The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

TCP IN Blocked

Discussion in 'Security' started by upsforum, Jul 12, 2016.

Tags:
  1. upsforum

    upsforum Well-Known Member

    Joined:
    Jul 27, 2005
    Messages:
    446
    Likes Received:
    0
    Trophy Points:
    16
    A user have problem with ftp connection, firewall block your ip but CSF or mod security not return problems or messages, this is log (I tried and with my connection work fine):

    Code:
    Jul 12 16:02:51 ssd3 pure-ftpd: (?@user.ip.xxx.xxx) [INFO] New connection from user.ip.xxx.xxx
    Jul 12 16:02:51 ssd3 pure-ftpd: (?@user.ip.xxx.xxx) [INFO] SSL/TLS: Enabled TLSv1/SSLv3 with ECDHE-RSA-AES128-GCM-SHA256, 128 secret bits cipher
    Jul 12 16:02:52 ssd3 pure-ftpd: (?@user.ip.xxx.xxx) [INFO] imxcyczb is now logged in
    Jul 12 16:02:52 ssd3 kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3c:4f:fa:00:08:e3:ff:fd:90:08:00 SRC=user.ip.xxx.xxx DST=193.37.152.142 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=7759 DF PROTO=TCP SPT=50334 DPT=44319 WINDOW=65535 RES=0x00 SYN URGP=0
    Jul 12 16:02:55 ssd3 kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3c:4f:fa:00:08:e3:ff:fd:90:08:00 SRC=user.ip.xxx.xxx DST=193.37.152.142 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=7763 DF PROTO=TCP SPT=50334 DPT=44319 WINDOW=65535 RES=0x00 SYN URGP=0
    Jul 12 16:03:01 ssd3 kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3c:4f:fa:00:08:e3:ff:fd:90:08:00 SRC=user.ip.xxx.xxx DST=193.37.152.142 LEN=48 TOS=0x00 PREC=0x00 TTL=118 ID=7772 DF PROTO=TCP SPT=50334 DPT=44319 WINDOW=65535 RES=0x00 SYN URGP=0
    Jul 12 16:03:12 ssd3 pure-ftpd: (?@user.ip.xxx.xxx) [INFO] New connection from user.ip.xxx.xxx
    Jul 12 16:03:13 ssd3 pure-ftpd: (?@user.ip.xxx.xxx) [INFO] SSL/TLS: Enabled TLSv1/SSLv3 with ECDHE-RSA-AES128-GCM-SHA256, 128 secret bits cipher
    Jul 12 16:03:13 ssd3 pure-ftpd: (?@user.ip.xxx.xxx) [INFO] imxcyczb is now logged in
    Jul 12 16:03:14 ssd3 kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3c:4f:fa:00:08:e3:ff:fd:90:08:00 SRC=user.ip.xxx.xxx DST=193.37.152.142 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=7815 DF PROTO=TCP SPT=50338 DPT=28100 WINDOW=65535 RES=0x00 SYN URGP=0
    Jul 12 16:03:17 ssd3 kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3c:4f:fa:00:08:e3:ff:fd:90:08:00 SRC=user.ip.xxx.xxx DST=193.37.152.142 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=7824 DF PROTO=TCP SPT=50338 DPT=28100 WINDOW=65535 RES=0x00 SYN URGP=0
    Jul 12 16:03:23 ssd3 kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3c:4f:fa:00:08:e3:ff:fd:90:08:00 SRC=user.ip.xxx.xxx DST=193.37.152.142 LEN=48 TOS=0x00 PREC=0x00 TTL=118 ID=7835 DF PROTO=TCP SPT=50338 DPT=28100 WINDOW=65535 RES=0x00 SYN URGP=0 
     
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,678
    Likes Received:
    649
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
Loading...

Share This Page