Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

WHM dnsonly with CSF (blocked IPs)

Discussion in 'Security' started by cetiner, Jun 12, 2019.

  1. cetiner

    cetiner Member

    Joined:
    Dec 24, 2018
    Messages:
    13
    Likes Received:
    1
    Trophy Points:
    3
    Location:
    turkey
    cPanel Access Level:
    Root Administrator
    I use WHM dnsonly. The CSF firewall is installed and I see an IP address in the CSF TOP100 list blocked.

    upload_2019-6-13_0-34-41.png

    Time.....From..................Port.......I/O.. To........................ Port Proto
    xx........ 77.56.56.444...58399...out...185.207.105.38...123...UDP
    xx........ 77.56.56.444...47539...out...185.207.105.38...123...UDP


    "From" is the IP of the WHM dnsonly Server, okay.... I see.....
    And "Port" shows me the tested Port of my WHM dnsonly server..... good....

    But HOW from this IP address is it possible to generate the OUTGOING Port 123 UDP ?

    If I make an port scan on my main server for example, I em not able to generate this entries.
    And I em not able to come to the idea of this strange unknowing IP address.... cause the main server have just an empty website on it right now....

    Could anybody help me with an plausible answer, maybe I can't see the wood for the trees right now.
     
  2. cPanelLauren

    cPanelLauren Forums Analyst II Staff Member

    Joined:
    Nov 14, 2017
    Messages:
    6,466
    Likes Received:
    505
    Trophy Points:
    263
    Location:
    Houston
    cPanel Access Level:
    DataCenter Provider
    I'm not sure I understand, this shows the DNSOnly server making an outbound connection over port 58399 to the remote IP address over UDP port 123 - that's not port 123 on your server.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. cetiner

    cetiner Member

    Joined:
    Dec 24, 2018
    Messages:
    13
    Likes Received:
    1
    Trophy Points:
    3
    Location:
    turkey
    cPanel Access Level:
    Root Administrator
    Hello, yes and as I could see is the Port 123 for time sync.

    Thank you.
     
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice