CSF : Getting blocked in first attempt !

[LinuxTechie]

Hey Buddies,

In one of my server, csf is blocking my IP in the first attempt itself. It is getting blocked temporarily ! I am using the version 5.19 of csf. Is there any solution for this issue?

[Infopro]

You might try connecting to the server via SSH and add your IP to the bypass list. Strange that you'd be getting blocked right off, you might check that your cache is cleared and even try another browser to see if that works for you.


For everything related to using CSF, csf -h or ConfigServer Scripts Forum • Index page

[LinuxTechie]

Hey Infopro !

Thanks for answering. While trying to connect via ssham getting connection timed out and the trace route also note reaching the server. When I disables the firewall everything seems to be working again. I am pretty sure that a small change in the csf configuration will correct the issue. But what it is, that's what I would like to know.

Any help appreciated !

[Infopro]

Have you added your IP to the bypass list? Your log might give some clue as to why you are being blocked.

[LinuxTechie]

Hey Friends !

It is practically not possible to white list all my clients IP's. Is there any solution for avoiding not getting blocked in the first attempt? It will be great to know a solution for this !

[Infopro]

You're going to have to be more precise than to just say on first attempt. First attempt at what? To login to webmail, cPanel, a website, what exactly. It was your IP that was blocked originally, and now it's all of your clients.

This kind of vague issue is very hard to assist with.


GL!

[LinuxTechie]

Hey Friends,

First attempt in SSH,webmail,cpanel etc. If I take the IP in browser itself the IP is getting blocked temporarily. I amn't here for any arguments . If some one knows the solution please post it here.

[Infopro]

You'll need to check your logs and figure out why you're being blocked. There is no way anyone can tell you why you're being blocked and provide the solution to you.

[k-planethost]

is that as vps ?set the csf to test mode
down on csf appears a button Extra Check that iptables has the required modules to run csf should appears something like this
Testing iptables...

Testing ip_tables/iptable_filter...OK
Testing ipt_LOG...OK
Testing ipt_multiport/xt_multiport...OK
Testing ipt_REJECT...OK
Testing ipt_state/xt_state...OK
Testing ipt_limit/xt_limit...OK
Testing ipt_recent...OK
Testing ipt_owner/xt_owner...OK
Testing iptable_nat/ipt_REDIRECT...OK

RESULT: csf should function on this server


...Done.

You should restart csf after having run this test. check if you have any issues with kernel and iptables

[LinuxTechie]

Hello Planethost,

Yea, it is giving the correct result and I could not find any issues with iptables and kernel.

[cPanelTristan]

Hello cPtechie,

What does the lfd.log in /var/log state for the reason for the block?

Also, again, please remember that CSF and LFD are not cPanel provided products. Their support forum is at http://forum.configserver.com/viewforum.php?f=6 location.

Thanks.

[k-planethost]

try apf instead csf should be working properly from first try.
cPanel WHM APF Interface » Scriptmantra
there is a plugin here for cpanel/whm i dont know if its working

[LinuxTechie]

Hello,

@ Tristan : It is showing as IP is blocked temporarily.
@ k-planethost : Thanks for the suggestion. But I prefer CSF than APF. Lets see whether I can find a solution for this issue!

[nobodyk]

Can you post your config file? You really haven't give us much to go by. Post the block reason, csf gives a block reason when it blocks an ip.

Try and see if this helps:
under port scanning, search for the textbox to exclude ports from being monitored. Insert the common ports: 80,21,443,25,etc.

[LinuxTechie]

Hello,

Thanks for the suggestion. I will give it a try.

As I said earlier, it is showing as temporarily blocked.