<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Title" content="">
<meta name="Keywords" content="">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.msoIns
{mso-style-type:export-only;
mso-style-name:"";
text-decoration:underline;
color:teal;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:595.0pt 842.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body bgcolor="white" lang="EN-GB" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt">OK, I have the culprit, it is APF firewall, I stopped it and now I can access the site again, the next steps now would be to find out what went wrong and why it was blocking all traffic.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Any help would be appreciated, although this is now a very low priority as I have access again without the firewall running (although it is only a test server, I still want to work out what happened in case
I get the same issue on a production server).<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Regards<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Brian<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="color:black">From: </span></b><span style="color:black">Blueonyx <blueonyx-bounces@mail.blueonyx.it> on behalf of Fungal Style <wayin@hotmail.com><br>
<b>Reply-To: </b>BlueOnyx General Mailing List <blueonyx@mail.blueonyx.it><br>
<b>Date: </b>Wednesday, 9 August 2017 at 8:37 am<br>
<b>To: </b>"Blueonyx@mail.blueonyx.it" <Blueonyx@mail.blueonyx.it><br>
<b>Subject: </b>[BlueOnyx:21245] Fail2ban and/or dfix2 or something else is blocking me?</span><span style="color:black;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><span lang="EN-AU" style="font-size:11.0pt">Hi all,</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-AU" style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-AU" style="font-size:11.0pt">Just had a bit of a late night and just as I was going to sleep I lost connectivity to the server.</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-AU" style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-AU" style="font-size:11.0pt">I was doing some work on a content management system which may or may not be relevant, but it was likely to be intensive on the disk access as it was deleting around 50 photo images.</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-AU" style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-AU" style="font-size:11.0pt">I did gen an email:</span><o:p></o:p></p>
<p class="MsoNormal"><b><i><span style="font-size:11.0pt">Active Monitor has detected recent changes in the state of your server appliance.</span></i></b><o:p></o:p></p>
<p class="MsoNormal"><b><i><span style="font-size:11.0pt">For more details, please see the Active Monitor section of the Server Desktop.</span></i></b><o:p></o:p></p>
<p class="MsoNormal"><b><i><span style="font-size:11.0pt"> </span></i></b><o:p></o:p></p>
<p class="MsoNormal"><b><i><span style="font-size:11.0pt">Summary of changes:</span></i></b><o:p></o:p></p>
<p class="MsoNormal"><b><i><span style="font-size:11.0pt"> </span></i></b><o:p></o:p></p>
<p class="MsoNormal"><b><i><span style="font-size:11.0pt">* Fail2ban is not running and could not be restarted. Please try to restart the service fail2ban manually.</span></i></b><o:p></o:p></p>
<p class="MsoNormal"><b><i><span style="font-size:11.0pt"> </span></i></b><o:p></o:p></p>
<p class="MsoNormal"><b><i><span style="font-size:11.0pt">* The AV-SPAM services are not working correctly. This might interfere with email delivery. Please restart the related services manually.</span></i></b><o:p></o:p></p>
<p class="MsoNormal"><b><i><span style="font-size:11.0pt">- The SpamAssassin services 'spamassassin' and/or 'spamass-milter' are not running and could not be restarted. Please restart this services manually.</span></i></b><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-AU" style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-AU" style="font-size:11.0pt">So currently I cannot ping, log in via the web portal, access any site on the server from my normal IP address. I have tested from a remote IP and I believe I was able to access a web site for
a few moments then I was getting time out messages in the browsers.</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-AU" style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-AU" style="font-size:11.0pt">I tried a restart of the server (I was putting that off, but I only had console access) as it could ping out and nothing could ping in. When restarting, if I am pinging it from a remote server
I get 5 ping responses during restart, prior to restart and after restart all pings are block, it would appear all inbound traffic is blocked.</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-AU" style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-AU" style="font-size:11.0pt">I would like to know how to trouble shoot this further, possibly what logs to check? To see if I can find out if it is fail2ban or something else blocking me.
</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-AU" style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-AU" style="font-size:11.0pt">Server is running 5209R and I have not made any known changes in the last weeks.</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-AU" style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-AU" style="font-size:11.0pt">Regards</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-AU" style="font-size:11.0pt">Brian</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-GB">_______________________________________________ Blueonyx mailing list Blueonyx@mail.blueonyx.it http://mail.blueonyx.it/mailman/listinfo/blueonyx
<o:p></o:p></span></p>
</div>
</body>
</html>