Our I.P got blocked for our own site

Portal Home > Knowledgebase > Articles Database > Our I.P got blocked for our own site

Posted by mickscool, 12-29-2010, 09:37 PM
Hi Friends, We own a dedicated server and we have got our I.P blacklisted (tried 3-4 unsuccessful login's of root account) and we are unable to view/login to our own sites running on that server. The hosting provider initially thought it was a cPanel issue and they flushed the entries in cPanel and add our I.P to the safe list but it did not worked. Then they said it's something else and I will have to pay them to create a ticket since it's a dedicated server. I tried few things and it turned out that it's the APF Firewall database or the iptables that has my I.P blacklisted somewhere and is blocking us.. Then we logged in through a different I.P and flushed the iptables and it worked but the issue reappeared. This time we stopped the APF firewall itself and it worked but again temporarily. For some reason it gets reset every 24 hours or so and again our I.P gets blocked until we flush the iptables or start/stop the APF again.. Can someone please tell how to resolve this issue on a permanent basis. Thanks
Posted by RapidRick, 12-29-2010, 09:49 PM
APF is not a firewall, but an iptables wrapper script. Does it produce logs when IPs get dropped? Can you whitelist IPs? This is where I would start.
Posted by mickscool, 12-29-2010, 10:08 PM
Cool, seems white listing the I.P works... We addded our I.P in /etc/apf/allow_hosts.rules Then we started APF and we are still able to access the site, seems like it worked. Thanks a lot!