I have a Linux box running CPanel and am having issues with 1 particular client trying to connect using FTP. I am also running lfd and csf.
The problem is that whenever they try to ftp to the server (regardless of the domain), they get an error saying:
"Connection to host lost".
I look through the logs (/var/log/messages) and see that there was a connection made and closed. No errors.
Otherwise, all my clients can connect without a problem.
I have ftp server (pure-ftp). with firewall.
i allowed 20 and 21 port in "CSF" firewall
now when i or our client connect to the server connection done.
and the they fire dir or ls command they will receive error
"425 Could not open data connection to port 2535: Connection timed out"
what is the problem.i have already allowed passive port 2500:3500 then why i received this types of error
i do a tracert on my VPS and get the attached results. My location is South Africa. Lately it just seems a bit sluggish. Can somebody please do a tracert from USA and EU for me please to do a comparisons or advice me on this VPS
View 13 Replies View RelatedI am on a VPS server and want to know in high traffic conditions how many connections per IP address can come... because on my site connections per IP going to 300 and mostly around 100.
But these are fluctuating and from different locations... everytime.. so dont think as a Dos but so many connections per IP makes my server down for few minutes until connections dont go down.
how many maximum connections per IP will be fine... for a little popular site.
I have a directory, named downloads/
I have some huge files for download in this directory.
now, when our users trying to download files from this folder with flashget (or dap or ...) this programs create 5 connection to that files! so If a user trying to download 5 files , he have 25 connection to my server!
How can I limit connection per Ip on file in this folder ?
Today i get alert from server provider saying my server is under attack, i check netstat and found too many connections.
Quote:
This ticket was automatically generated by the Softlayer Network Protection System. Due to the large amount of traffic targeted to your IP address 74.86.157.184, SoftLayer has automatically injected the IP address into our Cisco Guard Protection system. This system diverts traffic destined to the IP address 74.86.157.184 through hardware devices that will try to identify and block the specific packets and flows responsible for the attack while allowing legitimate transactions to pass. The injection of 74.86.157.184 will remain in place until this attack subsides and then be automatically removed once traffic levels reach a normal level.
Details of the event follow:
Exceeded Bits In: 782.7 M (Threshold: 500 M)
[url]
The connections are from my server to port 80 of "140.211.166.134".
lsof -i :port gives
PHP Code:
# lsof -i :47837
COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
crond 16004 root 269u IPv4 48880489 TCP server20.hosthat.com:47837->ftp-osl.osuosl.org:http (CLOSE_WAIT)
udevd 31116 root 269u IPv4 48880489 TCP server20.hosthat.com:47837->ftp-osl.osuosl.org:http (CLOSE_WAIT)
yum-updat 31347 root 269u IPv4 48880489 TCP server20.hosthat.com:47837->ftp-osl.osuosl.org:http (CLOSE_WAIT)
auditd 31683 root 269u IPv4 48880489 TCP server20.hosthat.com:47837->ftp-osl.osuosl.org:http (CLOSE_WAIT)
python 31685 root 269u IPv4 48880489 TCP server20.hosthat.com:47837->ftp-osl.osuosl.org:http (CLOSE_WAIT)
ntpd 31715 ntp 269u IPv4 48880489 TCP server20.hosthat.com:47837->ftp-osl.osuosl.org:http (CLOSE_WAIT)
#
I have rebooted the server and now server is normal.
I disabled yum on the server. Some days back, i have same problem with another server, server have too many connection to one of the yum respositry IP. The OS is CentOS 5.1
This is an error that dns report spat out to me. I have the firewall disabled as of now so I don't understand why packets would be blocked..if they are being blocked. From what I can tell, I can get to the server and resolve no problem...but could that stop other dns servers from connecting to it? I recently moved my cpanel box to another location in the LT datacenter in order to get on a different subnet - the previous one was a spam list nightmare. All IP's have been changed over and such...is this just cached from like the 14 hours I was down (ouch!) or is this still happening? I mean...its able to look up a records and it can get the mx servers...
error: Our local DNS server was unable to get your MX record. This usually means that a firewall in front of your DNS server is interfering. For example, it may be blocking DNS packets from low source port numbers (ours is often in the 1024-1030 range). Firewalls should never block DNS queries based on the source IP address; otherwise, it is guaranteed that legitimate queries will be blocked. This specific lookup must be cached, so a recent change may not be reflected.
I dont know much about server. I was wondering: if I plug in my laptop at work would the server log my connection, even if my laptop is not a client?
View 2 Replies View Relatedwhere I can't access my terminal because my connections keep getting timed out. Its been ok previously but for the last 2 days I could not connect because the connection timed out 9/10 times. No modifications were made during this time so whats the problem guys?
View 4 Replies View RelatedI am checking WHM apache status and I am seeing roughly 72+ connection from 127.0.0.1 (server), why? What could be the problem? Is the server hanging up or is this an indication that something is broken in the server?
View 2 Replies View RelatedIs anyone having issues with connection dropping alot with FDC servers?
View 2 Replies View RelatedI just saw a post talking about a better connection to Brazil, but according to the "internet lines", Peru has a different connection.
So, almost 80% of the people here uses Telefonica and some Telmex. I know ThePlanet has direct connect with Telefonica, but, is there any other good provider with the same benefits or even better?
I have a problem with my VPS. Hosting company have migrated my vps to a new and better dedicated server and now on all my sites(and IP) I got connection timeout error. I have changed "Main IP" and resolvers in HyperVM 10 minutes ago and it's not working(or I have to wait to wait like for nameservers registration?). I can ping my IP and all services(lxadmin,lighttpd etc are started successfully and its not wotking, I still getting connection timeout error.
View 5 Replies View RelatedI am having some serious issues on one of my servers. The server/browser error I (and clients) get when executing something that needs more than 5 secs to finish is "The connection to the server was reset while the page was loading".
[Sat Feb 23 11:27:22 2008] [info] (104)Connection reset by peer: core_output_filter: writing data to the network
[Sat Feb 23 11:27:24 2008] [notice] Digest: generating secret for digest authentication ...
[Sat Feb 23 11:27:24 2008] [notice] Digest: done
[Sat Feb 23 11:27:24 2008] [warn] pid file /var/run/apache2/httpd.pid overwritten -- Unclean shutdown of previous Apache run?
[Sat Feb 23 11:27:24 2008] [notice] Apache configured -- resuming normal operations
[Sat Feb 23 11:27:24 2008] [info] Server built: Jul 28 2006 09:04:55
[Sat Feb 23 11:27:26 2008] [info] (104)Connection reset by peer: core_output_filter: writing data to the network
[Sat Feb 23 11:27:27 2008] [info] (104)Connection reset by peer: core_output_filter: writing data to the network
I don't know it anymore. Tried everything. I can not reach my server properly. A lot of time time out.
netstat -anp |grep 'tcp|udp' | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n
1 127.0.0.1
1 38.99.44.101
1 64.131.90.38
1 78.176.158.75
1 78.179.73.135
1 88.229.70.143
1 88.242.97.204
1 88.247.87.58
1 92.112.211.223
3 78.176.175.136
3 88.229.40.142
3 88.231.180.181
4 78.183.227.146
18 0.0.0.0
348
348 connections from an empty IP? i have tried syn cookies, let the firewall block all ports without results.
When i try and connect to my server via SSH it replys with an error saying;
Server refused to allocate pty
stdin: is not a tty
My host's knowledge base says to click "Fix Centos Dev" but this doesn't work...
I am trying to access a few websites like auction websites and gaming websites.
But everytime they try and load I get a message "The connection has timed out"
They have been blocked so I can't access them I have tryed checking my "HOST" file and it doesnt seem to be blocked that way. Does anyone know any other ways it could of been blocked?
What on earth is going on? I have had my business website hosted by 2mhost.com for years and now it has been down for 2 weeks and their site is down also? What a rip-off! There are no phone numbers to contact them on the internet (none from google), no email addresses to contact anybody! How professional i tell ya! I am paid until January and i am losing money because my site is NOT up and running, there have been problems ALL YEAR! But it has never went this long, and they could at least email or notify customers of something major going on or something. Does anybody know of how to contact them and/or if there was anything that is going on like are they still in business?
View 14 Replies View RelatedI've just set up a website on our new dedicated server but every time I try and access it through the internet I keep getting "The connection has timed out" anu ideas what this could be?
View 4 Replies View RelatedJust wondering if anyone facing same problem like me on VPS.
i have a VPS which has 512 MB memory.
i'm hosting few sites on this VPS, and it does not allow more than 100 connection at a time. when i check apache it shows 100 connection, when i try to visit my site i cant.
So, is there any way i can make it more connection at a time?
What is this error cause?
Quote:
The connection has timed out
The server at[url]is taking too long to respond.
VPS Spec.
Quote:
Nixcon
Dual 2 Core
4 GB RAM
I have a client trying to log in via ftp. They cannot log in and get this error.
[14:36:05] Resolving host name "www.domain.com"
[14:36:05] Connecting to "IP ex 1.1.1.1" Port: 21
[14:36:06] No connection could be made because the target machine actively refused it.
[14:36:06] Cannot login waiting to retry (30s)...
[14:36:06] Client closed the connection.
I restarted FTP and checked to see if apf was blocking them and neither worked. She is using smartftp and I also had her try filezilla and neither worked.
However I am able to log in fine from my pc using this login info.
I use Charter as my ISP. Normally my connection speeds are VERY fast to the majority of the web. However, my own website has become like molasses in January (it wasn't always this way, or I would have not chosen my host), as can the entire hosting service. For the sake of discussion, I use two networked PC's, one is Win2K and the other is XP. Both are using the latest free version of ZoneAlarm, NO virus checker. I have a Linksys router. Asking for tech support with Charter is equivalent to wanting to discuss the methods for rebooting your PC with someone who didn't grow up speaking English. I've tried, it's useless.
(Warning: my site is about nude art photography, so don't look if you don't want to see that. The site is pencilartist.com, and I am hosted with Lunar Pages.)
I've run tracert several times, and I always come up with a timeout on the first hop.
I've asked a friend to view both my site and Lunar Pages from his Charter account (lives 5 miles from me) and he says both come up in nanoseconds. I've tried various online speed checkers, and they all give blazing results.
Here's the latest tracert:
Quote:
Tracing route to pencilartist.com [216.227.212.182]
over a maximum of 30 hops:
1 * * * Request timed out.
2 21 ms 11 ms 13 ms 10.208.128.1
3 10 ms 11 ms 11 ms 68.186.73.29
4 11 ms 23 ms 13 ms 68.186.73.49
5 15 ms 17 ms 24 ms 12.87.58.5
6 17 ms 19 ms 17 ms tbr1.st6wa.ip.att.net [12.122.111.14]
7 16 ms 15 ms 15 ms 12.127.6.57
8 17 ms 19 ms 25 ms so-3-2-0.gar1.Seattle1.Level3.net [4.68.127.109]
9 19 ms 17 ms 18 ms ae-31-53.ebr1.Seattle1.Level3.net [4.68.105.94]
10 45 ms 16 ms 18 ms ae-1-100.ebr1.Seattle1.Level3.net [4.69.132.17]
11 39 ms 38 ms 33 ms ae-61-61.csw1.SanJose1.Level3.net [4.69.134.194]
12 48 ms 49 ms 40 ms ae-63-63.ebr3.SanJose1.Level3.net [4.69.134.225]
13 41 ms 37 ms 55 ms ae-2.ebr3.LosAngeles1.Level3.net [4.69.132.10]
14 56 ms 57 ms 53 ms ae-78.ebr2.LosAngeles1.Level3.net [4.69.135.13]
15 71 ms 53 ms 47 ms ae-21-54.car1.LosAngeles1.Level3.net [4.68.102.1
08]
16 46 ms 45 ms 44 ms ge1-1.cr01.lax01.mzima.net [64.156.173.126]
17 46 ms 52 ms 52 ms xe1-0.cr01.lax02.mzima.net [64.235.224.182]
18 47 ms 45 ms 49 ms ge2-lunarpages.cust.lax02.mzima.net [72.37.172.2
6]
19 45 ms 60 ms 46 ms ge2-lunarpages.cust.lax02.mzima.net [72.37.172.2
6]
20 48 ms 47 ms 45 ms lioba.lunarpages.com [216.227.212.182]
Trace complete.
So is the problem just in my local connection? What is happening?
I have 3 servers, but one of them has some problem.
When Internet connection is slow and I try to access any webpages on this server, very often I get just a blank page or "The connection was reset" error. When I refresh page, it loads normaly. Sometimes it happends on each 5th-10th click.
It happends only with one server.
I have a vb forum that keep sending me email errors: max_user_connections. I've increased the setting in my.cnf to 2000 (max allowance) and still getting error.
What's possibly are the other reasons? Anyone has any idea?
I have a database server – mysql.xx.com which is the main MySQL server in H-Sphere.
I've created a database from mysqladmin interface.
I can use the database without a problem but when I’m trying to access the database from another server that I’ve just installed, the PHP application says that it can not connect to the database.
Another thing is that if I move the php app with the same configuration file under a shared account under another H-Sphere server, it's working perfectly.
I’ve read the H-Sphere documentation about an option to enable remote access to the mysql server which I can’t find anymore under our H-Sphere 2.5 Patch 8.
I’ve done a lot of searching to see how can I make that PHP application to connect to mysql.xx.com but it seems that although I’ve run the command grant all …. Command for that database, it still doesn’t work.
One final thing – from that new server if I run "mysql –h mysql.xx.com –u user –p" I can connect to the database and do a use database, show tables etc.
From iptables on mysql.xx.com I see that it accepts connections from outside.
This issue of not getting that PHP application to connect to mysql.xx.com can be related to the fact that H-Sphere is using the server or what should I try further?
to configure a VPN connection between two Cisco Routers.
I have the configuration in one side but for another side I have nothing.Is any one can help me about it??Another question is :are two routers need to have a valid IP or not?
I’m running RHEL 3, Apache and Cpanel. When I ran: "netstat –an" I found this in the results:
tcp 0 0 11.11.111.229:49158 11.11.111.229:80 ESTABLISHED
tcp 0 0 11.11.111.229:49578 11.11.111.229:80 ESTABLISHED
If I’m reading this right these two unprivileged ports are open and talking to my privileged http port 80. Does this seem right? Why would these two ports on my machine have a connection. All this attention was sparked by abnormal spikes in load. Now I’m getting paranoid that something may be off even though I’m clean when scanning for rootkits etc…
one user trying to send GET command to our server , when I viewing Apache Status in WHM I found about 100 connection from one IP (requestet none page only show GET / HTTP/1.0) , is this DDOS attack?
View 14 Replies View RelatedI would like to setup a rule through iptables or something that will let me so, only one ip can have XX connections per minute/hour or whatever time is set.
or something that will ban ips that are opening massive connections kinda like this ...
Hello, I have a problem with the vm-pop3d service I have set the option (--daemon=30) to 30 and the time out to 900 in /etc/init.d/vm-pop3d but still is not enough, many connections to the pop3 server are dropped is like the connections remains active (persistent) because when I try to restart the server I get a failed error on shutting down and still get the timeout error with outlook, I need to kill all the vm-pop3d process a then restart it in order to work but 10 or 15 minutes later I get the timeout error again, so I don't know why is failing continuously and why don't shutdown properly when restarting the service.
[root@server ~]# service vm-pop3d restart
Shutting down vm-pop3d: [FAILED]
Starting vm-pop3d: [ OK ]
[root@server ~]# ps -fea | grep vm-pop3d
root 25297 1 0 16:14 ? 00:00:00 vm-pop3d --daemon=30 -t 900
root 25317 25297 0 16:14 ? 00:00:00 vm-pop3d --daemon=30 -t 900
root 25434 25297 0 16:14 ? 00:00:00 vm-pop3d --daemon=30 -t 900 ....