OK, I have the culprit, it is APF firewall, I stopped it and now I can access 
the site again, the next steps now would be to find out what went wrong and why 
it was blocking all traffic.

Any help would be appreciated, although this is now a very low priority as I 
have access again without the firewall running (although it is only a test 
server, I still want to work out what happened in case I get the same issue on  
a production server).


From: Blueonyx <blueonyx-boun...@mail.blueonyx.it> on behalf of Fungal Style 
Reply-To: BlueOnyx General Mailing List <blueonyx@mail.blueonyx.it>
Date: Wednesday, 9 August 2017 at 8:37 am
To: "Blueonyx@mail.blueonyx.it" <Blueonyx@mail.blueonyx.it>
Subject: [BlueOnyx:21245] Fail2ban and/or dfix2 or something else is blocking 

Hi all,

Just had a bit of a late night and just as I was going to sleep I lost 
connectivity to the server.

I was doing some work on a content management system which may or may not be 
relevant, but it was likely to be intensive on the disk access as it was 
deleting around 50 photo images.

I did gen an email:
Active Monitor has detected recent changes in the state of your server 
For more details, please see the Active Monitor section of the Server Desktop.

Summary of changes:

* Fail2ban is not running and could not be restarted. Please try to restart the 
service fail2ban manually.

* The AV-SPAM services are not working correctly. This might interfere with 
email delivery. Please restart the related services manually.
- The SpamAssassin services 'spamassassin' and/or 'spamass-milter' are not 
running and could not be restarted. Please restart this services manually.

So currently I cannot ping, log in via the web portal, access any site on the 
server from my normal IP address. I have tested from a remote IP and I believe 
I was able to access a web site for a few moments then I was getting time out 
messages in the browsers.

I tried a restart of the server (I was putting that off, but I only had console 
access) as it could ping out and nothing could ping in. When restarting, if I 
am pinging it from a remote server I get 5 ping responses during restart, prior 
to restart and after restart all pings are block, it would appear all inbound 
traffic is blocked.

I would like to know how to trouble shoot this further, possibly what logs to 
check? To see if I can find out if it is fail2ban or something else blocking me.

Server is running 5209R and I have not made any known changes in the last weeks.

_______________________________________________ Blueonyx mailing list 
Blueonyx@mail.blueonyx.it http://mail.blueonyx.it/mailman/listinfo/blueonyx
Blueonyx mailing list

Reply via email to