
23rd April 2009, 23:09
|
|
Member
|
|
Join Date: Jan 2009
Location: South Florida
Posts: 84
Thanks: 2
Thanked 2 Times in 1 Post
|
|
sites no longer resolving
All of a sudden I've noticed a couple sites that I have set up in ispconfig3 are no longer resolving. My main domain that I used to set up is resolving, but none of the other sites. To be honest, I'm not quite sure where to look for the appropriate logs. I don't see anything referencing mydns in /var/log
The strange thing is, the domains resolve when I check from the VPS, but don't resolve checking from home or anywhere else.
Last edited by jcombs_31; 24th April 2009 at 00:33.
|

24th April 2009, 10:58
|
|
Super Moderator
|
|
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 32,066
Thanks: 697
Thanked 4,248 Times in 3,260 Posts
|
|
Then you should check if the correct nameservers are set at the domain registry.
|

24th April 2009, 13:44
|
|
Member
|
|
Join Date: Jan 2009
Location: South Florida
Posts: 84
Thanks: 2
Thanked 2 Times in 1 Post
|
|
They are, these sites have been running fine for a few months now. All of a sudden I can't resolve them. Stranger yet, I had someone in another location check and they were able to resolve the domains. All of a sudden I'm also blocked out of ssh. My control panel is still running and my other sites are too, I just checked from work and I can see them and resolve them.
Its like my home computer(IP) has been blacklisted.
|

24th April 2009, 15:45
|
|
Super Moderator
|
|
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,685
Thanks: 1,899
Thanked 2,599 Times in 2,448 Posts
|
|
Are you using fail2ban, Blockhosts or DenyHosts on the server? If you have made too many failed login attempts, then you probably got blocked by these tools.
|

24th April 2009, 15:51
|
|
Member
|
|
Join Date: Jan 2009
Location: South Florida
Posts: 84
Thanks: 2
Thanked 2 Times in 1 Post
|
|
Quote:
Originally Posted by falko
Are you using fail2ban, Blockhosts or DenyHosts on the server? If you have made too many failed login attempts, then you probably got blocked by these tools.
|
Yes, but I don't recall ever failing a login attempt. The million dollar question is, if that is the case, how does one regain access to a remote system that has blocked you?
I'm working with the host support, they said they cleared /etc/hosts.deny, but I'm still getting a refused connection.
|

24th April 2009, 16:19
|
|
Member
|
|
Join Date: Jan 2009
Location: South Florida
Posts: 84
Thanks: 2
Thanked 2 Times in 1 Post
|
|
The support told me they cleared the hosts.deny, but clearly they did not. I had someone login for me and clear out my IP address. What scares me though is why this happened to begin with. I had both fail2ban and denyhosts installed, should I only use 1 or the other?
|

24th April 2009, 21:50
|
|
Member
|
|
Join Date: Jan 2009
Location: South Florida
Posts: 84
Thanks: 2
Thanked 2 Times in 1 Post
|
|
I'm still unable to resolve from my home IP address. I can login to the control panel but can't resolve my other sites. They resolved fine from work and I've had a few other people check with no problems.
Is there any other setting that could block access to DNS for this IP?
edit: looks like might have been my router or atts dns. I added another entry and was able to resolve.
Last edited by jcombs_31; 24th April 2009 at 22:23.
|

25th April 2009, 11:48
|
|
Super Moderator
|
|
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,685
Thanks: 1,899
Thanked 2,599 Times in 2,448 Posts
|
|
Quote:
Originally Posted by jcombs_31
I had both fail2ban and denyhosts installed, should I only use 1 or the other?
|
Yes, just use one.
If you're using fail2ban, you're probably being blocked by iptables, not /etc/hosts.deny.
http://debianclusters.cs.uni.edu/ind...rute_Force_SSH
|

25th April 2009, 20:36
|
|
Member
|
|
Join Date: Jan 2009
Location: South Florida
Posts: 84
Thanks: 2
Thanked 2 Times in 1 Post
|
|
No, it was definitely in hosts.deny. Do you have a recommendation on which to use?
|

26th April 2009, 13:27
|
|
Super Moderator
|
|
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,685
Thanks: 1,899
Thanked 2,599 Times in 2,448 Posts
|
|
Denyhosts can just secure SSH, while fail2ban can protect also other services. If you just want to protect SSH, then it doesn't matter which one you use - they both do the same great job.
|
| Thread Tools |
|
|
| Display Modes |
Linear Mode
|
Posting Rules
|
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
HTML code is Off
|
|
|
All times are GMT +2. The time now is 01:36.
|
Recent comments
1 day 3 hours ago
1 day 5 hours ago
1 day 17 hours ago
1 day 20 hours ago
2 days 43 min ago
2 days 6 hours ago
2 days 16 hours ago
2 days 18 hours ago
3 days 2 hours ago
3 days 3 hours ago