csf crashing server?

PDW

Well-Known Member
Dec 29, 2003
138
3
168
My server has crashed 2 times in the last week. Each time the last entry in the messages log refers to a csf block - same one too at that. I did some research on the block it made and it was to the Teamspeak abuse file. I think if I can whitelist that IP maybe I can stop the crashing. but thought I would post it here and see what you guys think as well.

Apr 30 02:18:07 s5 kernel: Firewall: *UDP_OUT Blocked* IN= OUT=eth0 SRC=65.60.4.34 DST=62.146.63.82 LEN=431 TOS=0x00 PREC=0x0EC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=8768 DPT=45647 LEN=411

May 4 02:07:27 s5 kernel: Firewall: *UDP_OUT Blocked* IN= OUT=eth0 SRC=65.60.4.34 DST=62.146.63.82 LEN=431 TOS=0x00 PREC=0x0EC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=8768 DPT=45647 LEN=411
I just cant see this crashing the server though. but it is the last thing the server does

Are there other logs I should check - I went through messages, cron, and error logs

in cron
May 4 02:09:01 s5 crond[12376]: (intermec) CMD (find /home/intermec/www/upload/Files_for_Customers_to_Download/ -mmin +1440 -exec rm {} \;)
in error only found this at that same time and its nothing
[Mon May 04 02:08:01 2009] [error] [client 66.249.67.56] SoftException in Application.cpp:544: Directory "/home/brierats/public_html/forums" is writeable by group

[Mon May 04 02:08:01 2009] [error] [client 66.249.67.56] Premature end of script headers: index.php
[Mon May 04 02:08:01 2009] [error] [client 66.249.67.56] File does not exist: /home/brierats/public_html/500.shtml
[Mon May 04 02:09:01 2009] [error] [client 71.121.165.171] File does not exist: /home/daron/public_html/favicon.ico
[Mon May 04 02:09:01 2009] [error] [client 71.121.165.171] File does not exist: /home/daron/public_html/404.shtml
[Mon May 04 02:09:41 2009] [error] [client 66.249.67.56] File does not exist: /home/daron/public_html/robots.txt
[Mon May 04 02:09:41 2009] [error] [client 66.249.67.56] File does not exist: /home/daron/public_html/404.shtml
 
Last edited:

PlatinumServerM

Well-Known Member
PartnerNOC
Jul 10, 2005
400
3
168
New Jersey, USA
cPanel Access Level
Root Administrator
If the server does not crash when manually blocking an ip or manually restarting csf, then it most likely is not the cause of the crashes.

You will need to monitor the processes and check /var/log/messages for other possible causes.
 

budway

Well-Known Member
Apr 16, 2003
189
0
166
I know that csf/iptables is having bug/problems with RHE 4.


This is also state on redhat dev/bug pages.
 

PDW

Well-Known Member
Dec 29, 2003
138
3
168
I was pretty much grasping at straws - I know that there were a lot of hits and actions by CSF before the server would crash

I think now it was a hardware issue as I have since changed data centers and servers with no issue.

Thanks
 

konrath

Well-Known Member
May 3, 2005
366
1
166
Brasil
With CSF, crash my server when I rung command :confused:

iptables -F

My server freeze.

Sugestion ?

Konrath