HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials

HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials (http://www.howtoforge.com/forums/index.php)
-   General (http://www.howtoforge.com/forums/forumdisplay.php?f=25)
-   -   sites no longer resolving (http://www.howtoforge.com/forums/showthread.php?t=34077)

jcombs_31 23rd April 2009 23:09

sites no longer resolving
 
All of a sudden I've noticed a couple sites that I have set up in ispconfig3 are no longer resolving. My main domain that I used to set up is resolving, but none of the other sites. To be honest, I'm not quite sure where to look for the appropriate logs. I don't see anything referencing mydns in /var/log

The strange thing is, the domains resolve when I check from the VPS, but don't resolve checking from home or anywhere else.

till 24th April 2009 10:58

Then you should check if the correct nameservers are set at the domain registry.

jcombs_31 24th April 2009 13:44

They are, these sites have been running fine for a few months now. All of a sudden I can't resolve them. Stranger yet, I had someone in another location check and they were able to resolve the domains. All of a sudden I'm also blocked out of ssh. My control panel is still running and my other sites are too, I just checked from work and I can see them and resolve them.

Its like my home computer(IP) has been blacklisted.

falko 24th April 2009 15:45

Are you using fail2ban, Blockhosts or DenyHosts on the server? If you have made too many failed login attempts, then you probably got blocked by these tools.

jcombs_31 24th April 2009 15:51

Quote:

Originally Posted by falko (Post 184105)
Are you using fail2ban, Blockhosts or DenyHosts on the server? If you have made too many failed login attempts, then you probably got blocked by these tools.

Yes, but I don't recall ever failing a login attempt. The million dollar question is, if that is the case, how does one regain access to a remote system that has blocked you?

I'm working with the host support, they said they cleared /etc/hosts.deny, but I'm still getting a refused connection.

jcombs_31 24th April 2009 16:19

The support told me they cleared the hosts.deny, but clearly they did not. I had someone login for me and clear out my IP address. What scares me though is why this happened to begin with. I had both fail2ban and denyhosts installed, should I only use 1 or the other?

jcombs_31 24th April 2009 21:50

I'm still unable to resolve from my home IP address. I can login to the control panel but can't resolve my other sites. They resolved fine from work and I've had a few other people check with no problems.

Is there any other setting that could block access to DNS for this IP?

edit: looks like might have been my router or atts dns. I added another entry and was able to resolve.

falko 25th April 2009 11:48

Quote:

Originally Posted by jcombs_31 (Post 184117)
I had both fail2ban and denyhosts installed, should I only use 1 or the other?

Yes, just use one.
If you're using fail2ban, you're probably being blocked by iptables, not /etc/hosts.deny.

http://debianclusters.cs.uni.edu/ind...rute_Force_SSH

jcombs_31 25th April 2009 20:36

No, it was definitely in hosts.deny. Do you have a recommendation on which to use?

falko 26th April 2009 13:27

Denyhosts can just secure SSH, while fail2ban can protect also other services. If you just want to protect SSH, then it doesn't matter which one you use - they both do the same great job. :)


All times are GMT +2. The time now is 06:08.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.