Bonsoir,
Merci pour l’assistance ! Voici les résultats de mes tests :
1. Connectivité depuis l’extérieur
Voici les résultats de traceroute et nmap (je ne sais pas interpréter traceroute) :
traceroute www.fenua-enata-01.ynh.fr
traceroute to www.fenua-enata-01.ynh.fr (2a02:842b:a9:6301:778c:51e1:4113:1dd4), 30 hops max, 80 byte packets
1 * * *
2 fdff:8440:9999:2010::7b (fdff:8440:9999:2010::7b) 63.842 ms 63.812 ms 64.549 ms
3 * * *
4 * fc00:0:0:101::137 (fc00:0:0:101::137) 64.555 ms *
5 * * fc00:0:0:101::3ab (fc00:0:0:101::3ab) 64.260 ms
6 * * *
7 * fc00:0:0:101::1fd (fc00:0:0:101::1fd) 47.436 ms fc00:0:0:101::496 (fc00:0:0:101::496) 47.371 ms
8 fc00:0:0:101::2bf (fc00:0:0:101::2bf) 55.621 ms 55.562 ms 48.851 ms
9 * * fc00:0:0:101::1c4 (fc00:0:0:101::1c4) 42.495 ms
10 * 2a02-842b-00a9-6301-0000-0000-0000-0001.rev.sfr.net (2a02:842b:a9:6301::1) 42.254 ms *
11 * 2a02-842b-00a9-6301-0000-0000-0000-0001.rev.sfr.net (2a02:842b:a9:6301::1) 52.087 ms 59.163 ms
12 * * *
13 * * *
14 * * *
15 * * *
16 * * *
17 * * *
18 * * *
19 * * *
20 * * *
21 * * *
22 * * *
23 * * *
24 * * *
25 * * *
26 * * *
27 * * *
28 * * *
29 * * *
30 * * *
nmap -p 5349,5350,4443,10000 mondomaine.ynh.fr
Starting Nmap 7.97 ( https://nmap.org ) at 2025-08-21 21:55 +0200
Nmap scan report for mondomaine.ynh.fr (213.169.178.90)
Host is up (0.047s latency).
Other addresses for mondomaine.ynh.fr (not scanned): 2a02:842b:a9:6301:778c:51e1:4113:1dd4
rDNS record for 213.169.178.90: 90.178.169.213.rev.sfr.net
PORT STATE SERVICE
4443/tcp closed pharos
5349/tcp closed stuns
5350/tcp open nat-pmp-status
10000/tcp closed snet-sensor-mgmt
Nmap done: 1 IP address (1 host up) scanned in 0.23 seconds
2. Tests depuis le réseau local
nmap -p 5349,5350,4443,10000 mondomaine.ynh.fr
Starting Nmap 7.97 ( https://nmap.org ) at 2025-08-21 21:56 +0200
Nmap scan report for mondomaine.ynh.fr (192.168.1.44)
Host is up (0.0019s latency).
Other addresses for mondomaine.ynh.fr (not scanned): 2a02:842b:a9:6301:778c:51e1:4113:1dd4
PORT STATE SERVICE
4443/tcp closed pharos
5349/tcp closed stuns
5350/tcp open nat-pmp-status
10000/tcp closed snet-sensor-mgmt
Nmap done: 1 IP address (1 host up) scanned in 0.14 seconds
3. État d’écoute actuel
sudo ss -tulnp | grep -E "(5349|5350|4443|10000)"
udp UNCONN 0 0 192.168.2.1:5349 0.0.0.0:* users:(("turnserver",pid=1611,fd=31))
udp UNCONN 0 0 192.168.2.1:5349 0.0.0.0:* users:(("turnserver",pid=1611,fd=30))
udp UNCONN 0 0 192.168.2.1:5349 0.0.0.0:* users:(("turnserver",pid=1611,fd=29))
udp UNCONN 0 0 192.168.2.1:5349 0.0.0.0:* users:(("turnserver",pid=1611,fd=28))
udp UNCONN 0 0 127.0.0.1:5349 0.0.0.0:* users:(("turnserver",pid=1611,fd=27))
udp UNCONN 0 0 127.0.0.1:5349 0.0.0.0:* users:(("turnserver",pid=1611,fd=26))
udp UNCONN 0 0 127.0.0.1:5349 0.0.0.0:* users:(("turnserver",pid=1611,fd=25))
udp UNCONN 0 0 127.0.0.1:5349 0.0.0.0:* users:(("turnserver",pid=1611,fd=24))
udp UNCONN 0 0 192.168.1.44:5350 0.0.0.0:* users:(("turnserver",pid=4516,fd=44))
udp UNCONN 0 0 192.168.1.44:5350 0.0.0.0:* users:(("turnserver",pid=4516,fd=43))
udp UNCONN 0 0 192.168.1.44:5350 0.0.0.0:* users:(("turnserver",pid=4516,fd=42))
udp UNCONN 0 0 192.168.1.44:5350 0.0.0.0:* users:(("turnserver",pid=4516,fd=40))
udp UNCONN 0 0 [::1]:5349 [::]:* users:(("turnserver",pid=1611,fd=32))
udp UNCONN 0 0 [::1]:5349 [::]:* users:(("turnserver",pid=1611,fd=33))
udp UNCONN 0 0 [::1]:5349 [::]:* users:(("turnserver",pid=1611,fd=34))
udp UNCONN 0 0 [::1]:5349 [::]:* users:(("turnserver",pid=1611,fd=35))
udp UNCONN 0 0 [::ffff:192.168.1.44]:10000 *:* users:(("java",pid=1512,fd=141))
udp UNCONN 0 0 [::ffff:192.168.1.44]:10000 *:* users:(("java",pid=1512,fd=140))
udp UNCONN 0 0 [::ffff:192.168.1.44]:10000 *:* users:(("java",pid=1512,fd=139))
udp UNCONN 0 0 [::ffff:192.168.1.44]:10000 *:* users:(("java",pid=1512,fd=138))
udp UNCONN 0 0 [2a02:842b:a9:6301:4bed:711c:7d7a:a45e]:10000 [::]:* users:(("java",pid=1512,fd=137))
udp UNCONN 0 0 [2a02:842b:a9:6301:4bed:711c:7d7a:a45e]:10000 [::]:* users:(("java",pid=1512,fd=136))
udp UNCONN 0 0 [2a02:842b:a9:6301:4bed:711c:7d7a:a45e]:10000 [::]:* users:(("java",pid=1512,fd=135))
udp UNCONN 0 0 [2a02:842b:a9:6301:4bed:711c:7d7a:a45e]:10000 [::]:* users:(("java",pid=1512,fd=134))
udp UNCONN 0 0 [2a02:842b:a9:6301:778c:51e1:4113:1dd4]:10000 [::]:* users:(("java",pid=1512,fd=133))
udp UNCONN 0 0 [2a02:842b:a9:6301:778c:51e1:4113:1dd4]:10000 [::]:* users:(("java",pid=1512,fd=132))
udp UNCONN 0 0 [2a02:842b:a9:6301:778c:51e1:4113:1dd4]:10000 [::]:* users:(("java",pid=1512,fd=131))
udp UNCONN 0 0 [2a02:842b:a9:6301:778c:51e1:4113:1dd4]:10000 [::]:* users:(("java",pid=1512,fd=127))
tcp LISTEN 0 1024 192.168.2.1:5349 0.0.0.0:* users:(("turnserver",pid=1611,fd=71))
tcp LISTEN 0 1024 127.0.0.1:5349 0.0.0.0:* users:(("turnserver",pid=1611,fd=69))
tcp LISTEN 0 1024 192.168.2.1:5349 0.0.0.0:* users:(("turnserver",pid=1611,fd=66))
tcp LISTEN 0 1024 127.0.0.1:5349 0.0.0.0:* users:(("turnserver",pid=1611,fd=64))
tcp LISTEN 0 1024 192.168.2.1:5349 0.0.0.0:* users:(("turnserver",pid=1611,fd=61))
tcp LISTEN 0 1024 127.0.0.1:5349 0.0.0.0:* users:(("turnserver",pid=1611,fd=59))
tcp LISTEN 0 1024 192.168.2.1:5349 0.0.0.0:* users:(("turnserver",pid=1611,fd=56))
tcp LISTEN 0 1024 127.0.0.1:5349 0.0.0.0:* users:(("turnserver",pid=1611,fd=54))
tcp LISTEN 0 1024 192.168.1.44:5350 0.0.0.0:* users:(("turnserver",pid=4516,fd=51))
tcp LISTEN 0 1024 192.168.1.44:5350 0.0.0.0:* users:(("turnserver",pid=4516,fd=41))
tcp LISTEN 0 1024 192.168.1.44:5350 0.0.0.0:* users:(("turnserver",pid=4516,fd=32))
tcp LISTEN 0 1024 192.168.1.44:5350 0.0.0.0:* users:(("turnserver",pid=4516,fd=23))
tcp LISTEN 0 1024 [::1]:5349 [::]:* users:(("turnserver",pid=1611,fd=58))
tcp LISTEN 0 1024 [::1]:5349 [::]:* users:(("turnserver",pid=1611,fd=63))
tcp LISTEN 0 1024 [::1]:5349 [::]:* users:(("turnserver",pid=1611,fd=68))
tcp LISTEN 0 1024 [::1]:5349 [::]:* users:(("turnserver",pid=1611,fd=73))
4. Configuration réseau
Le seul élément particulier d’un point de vue réseau est cette carte ethernet additionnelle, que j’ai configuré en IP fixe :
cat /etc/network/interfaces.d/carte-usb
# démarre automatiquement l'interface au boot
auto enx7cc2c64ad857
# paramétrage de l'interface
iface enx7cc2c64ad857 inet static
address 192.168.2.1/24
Mais ça ne semble pas avoir d’incidence évidente :
ip route show default
default via 192.168.1.1 dev end1 proto dhcp src 192.168.1.44 metric 101
ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host noprefixroute
valid_lft forever preferred_lft forever
2: end1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
link/ether 00:00:a4:cd:ec:7f brd ff:ff:ff:ff:ff:ff
inet 192.168.1.44/24 brd 192.168.1.255 scope global dynamic noprefixroute end1
valid_lft 72645sec preferred_lft 72645sec
inet6 2a02:842b:a9:6301:4bed:711c:7d7a:a45e/128 scope global dynamic noprefixroute
valid_lft 72647sec preferred_lft 72647sec
inet6 2a02:842b:a9:6301:778c:51e1:4113:1dd4/64 scope global dynamic noprefixroute
valid_lft 604562sec preferred_lft 604562sec
inet6 fe80::32f7:43b8:23ea:c7b3/64 scope link noprefixroute
valid_lft forever preferred_lft forever
3: enx7cc2c64ad857: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast state DOWN group default qlen 1000
link/ether 7c:c2:c6:4a:d8:57 brd ff:ff:ff:ff:ff:ff
inet 192.168.2.1/24 brd 192.168.2.255 scope global enx7cc2c64ad857
valid_lft forever preferred_lft forever
4: wlan0: <NO-CARRIER,BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state DORMANT group default qlen 1000
link/ether 24:b7:2a:46:38:c3 brd ff:ff:ff:ff:ff:ff
Voilà la conf de NATage de ma box :
# Protocole Ports externes Adresse IP de destination Ports de destination
1 TCP 22 192.168.1.44 22
2 TCP 25 192.168.1.44 25
3 TCP 443 192.168.1.44 443
4 TCP 5222 192.168.1.44 5222
5 TCP 5269 192.168.1.44 5269
6 TCP 3128 192.168.1.44 3128
7 TCP 3478 192.168.1.44 3478
8 UDP 5349 192.168.1.44 5349
9 UDP 5350 192.168.1.44 5350
10 UDP 10000 192.168.1.44 10000
11 UDP 5351 192.168.1.44 5351
12 UDP 3478 192.168.1.44 3478
13 TCP 8448 192.168.1.44 8448
14 TCP 3009 192.168.1.44 3009
15 TCP 993 192.168.1.44 993
16 TCP 5349 192.168.1.44 5349
17 TCP 5350 192.168.1.44 5350
18 TCP 5351 192.168.1.44 5351
19 TCP 7881 192.168.1.44 7881
20 TCP 587 192.168.1.44 587
21 TCP 80 192.168.1.44 80
22 TCP 4443 192.168.1.44 4443
23 TCP 53 192.168.1.44 53
Et la conf des ports :
sudo nmap sT localhost
Starting Nmap 7.93 ( https://nmap.org ) at 2025-08-21 20:13 UTC
Nmap scan report for sT (213.169.178.90)
Host is up (0.0014s latency).
Other addresses for sT (not scanned): 2a02:842b:a9:6301:778c:51e1:4113:1dd4
rDNS record for 213.169.178.90: 90.178.169.213.rev.sfr.net
Not shown: 972 filtered tcp ports (no-response)
PORT STATE SERVICE
22/tcp closed ssh
25/tcp open smtp
53/tcp open domain
80/tcp open http
443/tcp open https
587/tcp open submission
993/tcp open imaps
1287/tcp open routematch
3128/tcp open squid-http
4443/tcp closed pharos
5222/tcp open xmpp-client
5269/tcp open xmpp-server
10000/tcp closed snet-sensor-mgmt
49152/tcp open unknown
49153/tcp closed unknown
49154/tcp closed unknown
49155/tcp closed unknown
49156/tcp closed unknown
49157/tcp closed unknown
49158/tcp closed unknown
49159/tcp closed unknown
49160/tcp closed unknown
49161/tcp closed unknown
49163/tcp closed unknown
49165/tcp closed unknown
49167/tcp closed unknown
49175/tcp closed unknown
49176/tcp closed unknown
Nmap scan report for localhost (127.0.0.1)
Host is up (0.000060s latency).
Other addresses for localhost (not scanned): ::1
Not shown: 975 closed tcp ports (reset)
PORT STATE SERVICE
25/tcp open smtp
53/tcp open domain
80/tcp open http
111/tcp open rpcbind
143/tcp open imap
389/tcp open ldap
443/tcp open https
587/tcp open submission
636/tcp open ldapssl
993/tcp open imaps
3128/tcp open squid-http
3306/tcp open mysql
5222/tcp open xmpp-client
5269/tcp open xmpp-server
5280/tcp open xmpp-bosh
5432/tcp open postgresql
5555/tcp open freeciv
6788/tcp open smc-http
8008/tcp open http
8080/tcp open http-proxy
8081/tcp open blackice-icecap
8888/tcp open sun-answerbook
9090/tcp open zeus-admin
10001/tcp open scp-config
10002/tcp open documentum
5. Autres éléments
J’ai effectué tout à l’heure par acquit de conscience la mise à jour vers Yunohost 12.1, et effectué un redémarrage. Ça n’a rien changé aux divers retours, mais les services ne sont plus accessibles depuis l’extérieur (Nextcloud, Matrix), ni même depuis Chromium. Très étrangement, il reste accessible depuis Firefox, alors que je n’ai déclaré aucune exception particulière !
Par contre, l’adresse IPV6 2a02:842b:a9:6301:778c:51e1:4113:1dd4 qui ressort des nmap externes et internes n’est pas la première d’après le retour de ip -a, et d’ailleurs, je ne sais pas d’où elle sort, et la redirection de ports que j’ai effectuée sur ma box pour l’IPV6 pointe vers la première adresse, pas celle-là.
Cela doit expliquer au moins une partie de la situation, mais je ne sais pas trop d’où elle sort, ni comment agir dessus (l’interface end1 est en dhcp, adresses fournies par la box - d’ailleurs cette fameuse adresse IPV6 supplémentaire n’apparaît pas dans la box).