载。

rpm -qa|grep iptable

iptables-1.4.7-11.el6.x86_64
iptables-ipv6-1.4.7-11.el6.x86_64

先将tomcat需要的端口，以及80端口在iptable里面开出来，然后service iptables restart，service iptables status查看一下。
再将80重定向到8080

iptables -t nat -A PREROUTING -p tcp –dport 80 -j REDIRECT –to-port 8080
service iptables save

service iptables restart

输入ip验证一下，看看web应用是否可以直接访问。

[html] view plain copy 在CODE上查看代码片派生到我的代码片

cat /etc/sysconfig/iptables

Generated by iptables-save v1.4.7 on Mon Aug 22 10:00:58 2016

*nat
:PREROUTING ACCEPT [1:60]
:POSTROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A PREROUTING -p tcp -m tcp –dport 80 -j REDIRECT –to-ports 8080
COMMIT

Completed on Mon Aug 22 10:00:58 2016

Generated by iptables-save v1.4.7 on Mon Aug 22 10:00:58 2016

*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [85:8850]
-A INPUT -m state –state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp -m state –state NEW -m tcp –dport 80 -j ACCEPT
-A INPUT -p tcp -m state –state NEW -m tcp –dport 8080 -j ACCEPT
-A INPUT -p tcp -m state –state NEW -m tcp –dport 8005 -j ACCEPT
-A INPUT -p tcp -m state –state NEW -m tcp –dport 8009 -j ACCEPT
-A INPUT -j REJECT –reject-with icmp-host-prohibited
-A FORWARD -j REJECT –reject-with icmp-host-prohibited
COMMIT

Completed on Mon Aug 22 10:00:58 2016

https://help.aliyun.com/knowledge_detail/41315.html
云服务器ECS Linux iptables 关联默认加载异常导致启动报错： modules are not loaded

问题现象

启动或者关闭防火墙没任何的提示以及报错，查看防火墙的运行状态出现类似如下错误：

iptables: Firewall modules are not loaded.
问题原因

iptables 服务的依赖模块没有加载导致启动的时候失败。

解决方法

iptables 服务的运行依赖 iptable_filter 和 ip_tables 2个模块，可以使用 lsmod |grep iptable 命令查看：

lsmod |grep iptable
如果模块丢失，则使用下面命令重新加载，然后重启服务验证：

modprobe ip_tables

modprobe iptable_filter