Results 1 to 5 of 5
  1. #1

    BFD Blocking Client Reseller in APF

    I have Brute Force Detection set up, and my reseller client is now locked out of his cpanel and whm. According to the BFD email, he exceeded the allowable logons to one of his own client domains.

    Is this preventable?

    Will the APF firewall release this banned IP or do I have to do something?

  2. #2
    Join Date
    May 2003
    Location
    The Netherlands
    Posts
    298
    APF won't do anything. The whole meaning is, that the ip is being blocked in the future.

    You will have to remove his ip from deny_hosts.rules in /etc/apf . You might want to add his ip to allow_hosts.rules .
    SuperRacks Ltd European Hosting
    We serve you with custom services
    Visit our website or ask for a custom quote
    Quality linux and Windows hosting, servers and collocation

  3. #3
    Thanks. I did that and apf -r to restart but APF instead of restarting right away, APF spewed out a lot of lines. Here's a very short example:

    [email protected] [~]# apf -r
    iptables v1.2.8: host/network `host2.xon.pl' not found
    Try `iptables -h' or 'iptables --help' for more information.
    iptables v1.2.8: host/network `host2.xon.pl' not found
    Try `iptables -h' or 'iptables --help' for more information.
    iptables v1.2.8: host/network `unknown.ord.scnet.net' not found

    Any ideas?

  4. #4
    Join Date
    Oct 2001
    Location
    Ohio
    Posts
    8,299
    That's nothing to worry about really. That's what happens when hostnames get blocked. Upgrading to the latest BFD release fixes that.

  5. #5
    Join Date
    Mar 2003
    Location
    WebHostingTalk
    Posts
    16,962
    You can also increase the allowable login to your desire :-)
    Specially 4 You
    .
    JoneSolutions.Com ( Jones.Solutions ) is on the net 24/7 providing stable and reliable web hosting solutions and services since 2001

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •