ip blocked

[eula]

hi

i have installed ispcp omega yesterday. i configure some details in the admin area (add ips, resellers and so on). suddenly seems that the server was down. i find out that the server is still running fine but my ip range is blocked and i don't know why.
now i can't login in ispcp omega and ssh is also not working for me anymore. with proxy i have now ssh access again.

but i don't know how to unlocking my ip range.

iptables seems clear:

iptables -L

Chain INPUT (policy ACCEPT)
target prot opt source destination
ISPCP_INPUT all -- anywhere anywhere
LOG all -- anywhere anywhere LOG level debug prefix `BANDWIDTH_IN:'

Chain FORWARD (policy ACCEPT)
target prot opt source destination
LOG all -- anywhere anywhere LOG level debug prefix `BANDWIDTH_OUT:'
LOG all -- anywhere anywhere LOG level debug prefix `BANDWIDTH_IN:'

Chain OUTPUT (policy ACCEPT)
target prot opt source destination
ISPCP_OUTPUT all -- anywhere anywhere
LOG all -- anywhere anywhere LOG level debug prefix `BANDWIDTH_OUT:'

Chain ISPCP_INPUT (1 references)
target prot opt source destination
tcp -- anywhere anywhere tcp spt:submission
tcp -- anywhere anywhere tcp spt:ssmtp
tcp -- anywhere anywhere tcp spt:smtp
tcp -- anywhere anywhere tcp dpt:imaps
tcp -- anywhere anywhere tcp dpt:pop3s
tcp -- anywhere anywhere tcp dpt:submission
tcp -- anywhere anywhere tcp dpt:ssmtp
tcp -- anywhere anywhere tcp dpt:smtp
tcp -- anywhere anywhere tcp dpt:imap2
tcp -- anywhere anywhere tcp dpt:pop3
tcp -- anywhere anywhere tcp dpt:https
tcp -- anywhere anywhere tcp dpt:www
RETURN all -- anywhere anywhere

Chain ISPCP_OUTPUT (1 references)
target prot opt source destination
tcp -- anywhere anywhere tcp dpt:submission
tcp -- anywhere anywhere tcp dpt:ssmtp
tcp -- anywhere anywhere tcp dpt:smtp
tcp -- anywhere anywhere tcp spt:imaps
tcp -- anywhere anywhere tcp spt:pop3s
tcp -- anywhere anywhere tcp spt:submission
tcp -- anywhere anywhere tcp spt:ssmtp
tcp -- anywhere anywhere tcp spt:smtp
tcp -- anywhere anywhere tcp spt:imap2
tcp -- anywhere anywhere tcp spt:pop3
tcp -- anywhere anywhere tcp spt:https
tcp -- anywhere anywhere tcp spt:www
RETURN all -- anywhere anywhere




can somebody please help me? ispcp omega must have been the source of the problem i guess

thanks in advance


ps: why was my other account here in the forum (eua) banned after 2 minutes?

[BeNe]

Is Fail2Ban or ModSecurity on the Server installed ?

ispCP doesn´t block any IP-Adresse on it´s own.
Only the Login if it failed three times, for 30min but not more and only the Login and not with IPTABLES.

Greez BeNe

[eula]

fail2ban or modsecurity aren't installed.

i remember that a irc services running on an other network interface was also blocked. after i add the interface in the settings of ispcp omega it was unlocked.

[eula]

no one an idea?

a hardware firewall is also not installed

it must have been something to do with the programs that ispcp has installed

[eula]

i found the problem

it IS ispCP !!!!!! you cant deny it

after shutting down ispcp_daemon and ispcp_network via /etc/init.d i have access again.

so can somebody explain this please?

edit: after restarting ispcp_network i lost access again

[kilburn]

Iscpcp plays with the network interfaces (creating aliases and the like), which is probably what prevents you from connecting.

If you manually manage the ip's on the server, then comment out the "*_interfaces" function calls in /etc/init.d/ispcp_network and everything should be fine when you start it.

[eula]

after stopping it has removed the eth0:2 interface. i had to restart this interfaces but i can access the server again with your changes.

i hope you will fix this soon.