CSF install on VPS completely blocked any and all access to server

Post Reply
leeroyc
Junior Member
Posts: 1
Joined: 02 Mar 2016, 03:51

CSF install on VPS completely blocked any and all access to server

Post by leeroyc »

Hi, I recently installed CSF as per instructions and set testing mode to 0 and also for safety sake added my IP address to allowed and ignore (for LFD).

As soon as I ran restart using cfr -R I got booted from SSH session and my WHM, CPANEL, sites, DNS, Mail and everything went down. I could not access the IP of the server for any services form any location.

I am in the process of restoring a backup of the VPS.

It is an nginx hosted with GoDaddy using CentOS 6.

Has anyone else had a similar problem? I would like to fix this so I can implement it.

Thanks!
Lee
Elizine
Junior Member
Posts: 40
Joined: 17 Aug 2015, 13:04

Re: CSF install on VPS completely blocked any and all access to server

Post by Elizine »

You most likely either have a configuration error in your csf.conf, you've been blocked by lfd, a legacy script flushing iptables or a problem with your VPS configuration by your VPS host:

1. Check you haven't been blocked by lfd by checking /var/log/lfd.log (you or your VPS host provider may have to do this from the VPS console)

2. Ensure that you use the default csf installation. There is no need to set the ETH_DEVICE setting

3. Check all of your root cron jobs and ensure that none of them are doing anything with iptables (especially flushing them) in: /etc/crontab /etc/cron.d/ /etc/cron.hourly/ /etc/cron.daily/ /var/spool/cron/root

4. If there are still problems, then it's most likely that your VPS is not correctly configured by your VPS host provider
sachagriffin
Junior Member
Posts: 1
Joined: 20 Jul 2016, 14:17

Re: CSF install on VPS completely blocked any and all access to server

Post by sachagriffin »

Yes, on the new godaddy deds with virtuozzo.. Enabling the firewall blocked all access.
No ssh, no whm, access failed from all three servers.. so I know I wasn't locally blocked.

Perhaps Configserver will still attempt to start even though it fails it's own tests required to start.

Testing ipt_state/xt_state...FAILED [FATAL Error: iptables: No chain/target/match by that name.] - Required for csf to function

I'm checking if Configserver is still compatible with Godaddy.
Post Reply