HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials

HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials (http://www.howtoforge.com/forums/index.php)
-   General (http://www.howtoforge.com/forums/forumdisplay.php?f=25)
-   -   sites no longer resolving (http://www.howtoforge.com/forums/showthread.php?t=34077)

jcombs_31 24th April 2009 00:09

sites no longer resolving
 
All of a sudden I've noticed a couple sites that I have set up in ispconfig3 are no longer resolving. My main domain that I used to set up is resolving, but none of the other sites. To be honest, I'm not quite sure where to look for the appropriate logs. I don't see anything referencing mydns in /var/log

The strange thing is, the domains resolve when I check from the VPS, but don't resolve checking from home or anywhere else.

till 24th April 2009 11:58

Then you should check if the correct nameservers are set at the domain registry.

jcombs_31 24th April 2009 14:44

They are, these sites have been running fine for a few months now. All of a sudden I can't resolve them. Stranger yet, I had someone in another location check and they were able to resolve the domains. All of a sudden I'm also blocked out of ssh. My control panel is still running and my other sites are too, I just checked from work and I can see them and resolve them.

Its like my home computer(IP) has been blacklisted.

falko 24th April 2009 16:45

Are you using fail2ban, Blockhosts or DenyHosts on the server? If you have made too many failed login attempts, then you probably got blocked by these tools.

jcombs_31 24th April 2009 16:51

Quote:

Originally Posted by falko (Post 184105)
Are you using fail2ban, Blockhosts or DenyHosts on the server? If you have made too many failed login attempts, then you probably got blocked by these tools.

Yes, but I don't recall ever failing a login attempt. The million dollar question is, if that is the case, how does one regain access to a remote system that has blocked you?

I'm working with the host support, they said they cleared /etc/hosts.deny, but I'm still getting a refused connection.

jcombs_31 24th April 2009 17:19

The support told me they cleared the hosts.deny, but clearly they did not. I had someone login for me and clear out my IP address. What scares me though is why this happened to begin with. I had both fail2ban and denyhosts installed, should I only use 1 or the other?

jcombs_31 24th April 2009 22:50

I'm still unable to resolve from my home IP address. I can login to the control panel but can't resolve my other sites. They resolved fine from work and I've had a few other people check with no problems.

Is there any other setting that could block access to DNS for this IP?

edit: looks like might have been my router or atts dns. I added another entry and was able to resolve.

falko 25th April 2009 12:48

Quote:

Originally Posted by jcombs_31 (Post 184117)
I had both fail2ban and denyhosts installed, should I only use 1 or the other?

Yes, just use one.
If you're using fail2ban, you're probably being blocked by iptables, not /etc/hosts.deny.

http://debianclusters.cs.uni.edu/ind...rute_Force_SSH

jcombs_31 25th April 2009 21:36

No, it was definitely in hosts.deny. Do you have a recommendation on which to use?

falko 26th April 2009 14:27

Denyhosts can just secure SSH, while fail2ban can protect also other services. If you just want to protect SSH, then it doesn't matter which one you use - they both do the same great job. :)


All times are GMT +2. The time now is 02:38.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.