Page 1 of 1

Why is my cellphone getting blocked?

Posted: 07 Mar 2015, 19:21
by Dogs and things
Hello,

When I visit my website from my cellphone through my routers wifi I can access my site without a problem.

However, when I switch off the wifi on my phone and access my site from the phone I can not access, csf blocks me. After doing a lfd and csf restart I can access without a problem.

When I switch wifi back on I can continue to browse my site. I switch wifi off again and same problem occurs.

Every time I switch of wifi my cellphone receives a new ip from the provider.

I would like to read any suggestions, hints about why and what to do.

Greetings, D&T.

Re: Why is my cellphone getting blocked?

Posted: 07 Mar 2015, 23:35
by Sergio
when you get blocked, go to whatismyip dot com and check your IP, then connect to your wifi and check on CSF logs why that IP was blocked, then post the results.

Re: Why is my cellphone getting blocked?

Posted: 08 Mar 2015, 18:34
by Dogs and things
I have been able to navigate my site normally today, until now.

I got blocked again.

I find no entries for the ip in the lfd.log or in /var/log/messages.

However, when I do csf -g ip I get the following result:

Code: Select all

csf -g 176.83.200.6

Chain            num   pkts bytes target     prot opt in     out     source               destination
INPUT            1        0     0 LOG        tcp  --  *      *       176.83.200.6         0.0.0.0/0           tcp flags:0x17/0x02 LOG flags 0 level 4 prefix `Firewall: I:INPUT '
INPUT            39       0     0 LOG        tcp  --  *      *       176.83.200.6         0.0.0.0/0           tcp flags:0x17/0x02 LOG flags 0 level 4 prefix `Firewall: O:INPUT '

ALLOWIN          1        0     0 LOG        tcp  --  *      *       176.83.200.6         0.0.0.0/0           tcp flags:0x17/0x02 LOG flags 0 level 4 prefix `Firewall: I:ALLOWIN '
ALLOWIN          23       0     0 LOG        tcp  --  *      *       176.83.200.6         0.0.0.0/0           tcp flags:0x17/0x02 LOG flags 0 level 4 prefix `Firewall: O:ALLOWIN '

ALLOWOUT         1        0     0 LOG        tcp  --  *      *       176.83.200.6         0.0.0.0/0           tcp flags:0x17/0x02 LOG flags 0 level 4 prefix `Firewall: I:ALLOWOUT '
ALLOWOUT         23       0     0 LOG        tcp  --  *      *       176.83.200.6         0.0.0.0/0           tcp flags:0x17/0x02 LOG flags 0 level 4 prefix `Firewall: O:ALLOWOUT '

CC_DENY          1        0     0 LOG        tcp  --  *      *       176.83.200.6         0.0.0.0/0           tcp flags:0x17/0x02 LOG flags 0 level 4 prefix `Firewall: I:CC_DENY '
CC_DENY          2        0     0 LOG        tcp  --  *      *       176.83.200.6         0.0.0.0/0           tcp flags:0x17/0x02 LOG flags 0 level 4 prefix `Firewall: O:CC_DENY '

DENYIN           1        0     0 LOG        tcp  --  *      *       176.83.200.6         0.0.0.0/0           tcp flags:0x17/0x02 LOG flags 0 level 4 prefix `Firewall: I:DENYIN '
DENYIN           153      0     0 LOG        tcp  --  *      *       176.83.200.6         0.0.0.0/0           tcp flags:0x17/0x02 LOG flags 0 level 4 prefix `Firewall: O:DENYIN '

DENYOUT          1        0     0 LOG        tcp  --  *      *       176.83.200.6         0.0.0.0/0           tcp flags:0x17/0x02 LOG flags 0 level 4 prefix `Firewall: I:DENYOUT '
DENYOUT          152      0     0 LOG        tcp  --  *      *       176.83.200.6         0.0.0.0/0           tcp flags:0x17/0x02 LOG flags 0 level 4 prefix `Firewall: O:DENYOUT '

INVALID          1        0     0 LOG        tcp  --  *      *       176.83.200.6         0.0.0.0/0           tcp flags:0x17/0x02 LOG flags 0 level 4 prefix `Firewall: I:INVALID '
INVALID          12       0     0 LOG        tcp  --  *      *       176.83.200.6         0.0.0.0/0           tcp flags:0x17/0x02 LOG flags 0 level 4 prefix `Firewall: O:INVALID '

INVDROP          1        0     0 LOG        tcp  --  *      *       176.83.200.6         0.0.0.0/0           tcp flags:0x17/0x02 LOG flags 0 level 4 prefix `Firewall: I:INVDROP '
INVDROP          3        0     0 LOG        tcp  --  *      *       176.83.200.6         0.0.0.0/0           tcp flags:0x17/0x02 LOG flags 0 level 4 prefix `Firewall: O:INVDROP '

LOCALINPUT       1        0     0 LOG        tcp  --  *      *       176.83.200.6         0.0.0.0/0           tcp flags:0x17/0x02 LOG flags 0 level 4 prefix `Firewall: I:LOCALINPUT '
LOCALINPUT       5        0     0 LOG        tcp  --  *      *       176.83.200.6         0.0.0.0/0           tcp flags:0x17/0x02 LOG flags 0 level 4 prefix `Firewall: O:LOCALINPUT '

LOGDROPIN        1        0     0 LOG        tcp  --  *      *       176.83.200.6         0.0.0.0/0           tcp flags:0x17/0x02 LOG flags 0 level 4 prefix `Firewall: I:LOGDROPIN '
LOGDROPIN        24       0     0 LOG        tcp  --  *      *       176.83.200.6         0.0.0.0/0           tcp flags:0x17/0x02 LOG flags 0 level 4 prefix `Firewall: O:LOGDROPIN '
Is there anywhere else where I should look to locate causes for this block?

Re: Why is my cellphone getting blocked?

Posted: 09 Mar 2015, 04:34
by Sergio
Do you have Spain on the CC block?
IP Address: 176.83.200.6 assigned to SPAIN

You are blocking that IP on your CC_DENY:
CC_DENY 1 0 0 LOG tcp -- * * 176.83.200.6 0.0.0.0/0 tcp flags:0x17/0x02 LOG flags 0 level 4 prefix `Firewall: I:CC_DENY '

Re: Why is my cellphone getting blocked?

Posted: 09 Mar 2015, 08:57
by Dogs and things
No, I checked my csf.conf, and I don't. I live in Spain and my site targets Spain in the first place.

A bit strange, isn't it?