CC_ALLOW_FILTER

[pixelpadre]

I believe that the bug still exists. I use only cc allow filter with country codes. My control panel will not update with cc_allow_filter on. If I comment out the line then the control panel will update.

I have tried whitelisting and ignore with control panel ip addresses with no results.
I have included the CC of the control panel server also.

[yeboad]

I have experienced the exact same problem for the last few days since updating cPanel to v84.0.21

My server and websites experienced intermittent issues with DNS errors popping up, but luckily I found this thread and was able to sort everything out again.

[pixelpadre]

I used --grep with the servers being blocked. There were 4 ip addresses listed as needing access to update my control panel. CA,CA,FR,FR. Oddly, grep returned positive results with CC lookup for CA, but no results for the two FR ip addresses. I was using ip src #2. I have switched just now back to #1 maxmind. I will try again later today to see what the grep gives me with max mind.

137.74.148.116 FR
198.27.104.40 CA
167.114.21.226 CA
151.80.90.199 FR

Grep out for CA
IPSET: Set:cc_ca Match:198.27.104.40 Setting:CC_ALLOW_FILTER Country:CA
IPSET: Set:cc_ca Match:167.114.21.226 Setting:CC_ALLOW_FILTER Country:CA

Grep output for FR

[XXXX@server ~]# csf --grep 137.74.148.116

Table Chain num pkts bytes target prot opt in out source destination
No matches found for 137.74.148.116 in iptables
IPSET: Set:chain_ALLOW Match:137.74.148.116 Setting: File:/etc/csf/csf.allow
ip6tables:
Table Chain num pkts bytes target prot opt in out source destination
No matches found for 137.74.148.116 in ip6tables
csf.allow: 137.74.148.116 # csf country code

[XXXX@server ~]# csf --grep 151.80.90.199

Table Chain num pkts bytes target prot opt in out source destination
No matches found for 151.80.90.199 in iptables
IPSET: Set:chain_ALLOW Match:151.80.90.199 Setting: File:/etc/csf/csf.allow
ip6tables:
Table Chain num pkts bytes target prot opt in out source destination
No matches found for 151.80.90.199 in ip6tables
csf.allow: 151.80.90.199 # CWP Country code

[pixelpadre]

maxmind seems to make the difference. Its working now with maxmind.