I have the web pro edition panel 12 on centos 6.5 64bit, and i have made some custom firewall rules in order to be able to run a teamspeak server. The problem is that the firewall randomly blocks the teamspeak port and keeps it blocked unless i restart the firewall.
View 4 RepliesI have some issues with the plesk firewall:
1. Emails are not delivered:
From some reasons, plesk is blocking incoming 25 port (in plesk shows opened, but it's not)My emails are delivered trough port 25, after doing some tests ( i've sent some emails to an email account hosted in the server) there was no email in the roundcube inbox! All emails were blocked...
a) Firewall was blocking the port 25 on server restart.
b) I have succesfully unblocked it from plesk manager -> tools -> edit/change -> even if i didn't change anything, i saved the "changes" and in my roundcube inbox i recived all the test emails.
c) In /var/log/maillog there is no error.
2. Passive FTP gets blocked in the same way, to successfully connect FireFTP on passive mode i need to repeat 1.b steps even if i've created a special rule to prevent the blocking, opening 49152-65534 ports and set PassivePorts 49152 65534 in /etc/proftpd.conf
The issue appears randomly, because in the last 5 days i didn´t restart the server, the last time i checked it worked. Today, without touching anything, firewall blocked my passive FTP and I had probmels reciving emails from gmail, yahoo etc...
I have my server set up with the smtp daemon running on port 125, and assp listening on ports 25 and 26, and forwarding to port 125 if the mail passes. This setup has been working for months and months. Already today I've received several emails.
I just attempted to send an email, however, and thunderbird could not connect to port 26. (I use an alternate port because my ISP blocks port 25 except to their mail servers)
So I thought that assp had stopped running. Attempted to go to myip:55555, but the page would not load. Now I really thought assp was broken. SSH'd into server and was able to telnet to localhost, port 26 without an issue. Was also able to lynx [url] without an issue.
Since I'm able to log in to all of these weird ports via SSH but not from my local computer, I'm apt to think that they are blocking the ports (for some reason).
Is there any way I can test this theory? Nothing has changed on my side firewall-wise, and the poor girl at the ISP company didn't even know what a port was. I would like to be 100% sure before I give them another call demanding to speak to someone higher up...
I can no longer access Cpanel/WHM as my ISP is blocking all kinds of ports.
Is there an easy way to give Cpanel and WHM a port number below 2082?
I have full root access.
Im currently at university and they are blocking ports 7777 so I cannot access my server at ip:7777 .
I have sent them an email and asked them if they are able to unblock it for me but thats unlikely because its a P2P port.
I would probably want to setup SSH Tunneling but dont know the commands. I have found tutorials for linux local to linux remote but I have got windows and havent found any tutorials for windows to linux tunneling.
it's starting to kill child processes and eventually stops/hangs.
#plesk version
Product version: 12.0.18 Update #45
Update date: 2015/05/08 03:13
Build date: 2015/01/26 15:00
Build target: CentOS 7
Revision: 334346
Architecture: 64-bit
Wrapper version: 1.2
#free -m
total used free shared buff/cache available
Mem: 3782 647 2281 45 854 2875
Swap: 2047 0 2047
How do you open custom ports for fetching content from a url via a non-standard port, ex [url]:32626 ... (url has 32626 opoen)
View 2 Replies View RelatedI have a brand new A8i server from 1&1 that has crashed twice today and could only be rebooted through the 1&1 control panel (not Plesk). Out of the blue the server is not accessible from the Plesk CP and is not responding to pings. I have looked through the logs and do not see anything that stands out (I am not very Linux savvy). Is there somewhere specific that I can look that would tell me why it is locking up/crashing? I have only had the server about 2 weeks and am only running email on it (no websites besides webmail and Plesk CP). It is possible that there is a hardware issue, but I cannot have 1&1 check it until after hours tonight.
Server is an 8 core Intel Atom 2.6GHz with 8GB RAM.
I have a cPanel Centos VPS.
if they know of any service that I would have running on a basic webserver that would need the following inbound
how to change ports of Nginx from 80 to 8080 I would like install Varnish
View 2 Replies View RelatedMy fedora server is running apf firewall. When I turn it off, clients can connect.
When I turn it on, it says MSG: Contacting Server.
I have already added ports 6100 and 3784 to /etc/apf/conf.apf by adding the ports to the lines, EG_TCP_CPORTS, EG_UDP_CPORTS, IG_TCP_CPORTS, and IG_UDP_CPORTS
and restarted the service.
Is there any additional ports I need to add?
(I've uploaded my conf.apf file)
It seems that, since Plesk 12.x, many usual ports are now closed by default (ex. port mysql 3306, port 9000...)
Clients are not informed...
how can we re-open these ports ?
as per apf firewall issue
Jul 17 02:03:02 duck kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:01:02:c9:94:20:00:90:69:8a:f3:f0:08:00 SRC=192.168.1.43 DST=192.168.1.220 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=40428 DF PROTO=TCP SPT=37079 DPT=3306 WINDOW=5840 RES=0x00 SYN URGP=0
i already added 192.168.1.43 ip in allow list.
tcp:in : d=3306 : s=192.168.1.43
d=3306 : s =192.168.1.43
tcp: out : d=3306 : s =192.168.1.43
# added 192.168.1.43 on 07/19/07 01:15:21
192.168.1.43
But ip is still blocking traffic while monitor mysql....
I have a virtuozzo VPS with CSF. People can't connect to ftp because the firewall is conflicting with iptables. I looked at the csf guide:
[url]
To correct it, the ftp issues states:
Quote:
For example, with pure-ftpd you could add the port range 30000:35000 to TCP_IN
and add the following line to /etc/pure-ftpd.conf and then restart pure-ftpd:
PassivePortRange30000 35000
Where is pure-ftpd.conf? Do I have to install it or something?
I'm trying to set up a site on IIS 5. I think I've done the setup on IIS ok, but when I try the site, it's not getting served. I think there might be a firewall in the way, blocking port 80. Any idea how I would test to see if this is the case?
View 1 Replies View RelatedI am currently in the throws of configuring a new dedicated "Windows Web Server 2008 / IIS7 / Plesk" server. As part of the setup I have obviously made sure the firewall is correctly setup. After doing this I have run a remote port scan (from my internet connected PC) to the IP address of the server. This has brought up two ports that should be blocked:
5190
1863
I can open a remote telnet session to both these ports, however if I remote desktop to the server and attempt a telnet connection both ports fail to respond.
Does anybody know what these ports are?
If it helps at all, the firewall surrounding the server is an external Cisco device
i'm running 12.0.18#34 on PCS dedicated server. i recently discovered that some of the default jails on fail2ban that is shipped with Plesk 12 were not working correctly. Let me explain what i mean. For instance, the plesk-panel jail. The logs were parsed correctly, the command was successfully appended in iptables list, the fail2ban log was updated. Still, the intruder was not blocked. I kept reading "already banned" on the fail2ban.log but actually there was no blocking.
After some checks, i found out that fail2ban default configuration states SSH as default blocking port.
that means, the block was working but only for ssh hits. thus the plesk-panel admin page hits were passing through.
since i added port=http,https on jail.local > plesk-panel and did it a restart on fail2ban service, only then did it start to actually block incoming hits.
I think this should be verified by programmers group and maybe include a fix in some future minor update.
Ubuntu 12.04
Upgraded Plesk from 11.5 to 12.0.18 from panel.
I have installed PHP 5.3.29 (make from sources)
All smooth, added handler:
Code:
/usr/local/psa/bin/php_handler --add -displayname 5.3.29 -path /usr/local/php5329/bin/php-cgi -phpini /usr/local/php5329/etc/php.ini -type fastcgi -id php5329
App work ok after change to new php with hosting settings(change php handler Fast Cgi)
But php info shows that: Loaded Configuration File is /etc/php5/cgi/php.ini
This is not good as I checked should be for certain vhost cutsom php ini which is generated by PHP settings.
For example I changed in Plesk memory_limit to 333MB applied changes panel show successully, but still there is 128MB default value in phpinfo().
Am I missing sth ? Is there additional task needed expect adding handler? Or is there a known bug?
ps. after change handler back to 5.3.10, (default installation) there also custom PHP settings file seems not to be processed.
I did not tested earlier maybe upgrade Plesk to v12 broked sth? What should I check?
I have tried to delete (and let psa recreate) php.ini from vhost/system/mydomain.com/ but also did not worked...
Is there a chance to change the default nameserver name for customers created by a reseller.
Example:
System wide default
ns.provider.de
ns2.prodiver.de
ns3.provider.de
Now the reseller wants:
ns.reseller.de
ns2.reseller.de
ns3.reseller.de
The NS-Entries of the reseller may be the same physical nameserver, but it should be anonymized. How can I achieve that?
I purchased an ssl certificate and installed it in plesk via server->ssl certificates. I then followed the following guide to set up imap and pop to use my cert (instead of using the default i used my cert into) URL... Now I'm getting an issue with sending emails, something about SSLHandshakeException, and some clients can't even log in. MTs support mentioned this might have something to do with POODLE.
View 1 Replies View RelatedEvery time my server tries to send mail to Gmails/yahoos - they reject it with the following message:
Code:
Apr 13 11:35:49 m1370 plesk sendmail[5009]: handlers_stderr: PASS
Apr 13 11:35:49 m1370 plesk sendmail[5009]: PASS during call 'limit-out' handler
Apr 13 11:35:49 m1370 plesk sendmail[5009]: handlers_stderr: SKIP
Apr 13 11:35:49 m1370 plesk sendmail[5009]: SKIP during call 'check-quota' handl er
Apr 13 11:35:49 m1370 postfix/pickup[1759]: C90FA61668: uid=48 from=<apache>
[Code] ....
I tried Qmail, same issue
Code:
Hi. This is the qmail-send program at m1370.contabo.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. It didn't work out.
<emailhere@gmail.com>:
2a00:1450:4013:0c00:0000:0000:0000:001b failed after I sent the message.
[Code] .....
Centos 6.6 + Plesk 12 Web Pro Edition
My server certainly did not spam Gmail servers, (my old server works fine sending email t gmail) I fear this has something to do with my "Postfix" configuration.
Plesk Applications Installer. I wish to create my own WordPress template (with preinstalled plugins/themes) for my customers.
Is there an easy way to do this (or anyway to do this)?
When adding a subscription with a certain plan, I get this error"Error: The plan was not applied: Custom changes in PHP settings" almost instantly after I initiated the creation of the new subscription. Another service plan doesn't have the issue, and though I tried finding the reason why one works while the other doesn't I simply wasn't able to. The service plan in question is used for over 40 others without a problem just when I select it for a new subscription, I get the mentioned error message.I am using Plesk 12 on Linux, all latest updates installed.
View 1 Replies View RelatedWould like to know how to implement css and images to work with custom error documents. For some reason the folders are ignored even with the correct path being entered within the html. Only plain text appears.
View 2 Replies View Relatedvery simple spamassassin rule that will do the following…
Give a score of 2
For the word test in the subject field
Then can you tell me where on the Plesk 12 server to place the file for server-wide filtering.
Running task: C:ParallelsPleskadmininphp.exe -c "C:ParallelsPleskadminconfphp.ini" -dauto_prepend_file=sdk.php "C:ParallelsPleskadminplibmodulesservershieldscriptsaggregate-stats.php"
Result: ERROR - Module context is not defined
We are successfully using fail2ban on our server (CentOS 6.6, Plesk 12.0.18), that is, jails running and blocking potential intruders
However, we tried to create a custom jail for the CMS that is being used by most of our clients.
I followed the instructions (Tools & Settings > IP Address Banning (Fail2Ban) > Jails > Manage Filters > Add Filter) and created the filter I wanted, but then it does not appear in the list, even though it displays a message reading that the filter was created successfully. Then, if I try to create a new Jail, the filter is not available from the list.
Looking at the directory /etc/fail2ban/filter.d/ I can find a file that has the same name as the filter I created, with a .local extension (the file name does not contain whitespaces or other special characters)...
Have some very important questions regarding changing plesk ports and creating full backups.
1. When changing plesks port number, what exactly will it effect? Will it effect auto updates, etc.?
2. When creating a backup, I'd like to backup the entire server to rollback at anytime when changes are made to core files, is this possible?
3. With backups, somehow I'd like to schedule backups to possibly make nightly copies to an external hard drive on my computer for a fail safe method just in case the server happens to crash and I'd need to restore to another server/service. How would this be possible?
As the admin user, change the setting for a particular email account called "The maximum number of outgoing email messages" to a value beyond the default. For example if the default is 35, set it to 75. This is common -- often we have customers who send larger quantities of messages than the average user.
Login as a reseller with access to manage the email account and attempt to change any *other* value. For example, you could completely ignore the outgoing mail messages value and change just the Auto-Reply value
Plesk refuses to allow the change and kicks me back to the first tab with the following error:
The value must be in the range 0..35. Only the Plesk administrator can adjust this setting.Click to expand...
How to activate/enable the firewall by cli, does this is possible?
Firewall module is installed.
Option in plesk GUI working well.
Does this is possible ? If yes how ?
Is that possible to block baidu without specifying whole list of IDs it's using ?
View 1 Replies View Related