csf and Paypal Issues

[andy2295]

If csf/lfd is enabled then all curl requests to paypal timeout with: Can't connect to PayPal to validate IPN message: connect() timed out!

I have posted this on the csf forum but no reply yet so wonder id anyone here knows anything about it.

Posting IPN data back to PayPal to validate the IPN data using curl.

If csf/lfd is diabled then all works fine time after time.

if csf/lfd is enabled then an error occurs of : Can't connect to PayPal to validate IPN message: connect() timed out!
Paypal ips are added to csf ignore.

The server is a dedicated server and does not have cmc installed.

Each time a request is made then the following happens (local ip removed):

[primary_ip] => 173.0.84.69
[primary_port] => 443
[local_ip] => xx.xxx.xx.xxx
[local_port] => 48394

The local port changes value on each individual request.

What is causing the issue in csf/lfd ?

 

[robb3369]

Do you have port 443 open under TCP_OUT in CSF?

 

[andy2295]

Hi

Yes port 443 is open

 

[robb3369]

Are seeing an error from iptables in the message log? Grep it for the paypal server IP address...

 

[cPanelMichael]

Hello

Yes, you may want to review any logs provided by CSF to get an indication as to what rule or port is preventing the connection from occurring.

Thank you.

 

[andy2295]

Hi,


There are no error messages shown. The thing is for each call to paypal, curl uses a different local port such as:
[primary_ip] => 173.0.84.69
[primary_port] => 443
[local_ip] => xx.xxx.xx.xxx
[local_port] => 37368
[redirect_url] =>

The local port example 37368 changes on each call to paypal such as 37368, 37369, 38000 etc so you cant keep opening ports etc

 

[cPanelMichael]

You may want to try contacting CSF directly if you are unable to receive a response on their support forums.

Thank you.

 

[andy2295]

You may want to try contacting CSF directly if you are unable to receive a response on their support forums.

Thank you.

They say they only provide support on their forums for csf, but no one seems to be answering many questions at all. Think i will uninstall it and try apf instead. At least all works perfectly when it is disabled.