The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

lfd Permanent Block (IP match in csf.allow, block may not work)

Discussion in 'Security' started by knight_dedy, Mar 25, 2015.

  1. knight_dedy

    knight_dedy Member

    Joined:
    Mar 25, 2015
    Messages:
    9
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Indonesia
    cPanel Access Level:
    DataCenter Provider
    hello masters, I have a problem in my cpanel.
    my problem is about sshd :
    I ihave this message:
    assume MY_IP is my public IP that access cpanel server

    Time: Wed Mar 25 14:31:25 2015 +0700
    IP: MY_IP (ID/Indonesia/-)
    Failures: 5 (sshd)
    Interval: 3600 seconds
    Blocked: Permanent Block (IP match in csf.allow, block may not work)

    Log entries:

    Mar 25 14:29:22 cpanel sshd[354144]: Did not receive identification string
    from MY_IP Mar 25 14:29:52 cpanel sshd[354197]: Did not receive
    identification string from MY_IP Mar 25 14:30:22 cpanel
    sshd[354281]: Did not receive identification string from MY_IP Mar
    25 14:30:52 cpanel sshd[354321]: Did not receive identification string from
    MY_IP Mar 25 14:31:22 cpanel sshd[354382]: Did not receive
    identification string from MY_IP

    I allow MY_IP because i know it is save in csf.allow, but why this cpanel send me if my IP login failure??

    Please help me master.
     
  2. knight_dedy

    knight_dedy Member

    Joined:
    Mar 25, 2015
    Messages:
    9
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Indonesia
    cPanel Access Level:
    DataCenter Provider
    sorry Webzesty, my problem are caused by sshd. may you help me why this happen?
     
  3. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,854
    Likes Received:
    676
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Hello,

    The message you have posted is not coming from cPanel. It's coming from CSF, which is a third-party application that you have installed as your firewall. Feel free to post to their forums for assistance if it's actually blocking your IP address (it states that it won't block your IP if it's whitelisted):

    http://forum.configserver.com/

    Thank you.
     
  4. knight_dedy

    knight_dedy Member

    Joined:
    Mar 25, 2015
    Messages:
    9
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Indonesia
    cPanel Access Level:
    DataCenter Provider
    I solved it with change my ssh port, are there side effect if i change my sshd port for cpanel?
     
  5. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,854
    Likes Received:
    676
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
  6. knight_dedy

    knight_dedy Member

    Joined:
    Mar 25, 2015
    Messages:
    9
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Indonesia
    cPanel Access Level:
    DataCenter Provider
    ok thank you cPanelMichael
     
  7. acenetgeorge

    acenetgeorge Well-Known Member
    PartnerNOC

    Joined:
    Mar 6, 2008
    Messages:
    64
    Likes Received:
    2
    Trophy Points:
    8
    Location:
    Southfield, MI
    cPanel Access Level:
    DataCenter Provider
    Try adding your ip to the csf.ignore file. That will cause failures from your IP to not be watched by lfd checks, and you will not be blocked.
     
Loading...

Share This Page