Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #261527

Re: Debian 12 - IPv4 blocked without fail2ban & co

From Romain <romain@borezo.info>
Newsgroups linux.debian.user
Subject Re: Debian 12 - IPv4 blocked without fail2ban & co
Date 2023-09-06 11:10 +0200
Message-ID <HaWHT-74oV-5@gated-at.bofh.it> (permalink)
References <HaUG6-72RC-5@gated-at.bofh.it> <HaWye-742q-5@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


[Multipart message — attachments visible in raw view] - view raw

>
> So when this is happening mtr works but http, ssh and ping don't?

Yes

If you run tcpdump on the server, do your http/ssh packets even
> reach it?

I wasn't seeing any request coming from my IP last time I checked. I'll
re-check.

If you do tcptraceroute on port 22/80/443 from your home, how far
> does it get?

Will test it next time it's blocked.

Are there any firewall rules in place on your server?

No (no fail2ban, ...).

DO you have access to any other host so you can tell if it is just
> your home IP that has problems?

Yes, I have multiple servers (in OVH and outside OVH) that can all reach
the server on IPv4. Same if I switch to my 5G connection, it works. Only my
home's main IPv4 is blocked. IPv6 is OK.
I was even able to ask people using the same ISP to confirm, they can reach
the IPv4 of my server.

Le mer. 6 sept. 2023 à 10:55, Andy Smith <andy@strugglers.net> a écrit :

> Hi,
>
> On Wed, Sep 06, 2023 at 08:39:55AM +0200, Romain wrote:
> > When my IP is blocked, curl returns a "Connection refused," and ping
> > returns "Destination Port Unreachable."
> >
> > I couldn't find any mentions of my IPv4 address in the server logs. MTR
> > (-4) doesn't report any issues reaching the server.
>
> So when this is happening mtr works but http, ssh and ping don't?
>
> If you run tcpdump on the server, do your http/ssh packets even
> reach it?
>
> If you do tcptraceroute on port 22/80/443 from your home, how far
> does it get?
>
> Are there any firewall rules in place on your server?
>
> DO you have access to any other host so you can tell if it is just
> your home IP that has problems?
>
> Cheers,
> Andy
>
> --
> https://bitfolk.com/ -- No-nonsense VPS hosting
>
>

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Debian 12 - IPv4 blocked without fail2ban & co Romain <romain@borezo.info> - 2023-09-06 09:00 +0200
  Re: Debian 12 - IPv4 blocked without fail2ban & co Romain <romain@borezo.info> - 2023-09-06 10:50 +0200
  Re: Debian 12 - IPv4 blocked without fail2ban & co Michel Verdier <mv524@free.fr> - 2023-09-06 10:50 +0200
  Re: Debian 12 - IPv4 blocked without fail2ban & co Andy Smith <andy@strugglers.net> - 2023-09-06 11:00 +0200
    Re: Debian 12 - IPv4 blocked without fail2ban & co Romain <romain@borezo.info> - 2023-09-06 11:10 +0200
      Re: Debian 12 - IPv4 blocked without fail2ban & co Andy Smith <andy@strugglers.net> - 2023-09-06 15:30 +0200
        Re: Debian 12 - IPv4 blocked without fail2ban & co Romain <romain@borezo.info> - 2023-09-06 15:40 +0200
          Re: Debian 12 - IPv4 blocked without fail2ban & co Paul van der Vlis <paul@vandervlis.nl> - 2023-09-07 10:00 +0200
            Re: Debian 12 - IPv4 blocked without fail2ban & co Romain <romain@borezo.info> - 2023-09-07 10:40 +0200
  Re: Debian 12 - IPv4 blocked without fail2ban & co Romain <romain@borezo.info> - 2023-09-07 09:40 +0200
    Re: Debian 12 - IPv4 blocked without fail2ban & co Max Nikulin <manikulin@gmail.com> - 2023-09-07 12:20 +0200
      Re: Debian 12 - IPv4 blocked without fail2ban & co Romain <romain@borezo.info> - 2023-09-07 12:30 +0200
        Re: Debian 12 - IPv4 blocked without fail2ban & co Andy Smith <andy@strugglers.net> - 2023-09-07 12:40 +0200
          Re: Debian 12 - IPv4 blocked without fail2ban & co Max Nikulin <manikulin@gmail.com> - 2023-09-07 13:00 +0200
            Re: Debian 12 - IPv4 blocked without fail2ban & co zithro <slack@rabbit.lu> - 2023-09-07 14:20 +0200
              Re: Debian 12 - IPv4 blocked without fail2ban & co Romain <romain@borezo.info> - 2023-09-07 23:50 +0200
                Re: Debian 12 - IPv4 blocked without fail2ban & co Max Nikulin <manikulin@gmail.com> - 2023-09-09 05:00 +0200
                Re: Debian 12 - IPv4 blocked without fail2ban & co Timothy M Butterworth <timothy.m.butterworth@gmail.com> - 2023-09-09 06:50 +0200
                Re: Debian 12 - IPv4 blocked without fail2ban & co Romain <romain@borezo.info> - 2023-09-09 10:40 +0200

csiph-web