Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

Blocking IPs fail

Discussion in 'Security' started by panit, Mar 22, 2018.

Tags:
  1. panit

    panit Active Member

    Joined:
    Aug 14, 2013
    Messages:
    33
    Likes Received:
    0
    Trophy Points:
    6
    cPanel Access Level:
    Reseller Owner
    I'm a hosting reseller on a dedicated server. The server was recently upgraded and now runs apache 2.4, CloudLinux and cpanel 68.0.33. Prior to the upgrade, blocking an IP via the IP Deny Manager would work. Now it doesn't. What IP's are entered are added to the .htaccess file but the IP still gets through.

    My host has not been able to resolve this issue. I read on the web that the new Reserved should be used so I tried that - still didn't work. If I add the IP to the servers CSF the IP will be blocked. Below are some of the variations I've tried to block an IP using the .htaccess file of the account. Does anyone know of a reason for this not working?

    Code:
    <RequireAll>
Require all granted
Require not ip 171.25.193.27
</RequireAll>

Order Allow,Deny
Deny from 171.25.193.27
Allow from all

<Files "*">
order deny,allow
deny from 171.25.193.27
</files>
     
    #1 panit, Mar 22, 2018
  2. cPanelMichael

    cPanelMichael Technical Support Community Manager Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    47,002
    Likes Received:
    2,123
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,

    Could you ask your hosting provider to let us know of any output to /usr/local/cpanel/logs/error_log when using the "IP Blocker" option to add a new blocked IP? Also, what are the permissions/ownership values on the account's .htaccess file?

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #2 cPanelMichael, Mar 22, 2018
  3. panit

    panit Active Member

    Joined:
    Aug 14, 2013
    Messages:
    33
    Likes Received:
    0
    Trophy Points:
    6
    cPanel Access Level:
    Reseller Owner
    There aren't any errors in that log and the permissions are -rw-r--r--.

    I tried adding my own IP via IP Deny Manager to test for errors and found that I wasn't blocked. But I noticed that cpanel only adds the line deny from IP# to the .htaccess file. So I removed all of the <files>, order... and allow from statements, leaving only deny from statements and all of the blocking started working.

    As a test, I added this:

    deny from my IP

    order deny, allow
    deny from some other IP
    allow from all

    The above allowed me to view the site. Changing the above to the following blocked me again.

    deny from my IP
    deny from some other IP

    Are those commands no longer valid? Or is there some module that needs to be installed in this version of apache/cpanel that isn't done automatically?
     
    #3 panit, Mar 23, 2018
  4. rpvw

    rpvw Well-Known Member

    Joined:
    Jul 18, 2013
    Messages:
    1,088
    Likes Received:
    441
    Trophy Points:
    113
    Location:
    Spain
    cPanel Access Level:
    Root Administrator
    You might like to try the apache 2.4 method eg
    Code:
    <RequireAll>
   Require all granted
   Require not ip 10.252.46.165
</RequireAll>
    That should block access from 10.252.46.165 and allow everyone else.

    I have had mixed success using these newer formats (but it was probably my fault for getting syntax wrong)

    More details from Access Control - Apache HTTP Server Version 2.4
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #4 rpvw, Mar 23, 2018
  5. cPanelMichael

    cPanelMichael Technical Support Community Manager Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    47,002
    Likes Received:
    2,123
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #5 cPanelMichael, Mar 23, 2018
  6. panit

    panit Active Member

    Joined:
    Aug 14, 2013
    Messages:
    33
    Likes Received:
    0
    Trophy Points:
    6
    cPanel Access Level:
    Reseller Owner
    This appears to be working now. There was a notice in WHM saying a reboot was needed to apply changes from the last update. Once that was done, the problem went away. No way to know if it was due to some setting in cpanel not being applied or just something hung up on the server, though the latter is probably correct. My thanks for the help and apologies for wasting time on this.
     
    #6 panit, Mar 26, 2018
(You must log in or sign up to post here.)
Loading...
Similar Threads - Blocking fail
  1. rahnev

    In Progress [CPANEL-26633] cPHulk is one-day blocking whitelisted address for maximum failed authentications

    rahnev, Mar 26, 2019, in forum: Security
    Replies:
    5
    Views:
    417
    cPanelMichael
    Apr 8, 2019
  2. Lorri Nevil

    cPHulkd blocking 127.0.0.1

    Lorri Nevil, May 9, 2019, in forum: E-mail Discussion
    Replies:
    4
    Views:
    325
    cPanelMichael
    May 15, 2019 at 1:05 PM
  3. The KrazZzy

    Blocking port 80 and 443 allow Gdrive IP address

    The KrazZzy, Apr 26, 2019, in forum: General Discussion
    Replies:
    3
    Views:
    286
    cPanelLauren
    Apr 26, 2019
  4. umar_rana

    Blocking Outgoing Email to External Domains

    umar_rana, Apr 19, 2019, in forum: E-mail Discussion
    Replies:
    1
    Views:
    320
    cPanelMichael
    Apr 19, 2019
  5. OETC

    IPv6 blocking, country blocking and access

    OETC, Apr 12, 2019, in forum: Security
    Replies:
    2
    Views:
    418
    cPanelMichael
    Apr 17, 2019

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...
    Dismiss Notice