| 7 | | |
| 8 | | Confirming IP is 46.33.157.98 |
| 9 | | |
| 10 | | Thanks |
| 11 | | |
| 12 | | Sam |
| 13 | | |
| 14 | | On 22 September 2015 at 17:38, Transition Technology Trac |
| 15 | | <trac@tech.transitionnetwork.org> wrote: |
| 16 | | > #873: New Wordpress site please |
| 17 | | > -------------------------------------+------------------------------------- |
| 18 | | > Reporter: sam | Owner: chris |
| 19 | | > Type: maintenance | Status: new |
| 20 | | > Priority: major | Milestone: |
| 21 | | > Component: Parrot server | Maintenance |
| 22 | | > Keywords: | Resolution: |
| 23 | | > Add Hours to Ticket: 0.25 | Estimated Number of Hours: 0.0 |
| 24 | | > Total Hours: 0.75 | Billable?: 1 |
| 25 | | > -------------------------------------+------------------------------------- |
| 26 | | > Changes (by chris): |
| 27 | | > |
| 28 | | > * hours: 0.0 => 0.25 |
| 29 | | > * totalhours: 0.75 => 1.0 |
| 30 | | > |
| 31 | | > |
| 32 | | > Comment: |
| 33 | | > |
| 34 | | > Sam has reported that his IP address has been blocked, ParrotServer is |
| 35 | | > running Deny Hosts which adds IP addresses to `/etc/hosts.deny` if there |
| 36 | | > are too many failed login attempts, however Apache doesn't use |
| 37 | | > `/etc/hosts.deny` and his IP isn't listed there... Also iptables blocked |
| 38 | | > IP addresses are just for some that have been running brute force attacks |
| 39 | | > against the server (see |
| 40 | | > ticket:871 ): |
| 41 | | > |
| 42 | | > {{{ |
| 43 | | > |
| 44 | | > iptables -L -n |
| 45 | | > Chain INPUT (policy ACCEPT) |
| 46 | | > target prot opt source destination |
| 47 | | > DROP all -- 217.174.240.254 0.0.0.0/0 |
| 48 | | > DROP all -- 185.11.147.17 0.0.0.0/0 |
| 49 | | > DROP all -- 23.94.144.162 0.0.0.0/0 |
| 50 | | > DROP all -- 185.62.188.91 0.0.0.0/0 |
| 51 | | > DROP all -- 212.50.12.41 0.0.0.0/0 |
| 52 | | > |
| 53 | | > Chain FORWARD (policy ACCEPT) |
| 54 | | > target prot opt source destination |
| 55 | | > |
| 56 | | > Chain OUTPUT (policy ACCEPT) |
| 57 | | > target prot opt source destination |
| 58 | | > }}} |
| 59 | | > |
| 60 | | > So, this is puzzling... Sam can you double check your IP address? I have |
| 61 | | > added the one that had all the failed `ssh` logins earlier to |
| 62 | | > `/etc/hosts.allow` but as I said Apache doesn't use this and also you are |
| 63 | | > not listed in `/etc/hosts.deny`... There is this page on ParrotServer for |
| 64 | | > checking your IP (though this won't work if you can't access it..): |
| 65 | | > |
| 66 | | > * https://parrot.transitionnetwork.org/myip.shtml |
| 67 | | > |
| 68 | | > I can't see why you can't access the server... |
| 69 | | > |
| 70 | | > -- |
| 71 | | > Ticket URL: <https://tech.transitionnetwork.org/trac/ticket/873#comment:4> |
| 72 | | > Transition Technology <https://tech.transitionnetwork.org/trac> |
| 73 | | > Support and issues tracking for the Transition Network Web Project. |
| 74 | | |
| 75 | | }}} |
