[BlueOnyx:12006] Re: Blocked IP - locked myself out

[Larry Smith]

On Tue January 15 2013 18:38, Brian wrote:
> I am following up on this problem. It turns out, the server blocks my IP
> every day. Here is my process.
>
> --------------clear iptables-------------------
> iptables --list (I get pages and pages of rules - one includes my IP
> address)
> iptables --flush (temporary clear of rules)
> service iptables save (saves blank rules to /etc/sysconfig/iptables )
> service iptables stop
> service iptables start
> iptables --list (check rules again after restart and everything is blank -
> good to go)
>
> I can connect to sites, ftp, etc.
>
> Next Day - IP is blocked again.  I have to disconnect from the network,
> setup my cell as a wi-fi hotspot. Connect to the cell wi-fi (to get an
> unblocked IP), run putty and clean the iptables again.
>
> Next Day - Blocked again.
> How are old rules getting reloaded?

Definitely sounds like something getting run as part of the daily routines
(/etc/cron.daily).  What are your pam_abl settings?
You might check /etc/cron.daily to see what files are there and verify
what each is doing...

-- 
Larry Smith
lesmith at ecsis.net