Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : APF locked me out PLEASE help :(

[badawi]

Hi, I swore at myself enough so you don't have to bother doing it

I have changed the SSH port on /etc/ssh/sshd_config from standard 22 to a different port. The problem is that I totally forgot about APF and I logged out of the server.
Now I'm locked out and whenever I try to SSH it comes back with time out.

I still have access to WHM if this can help in anyway.

Any help or ideas to how to unblock the port or disable APF will be greatly appreciated.

[stayalive]

Wow i would ask your provider to change back the port cause through whm if you do not have this installed : http://www.whmext.com/download.php

You cannot disable firewall unless you can find a way to remove iptables off the server and than reboot the server.

Look into server software section of the whm and remove iptables if it shows there.

Good luck.

[badawi]

I have tried a couple of times to reboot the server and try to log before APF starts, but it seems like a waste of time. Where are the experts? please guys

[dollar]

You will never log in before APF starts, contact your provider and they will fix it for you.

[stayalive]

Dude i didnt tell you to reboot server did i ?, i told you to look for options to remove iptables off the system using whm and if u have that whm extension you can disable firewall. So do you have that extension on you and if not did you find out if there is a way to remove iptables using whm , if there is not than last option left is to contact your provider to change the port of shell or better turn of apf.

[Servax]

You will need to contact your provider like everyone else has said here, and tell them to turn off APF so you may log into the server. Only then, will you really be able to do anything.

[david510]

If you are using a Non Cent OS machine, You can reinstall the openssh package from your Whm --> Install a rpm. After selecting a package, you can select for force reinstall. I have not seen this option in Cent OS servers. may be the difference between yum and up2date. This should reinstall ssh package and will bring back the default configuration file.
Have a Try.

[badawi]

Originally Posted by david510

If you are using a Non Cent OS machine, You can reinstall the openssh package from your Whm --> Install a rpm. After selecting a package, you can select for force reinstall. I have not seen this option in Cent OS servers. may be the difference between yum and up2date. This should reinstall ssh package and will bring back the default configuration file.
Have a Try.

Sounds like a good option, but which RPM should I select? Openssh.i386, openssh-clients.i386 or openssh-server.i386. Ah there is also openssh-askpass.i386 and openssh-askpass-gnome.i386.

Which one should I select?

[net]

badawi,

You can just ask your datacenter to flush the iptables and they can do this in seconds.

[badawi]

Thank you very much guys, I did ask them to stop APF till I fix this mess and they did. Thank you very much.