What causes the ‘Connection Refused’ message?

Note: This message is a symptom of the problem you are trying to solve. Understanding the cause of the message will ultimately lead you to solving your problem.

The message ‘Connection Refused’ has two main causes:

  1. Nothing is listening on the IP:Port you are trying to connect to.
  2. The port is blocked by a firewall.

No process is listening.

This is by far the most common reason for the message. First ensure that you are trying to connect to the correct system. If you are then to determine if this is the problem, on the remote system run netstat or ss1 e.g. if you are expecting a process to be listening on port 22222

sudo netstat -tnlp | grep :22222

or 

ss -tnlp | grep :22222

For OSX a suitable command is

sudo netstat -tnlp tcp | grep '\.80 '

If nothing is listening then the above will produce no output. If you see some output then confirm that it’s what you expect then see the firewall section below.

If you don’t have access to the remote system and want to confirm the problem before reporting it to the relevant administrators you can use tcpdump (wireshark or similar).

When a connection is attempted to an IP:port where nothing is listening, the response from the remote system to the initial SYN packet is a packet with the flags RST,ACK set. This closes the connection and causes the Connection Refused message e.g.

$ sudo tcpdump -n host 192.0.2.1 and port 22222
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on enp14s0, link-type EN10MB (Ethernet), capture size 262144 bytes

12:31:27.013976 IP 192.0.2.2.34390 > 192.0.2.1.22222: Flags [S], seq 1207858804, win 29200, options [mss 1460,sackOK,TS val 15306344 ecr 0,nop,wscale 7], length 0

12:31:27.020162 IP 192.0.2.1.22222 > 192.0.2.2.34390: Flags [R.], seq 0, ack 1207858805, win 0, length 0

Note that tcpdump uses a . to represent the ACK flag.

Port is blocked by a firewall

If the port is blocked by a firewall and the firewall has been configured to respond with icmp-port-unreachable this will also cause a connection refused message. Again you can see this with tcpdump (or similar)

$ sudo tcpdump -n icmp
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode

listening on enp14s0, link-type EN10MB (Ethernet), capture size 262144 bytes
13:03:24.149897 IP 192.0.2.1 > 192.0.2.2: ICMP 192.0.2.1 tcp port 22222 unreachable, length 68

Note that this also tells us where the blocking firewall is.

So now you know what’s causing the Connection refused message you should take appropriate action e.g. contact the firewall administrator or investigate the reason for the process not listening.

1 Other tools are likely available.

Related Posts:

  1. What does localhost:8080 mean?
  2. Is it possible to repeat or redistribute a Bluetooth signal? [closed]
  3. java.net.ConnectException: Connection refused
  4. How can you find out which process is listening on a TCP or UDP port on Windows?
  5. java.net.ConnectException :connection timed out: connect?
  6. What is the difference between a port and a socket?
  7. Does TCP send a SYN/ACK on every packet or only on the first connection?
  8. Finding local IP addresses using Python’s stdlib
  9. Docker-compose container using host DNS server
  10. UDP vs TCP, how much faster is it?
  11. Android check internet connection
  12. How does IPv4 Subnetting Work?
  13. I’ve inherited a rat’s nest of cabling. What now?
  14. What is the difference between Unix sockets and TCP/IP sockets?
  15. Why couldn’t MAC addresses be used instead of IPv4|6 for networking? [closed]
  16. VirtualBox: How to set up networking so both host and guest can access internet and talk to each other
  17. How do VLANs work?
  18. How does IPv6 subnetting work and how does it differ from IPv4 subnetting?
  19. Why do consoles sometimes hang forever when SSH connection breaks?
  20. Switching to IPv6 implies dropping NAT. Is that a good thing?
  21. How much network latency is “typical” for east – west coast USA?
  22. How do I find if there is a rogue DHCP server on my Network?
  23. Is X.Y.Z.0 a valid IP address?
  24. ssh tunnel refusing connections with “channel 2: open failed”
  25. How do I make a connection private on Windows Server 2012 R2
  26. Should network hardware be set to “autonegotiate” speeds or fixed speeds?
  27. What is “anycast” and how is it helpful?
  28. What happens when you plug two sides of a cable to a single networking device?
  29. How to reload default Mac OSX routing table without rebooting
  30. ping response “Request timed out.” vs “Destination Host unreachable”
  31. An existing connection was forcibly closed by the remote host
  32. What can be the reasons of connection refused errors?
  33. Chrome hangs after certain amount of data transfered – waiting for available socket
  34. Connect: Socket operation on non-socket
  35. Connect: Socket operation on non-socket
  36. Networking with C++
  37. Socket Programming in C++
  38. ssh: Could not resolve hostname [hostname]: nodename nor servname provided, or not known
  39. The RPC server is unavailable. (Exception from HRESULT: 0x800706BA)
  40. Will setting a multicast destination address to FFFF.FFFF.FFFF make it a broadcast?
  41. How do I resolve the “java.net.BindException: Address already in use: JVM_Bind” error?
  42. Command line for looking at specific port
  43. Best C/C++ Network Library
  44. java.net.SocketException: Connection reset
  45. Unity3D. Trying to send command for object without authority
  46. Sending string via socket (python)
  47. HTTP Status 500 Error instantiating servlet class
  48. What is the quickest way to HTTP GET in Python?
  49. Where to find the complete definition of off_t type?
  50. Bridged networking not working in Virtualbox under Windows 10
  51. Socket.Select returns error “An operation was attempted on something that is not a socket”
  52. wget: unable to resolve host address `http’
  53. Regular expression that matches valid IPv6 addresses
  54. How do I get Flask to run on port 80?
  55. Get local IP address
  56. Level vs Edge Trigger Network Event Mechanisms
  57. Setting the hostname: FQDN or short name?
  58. Should I quit using Ifconfig?
  59. Resolve host name from IP address
  60. In Windows, using the command line, how do you check if a remote port is open?
  61. How to forcibly close a socket in TIME_WAIT?
  62. How to check if a port is blocked on a Windows machine?
  63. What is this IP address: 169.254.169.254?
  64. How to determine the hostname from an IP address in a Windows network?
  65. SSHFS mount that survives disconnect
  66. How to get TX/RX bytes without ifconfig?
  67. How to check the physical status of an ethernet port in Linux?
  68. Testing UDP port connectivity

Leave a Comment