Results 1 to 5 of 5

Thread: IP being banned

  1. #1
    Join Date
    Feb 2004
    Posts
    1,226

    IP being banned

    hello

    i have a IP on my server that is being banned (INPUT and OUTPUT of iptables) from time to time

    I belive I have just 3 programs that would do it:
    - snortsam
    - APF
    - BFD

    I couldn't find the IP on /var/log/snortsam.log
    But I found that BFD blocked it 6 or 7 days ago

    So my guess is that, even with me deblocking it by iptables, BFD insist on blocking it again

    suggestions?

  2. #2
    Join Date
    Nov 2003
    Location
    USA/Croatia
    Posts
    110
    Are you adding the IP in the etc/apf/host_allow.rules
    Freckle Face
    http://frecklefacehosting.com

  3. #3
    Join Date
    Feb 2004
    Posts
    1,226
    Originally posted by Freckled
    Are you adding the IP in the etc/apf/host_allow.rules
    the problem is that it's not a "trustable" IP

    but the guy made a mistake that BDF detected as brute force attack
    he was trying to connect with his own account, but seens he forgot the password (i checked the logs)

  4. #4
    Join Date
    May 2003
    Posts
    475
    remove the ip from deny host
    Dixiy.com - Professional Web Hosting Provider since 2002
    AutoCreation.net - Automation Solution for cPanel Hosting! + Illegal File Scanner
    WHDir.net - Your complete Web Hosting Directory with Hosting/Server Tutorials

  5. #5
    Join Date
    Feb 2004
    Posts
    1,226
    Originally posted by phoebs
    remove the ip from deny host
    worked!

    thanks very much

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •