[Solved] Unable to access SSH after update

ivanc82 · Nov 8, 2016

Hi,

I have issues after update centminmod beta, all my 3 servers unable to access SSH and my sites are all down..

pamamolf · Nov 8, 2016

Try with another ip/vpn and when you are in clear the ban that you may have on csf file...

ivanc82 · Nov 8, 2016

I also can't see any web traffic at all.. i think is site down..

pamamolf · Nov 8, 2016

If you solve the ssh login issue then you will be able to troubleshoot....

ivanc82 · Nov 8, 2016

can you help? is something get blocked?

Code:

sudo iptables -L -nv
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
   67 20250 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            state RELATED,ESTABLISHED
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            state NEW tcp dpt:22
   27  3929 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            reject-with icmp-host-prohibite
d

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
    0     0 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            reject-with icmp-host-prohibite
d

Chain OUTPUT (policy ACCEPT 101 packets, 11265 bytes)
 pkts bytes target     prot opt in     out     source               destination

eva2000 · Nov 8, 2016

Did you disable CSF Firewall CSF Firewall - CentminMod.com LEMP Nginx web stack for CentOS ? that would block you as it's CSF Firewall's configuration that whitelists common used ports for http/https 80/443 and sshd 22. If you disable CSF Firewall there's no whitelisted ports by default.

ivanc82 · Nov 8, 2016

No i didn't disable CSF. I run it as default and after update centminmod via github the issue started..

eva2000 · Nov 8, 2016

ivanc82 said: ↑

Hi,

I have issues after update centminmod beta, all my 3 servers unable to access SSH and my sites are all down..
Click to expand...

what did you update from ? 123.08stable to 123.09beta01 or 123.09beta01 already and just update to latest code via centmin.sh menu option 23 ?

did you update as full root user or run via sudo command (which centmin mod doesn't really support as you need to sudo switch to full root user instead of sudo cmd style)

ivanc82 · Nov 8, 2016

it's 123.09beta01 and update using option 23 > 2

eva2000 · Nov 8, 2016

the iptables -L -nv output suggests CSF Firewall isn't running or configured properly as you have no whitelisted ports common to CSF firewall setups when you look at iptables -L -nv output

CSF command equivalent for iptables is

Code (Text):

csf -l

example out of box default 123.09beta01 installed output

Code (Text):

csf -l
Chain INPUT (policy DROP 0 packets, 0 bytes)
num   pkts bytes target     prot opt in     out     source               destination        
1        0     0 ACCEPT     tcp  --  !lo    *       8.8.4.4              0.0.0.0/0           tcp dpt:53 
2        0     0 ACCEPT     udp  --  !lo    *       8.8.4.4              0.0.0.0/0           udp dpt:53 
3        0     0 ACCEPT     tcp  --  !lo    *       8.8.4.4              0.0.0.0/0           tcp spt:53 
4        0     0 ACCEPT     udp  --  !lo    *       8.8.4.4              0.0.0.0/0           udp spt:53 
5        0     0 ACCEPT     tcp  --  !lo    *       8.8.8.8              0.0.0.0/0           tcp dpt:53 
6        0     0 ACCEPT     udp  --  !lo    *       8.8.8.8              0.0.0.0/0           udp dpt:53 
7        0     0 ACCEPT     tcp  --  !lo    *       8.8.8.8              0.0.0.0/0           tcp spt:53 
8       16  2138 ACCEPT     udp  --  !lo    *       8.8.8.8              0.0.0.0/0           udp spt:53 
9      247  131K LOCALINPUT  all  --  !lo    *       0.0.0.0/0            0.0.0.0/0          
10       0     0 ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0          
11     135  125K INVALID    tcp  --  !lo    *       0.0.0.0/0            0.0.0.0/0          
12       0     0            tcp  --  !lo    *       0.0.0.0/0            0.0.0.0/0           tcp dpt:21 state NEW recent: SET name: 21 side: source 
13       0     0 PORTFLOOD  tcp  --  !lo    *       0.0.0.0/0            0.0.0.0/0           tcp dpt:21 state NEW recent: UPDATE seconds: 300 hit_count: 5 name: 21 side: source 
14     136  126K ACCEPT     all  --  !lo    *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
15       0     0 ACCEPT     tcp  --  !lo    *       0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:20 
16       0     0 ACCEPT     tcp  --  !lo    *       0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:21 
17       0     0 ACCEPT     tcp  --  !lo    *       0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:22 
18       0     0 ACCEPT     tcp  --  !lo    *       0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:25 
19       0     0 ACCEPT     tcp  --  !lo    *       0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:53 
20       0     0 ACCEPT     tcp  --  !lo    *       0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:80 
21       0     0 ACCEPT     tcp  --  !lo    *       0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:110 
22       0     0 ACCEPT     tcp  --  !lo    *       0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:143 
23       0     0 ACCEPT     tcp  --  !lo    *       0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:161 
24       0     0 ACCEPT     tcp  --  !lo    *       0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:443 
25       0     0 ACCEPT     tcp  --  !lo    *       0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:465 
26       0     0 ACCEPT     tcp  --  !lo    *       0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:587 
27       0     0 ACCEPT     tcp  --  !lo    *       0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:993 
28       0     0 ACCEPT     tcp  --  !lo    *       0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:995 
29       0     0 ACCEPT     tcp  --  !lo    *       0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:1110 
30       0     0 ACCEPT     tcp  --  !lo    *       0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:1186 
31       0     0 ACCEPT     tcp  --  !lo    *       0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:1194 
32       0     0 ACCEPT     tcp  --  !lo    *       0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:81 
33       0     0 ACCEPT     tcp  --  !lo    *       0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:9418 
34       0     0 ACCEPT     tcp  --  !lo    *       0.0.0.0/0            0.0.0.0/0           state NEW tcp dpts:30001:50011 
35       0     0 ACCEPT     udp  --  !lo    *       0.0.0.0/0            0.0.0.0/0           state NEW udp dpt:67 
36       0     0 ACCEPT     udp  --  !lo    *       0.0.0.0/0            0.0.0.0/0           state NEW udp dpt:68 
37       0     0 ACCEPT     udp  --  !lo    *       0.0.0.0/0            0.0.0.0/0           state NEW udp dpt:1110 
38       0     0 ACCEPT     udp  --  !lo    *       0.0.0.0/0            0.0.0.0/0           state NEW udp dpts:33434:33534 
39       0     0 ACCEPT     udp  --  !lo    *       0.0.0.0/0            0.0.0.0/0           state NEW udp dpt:20 
40       0     0 ACCEPT     udp  --  !lo    *       0.0.0.0/0            0.0.0.0/0           state NEW udp dpt:21 
41       0     0 ACCEPT     udp  --  !lo    *       0.0.0.0/0            0.0.0.0/0           state NEW udp dpt:53 
42       0     0 ACCEPT     icmp --  !lo    *       0.0.0.0/0            0.0.0.0/0           icmp type 8 limit: avg 1/sec burst 5 
43       0     0 ACCEPT     icmp --  !lo    *       0.0.0.0/0            0.0.0.0/0           icmp type 0 limit: avg 1/sec burst 5 
44       0     0 ACCEPT     icmp --  !lo    *       0.0.0.0/0            0.0.0.0/0           icmp type 11 
45       0     0 ACCEPT     icmp --  !lo    *       0.0.0.0/0            0.0.0.0/0           icmp type 3 
46       0     0 LOGDROPIN  all  --  !lo    *       0.0.0.0/0            0.0.0.0/0          

Chain FORWARD (policy DROP 0 packets, 0 bytes)
num   pkts bytes target     prot opt in     out     source               destination        

Chain OUTPUT (policy DROP 0 packets, 0 bytes)
num   pkts bytes target     prot opt in     out     source               destination        
1        0     0 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            8.8.4.4             tcp dpt:53 
2        0     0 ACCEPT     udp  --  *      !lo     0.0.0.0/0            8.8.4.4             udp dpt:53 
3        0     0 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            8.8.4.4             tcp spt:53 
4        0     0 ACCEPT     udp  --  *      !lo     0.0.0.0/0            8.8.4.4             udp spt:53 
5        0     0 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            8.8.8.8             tcp dpt:53 
6       16  1088 ACCEPT     udp  --  *      !lo     0.0.0.0/0            8.8.8.8             udp dpt:53 
7        0     0 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            8.8.8.8             tcp spt:53 
8        0     0 ACCEPT     udp  --  *      !lo     0.0.0.0/0            8.8.8.8             udp spt:53 
9      318 31047 LOCALOUTPUT  all  --  *      !lo     0.0.0.0/0            0.0.0.0/0          
10       0     0 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            0.0.0.0/0           tcp dpt:53 
11       0     0 ACCEPT     udp  --  *      !lo     0.0.0.0/0            0.0.0.0/0           udp dpt:53 
12       0     0 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            0.0.0.0/0           tcp spt:53 
13       0     0 ACCEPT     udp  --  *      !lo     0.0.0.0/0            0.0.0.0/0           udp spt:53 
14       0     0 ACCEPT     all  --  *      lo      0.0.0.0/0            0.0.0.0/0          
15     168 13687 INVALID    tcp  --  *      !lo     0.0.0.0/0            0.0.0.0/0          
16     144 11487 ACCEPT     all  --  *      !lo     0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
17       0     0 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:993 
18       0     0 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:995 
19       0     0 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:465 
20       0     0 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:587 
21       0     0 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:1110 
22       0     0 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:1194 
23       0     0 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:9418 
24       0     0 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:20 
25       0     0 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:21 
26       0     0 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:22 
27       0     0 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:25 
28       0     0 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:53 
29       2   120 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:80 
30       0     0 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:110 
31       0     0 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:113 
32       4   240 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:443 
33       0     0 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:587 
34       0     0 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:993 
35       0     0 ACCEPT     tcp  --  *      !lo     0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:995 
36       0     0 ACCEPT     udp  --  *      !lo     0.0.0.0/0            0.0.0.0/0           state NEW udp dpt:67 
37       0     0 ACCEPT     udp  --  *      !lo     0.0.0.0/0            0.0.0.0/0           state NEW udp dpt:68 
38       0     0 ACCEPT     udp  --  *      !lo     0.0.0.0/0            0.0.0.0/0           state NEW udp dpt:1110 
39       0     0 ACCEPT     udp  --  *      !lo     0.0.0.0/0            0.0.0.0/0           state NEW udp dpts:33434:33534 
40       0     0 ACCEPT     udp  --  *      !lo     0.0.0.0/0            0.0.0.0/0           state NEW udp dpt:20 
41       0     0 ACCEPT     udp  --  *      !lo     0.0.0.0/0            0.0.0.0/0           state NEW udp dpt:21 
42       0     0 ACCEPT     udp  --  *      !lo     0.0.0.0/0            0.0.0.0/0           state NEW udp dpt:53 
43       0     0 ACCEPT     udp  --  *      !lo     0.0.0.0/0            0.0.0.0/0           state NEW udp dpt:113 
44       0     0 ACCEPT     udp  --  *      !lo     0.0.0.0/0            0.0.0.0/0           state NEW udp dpt:123 
45       0     0 ACCEPT     icmp --  *      !lo     0.0.0.0/0            0.0.0.0/0           icmp type 0 
46       0     0 ACCEPT     icmp --  *      !lo     0.0.0.0/0            0.0.0.0/0           icmp type 8 
47       0     0 ACCEPT     icmp --  *      !lo     0.0.0.0/0            0.0.0.0/0           icmp type 11 
48       0     0 ACCEPT     icmp --  *      !lo     0.0.0.0/0            0.0.0.0/0           icmp type 3 
49       0     0 LOGDROPOUT  all  --  *      !lo     0.0.0.0/0            0.0.0.0/0          

Chain ALLOWDYNIN (1 references)
num   pkts bytes target     prot opt in     out     source               destination        
1        0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           match-set chain_ALLOWDYN src 

Chain ALLOWDYNOUT (1 references)
num   pkts bytes target     prot opt in     out     source               destination        
1        0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           match-set chain_ALLOWDYN dst 

Chain ALLOWIN (1 references)
num   pkts bytes target     prot opt in     out     source               destination        
1      127  6101 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           match-set chain_ALLOW src 

Chain ALLOWOUT (1 references)
num   pkts bytes target     prot opt in     out     source               destination        
1      197 21736 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           match-set chain_ALLOW dst 

Chain DENYIN (1 references)
num   pkts bytes target     prot opt in     out     source               destination        
1        0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           match-set chain_DENY src 

Chain DENYOUT (1 references)
num   pkts bytes target     prot opt in     out     source               destination        
1        0     0 LOGDROPOUT  all  --  *      *       0.0.0.0/0            0.0.0.0/0           match-set chain_DENY dst 

Chain INVALID (2 references)
num   pkts bytes target     prot opt in     out     source               destination        
1        0     0 INVDROP    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID 
2        0     0 INVDROP    tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x3F/0x00 
3        0     0 INVDROP    tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x3F/0x3F 
4        0     0 INVDROP    tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x03/0x03 
5        0     0 INVDROP    tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x06/0x06 
6        0     0 INVDROP    tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x05/0x05 
7        0     0 INVDROP    tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x11/0x01 
8        0     0 INVDROP    tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x18/0x08 
9        0     0 INVDROP    tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x30/0x20 
10       0     0 INVDROP    tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:!0x17/0x02 state NEW 

Chain INVDROP (10 references)
num   pkts bytes target     prot opt in     out     source               destination        
1        0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0          

Chain LOCALINPUT (1 references)
num   pkts bytes target     prot opt in     out     source               destination        
1      247  131K ALLOWDYNIN  all  --  !lo    *       0.0.0.0/0            0.0.0.0/0          
2      247  131K ALLOWIN    all  --  !lo    *       0.0.0.0/0            0.0.0.0/0          
3      120  125K DENYIN     all  --  !lo    *       0.0.0.0/0            0.0.0.0/0          

Chain LOCALOUTPUT (1 references)
num   pkts bytes target     prot opt in     out     source               destination        
1      318 31047 ALLOWDYNOUT  all  --  *      !lo     0.0.0.0/0            0.0.0.0/0          
2      318 31047 ALLOWOUT   all  --  *      !lo     0.0.0.0/0            0.0.0.0/0          
3      121  9311 DENYOUT    all  --  *      !lo     0.0.0.0/0            0.0.0.0/0          
4       20  1520 UDPFLOOD   udp  --  *      !lo     0.0.0.0/0            0.0.0.0/0          

Chain LOGDROPIN (1 references)
num   pkts bytes target     prot opt in     out     source               destination        
1        0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:23 
2        0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:23 
3        0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:67 
4        0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:67 
5        0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:68 
6        0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:68 
7        0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:113 
8        0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:113 
9        0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpts:135:139 
10       0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:135:139 
11       0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:445 
12       0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:445 
13       0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:500 
14       0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:500 
15       0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:513 
16       0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:513 
17       0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:520 
18       0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:520 
19       0     0 LOG        tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 30/min burst 5 LOG flags 0 level 4 prefix `Firewall: *TCP_IN Blocked* ' 
20       0     0 LOG        udp  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 30/min burst 5 LOG flags 0 level 4 prefix `Firewall: *UDP_IN Blocked* ' 
21       0     0 LOG        icmp --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 30/min burst 5 LOG flags 0 level 4 prefix `Firewall: *ICMP_IN Blocked* ' 
22       0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0          

Chain LOGDROPOUT (2 references)
num   pkts bytes target     prot opt in     out     source               destination        
1        0     0 LOG        tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x17/0x02 limit: avg 30/min burst 5 LOG flags 8 level 4 prefix `Firewall: *TCP_OUT Blocked* ' 
2        0     0 LOG        udp  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 30/min burst 5 LOG flags 8 level 4 prefix `Firewall: *UDP_OUT Blocked* ' 
3        0     0 LOG        icmp --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 30/min burst 5 LOG flags 8 level 4 prefix `Firewall: *ICMP_OUT Blocked* ' 
4        0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0          

Chain PORTFLOOD (1 references)
num   pkts bytes target     prot opt in     out     source               destination        
1        0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 30/min burst 5 LOG flags 0 level 4 prefix `Firewall: *Port Flood* ' 
2        0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0          

Chain UDPFLOOD (1 references)
num   pkts bytes target     prot opt in     out     source               destination        
1       20  1520 RETURN     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           owner UID match 0 
2        0     0 RETURN     udp  --  *      !lo     0.0.0.0/0            0.0.0.0/0           limit: avg 100/sec burst 500 
3        0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 30/min burst 5 LOG flags 8 level 4 prefix `Firewall: *UDPFLOOD* ' 
4        0     0 DROP       udp  --  *      !lo     0.0.0.0/0            0.0.0.0/0          

Chain PREROUTING (policy ACCEPT 1 packets, 229 bytes)
num   pkts bytes target     prot opt in     out     source               destination        

Chain POSTROUTING (policy ACCEPT 14 packets, 904 bytes)
num   pkts bytes target     prot opt in     out     source               destination        

Chain OUTPUT (policy ACCEPT 14 packets, 904 bytes)
num   pkts bytes target     prot opt in     out     source               destination

ivanc82 · Nov 8, 2016

hmm.. it prompted and i didn't edit anything here

Code:

*Error* Invalid configuration line [IPV6 = 0] in /etc/csf/csf.conf at /usr/local/csf/lib/ConfigServer/LookUpIP.pm line 2
6.
Compilation failed in require at /sbin/csf line 20.
BEGIN failed--compilation aborted at /sbin/csf line 20.

eva2000 · Nov 8, 2016

ah it's a recent change i made !

ivanc82 · Nov 8, 2016

eva2000 · Nov 8, 2016

What do you get when you manually fix it via these 3 commands
Code (Text):
sed -i "s|^IPV6 = .*|IPV6 = \"0\"|" /etc/csf/csf.conf
csf -r
csf -u

ivanc82 · Nov 8, 2016

ohh.. now seems okay! i can access. i'm using remote access... and after unblock my ip i'm in SSH!

eva2000 · Nov 8, 2016

ok. updated 123.09beta01 with the fix Beta Branch - fix checkipvsix function for IPv6 check in CSF Firewall in 123.09beta01 | Centmin Mod Community

thanks @ivanc82 for the bug report and making Centmin Mod better

ivanc82 · Nov 8, 2016

thanks for the help and you're welcome

Log in / Register

Forums

Want to subscribe to topics you're interested in?

[Solved] Unable to access SSH after update

ivanc82 New Member

pamamolf Premium Member Premium Member

ivanc82 New Member

pamamolf Premium Member Premium Member

ivanc82 New Member

eva2000 Administrator Staff Member

ivanc82 New Member

eva2000 Administrator Staff Member

ivanc82 New Member

eva2000 Administrator Staff Member

ivanc82 New Member

eva2000 Administrator Staff Member

ivanc82 New Member

eva2000 Administrator Staff Member

ivanc82 New Member

eva2000 Administrator Staff Member

ivanc82 New Member

.

Log in / Register

Useful Searches

Want to subscribe to topics you're interested in?

[Solved] Unable to access SSH after update

ivanc82 New Member

pamamolf Premium Member Premium Member

ivanc82 New Member

pamamolf Premium Member Premium Member

ivanc82 New Member

eva2000 Administrator Staff Member

ivanc82 New Member

eva2000 Administrator Staff Member

ivanc82 New Member

eva2000 Administrator Staff Member

ivanc82 New Member

eva2000 Administrator Staff Member

ivanc82 New Member

eva2000 Administrator Staff Member

ivanc82 New Member

eva2000 Administrator Staff Member

ivanc82 New Member

.