all websites unreachable!!!

Discussion in 'ISPConfig 3 Priority Support' started by stst, Oct 3, 2024 at 10:27 AM.

  1. stst

    stst Member HowtoForge Supporter

    Hi,

    I updated Linux (Ubuntu 22.04) today (including PHP updates and python update)
    Now I can only reach ISPConfig site on port 8080. All Websites are not accessable.

    apache service is running, but access logs show nothing
    apache error logs has some warnings about certificates, but they were there before

    Any ideas?
    What information do you need?
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    Did you do an update or have you made a dist-upgrade? And which exact error do you get in the browser when you access the sites?
     
  3. stst

    stst Member HowtoForge Supporter

    not a dis-upgrade, just a simple apt upgrade, as I do it once a month.

    Error: Timeout, Website takes to long to answer

    I even can't telnet to port 80 or 443
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

  5. stst

    stst Member HowtoForge Supporter

    ##### SERVER #####
    IP-address (as per hostname): ***.***.***.***
    [WARN] could not determine server's ip address by ifconfig
    [INFO] OS version is Ubuntu 22.04.5 LTS

    [INFO] uptime: 09:03:39 up 59 min, 2 users, load average: 0.27, 0.36, 0.35

    [INFO] memory:
    total used free shared buff/cache available
    Mem: 15Gi 9.0Gi 1.9Gi 353Mi 4.3Gi 5.5Gi
    Swap: 8.0Gi 0B 8.0Gi

    [INFO] systemd failed services status:
    UNIT LOAD ACTIVE SUB DESCRIPTION
    0 loaded units listed.

    [INFO] ISPConfig is installed.

    ##### ISPCONFIG #####
    ISPConfig version is 3.2.12p1


    ##### VERSION CHECK #####

    [INFO] php (cli) version is 8.3.12
    [INFO] php-cgi (used for cgi php in default vhost!) is version 8.2.24

    ##### PORT CHECK #####


    ##### MAIL SERVER CHECK #####


    ##### RUNNING SERVER PROCESSES #####

    [INFO] I found the following web server(s):
    Apache 2 (PID 1567)
    [INFO] I found the following mail server(s):
    Postfix (PID 2208)
    [INFO] I found the following pop3 server(s):
    Dovecot (PID 457)
    [INFO] I found the following imap server(s):
    Dovecot (PID 457)
    [INFO] I found the following ftp server(s):
    PureFTP (PID 1797)

    ##### LISTENING PORTS #####
    (only ()
    Local (Address)
    ***.***.***.***:53 (816/named)
    ***.***.***.***:53 (816/named)
    ***.***.***.***:53 (816/named)
    ***.***.***.***:53 (816/named)
    [anywhere]:995 (457/dovecot)
    [anywhere]:993 (457/dovecot)
    [anywhere]:587 (2208/master)
    [anywhere]:465 (2208/master)
    [anywhere]:111 (1/init)
    [anywhere]:110 (457/dovecot)
    [anywhere]:25 (2208/master)
    [anywhere]:22 (913/sshd:)
    [anywhere]:21 (1797/pure-ftpd)
    [localhost]:11211 (466/memcached)
    [anywhere]:143 (457/dovecot)
    [localhost]:10023 (1233/postgrey)
    [localhost]:10026 (1158/amavisd-new)
    [localhost]:10027 (2208/master)
    [localhost]:10024 (1158/amavisd-new)
    [localhost]:10025 (2208/master)
    [anywhere]:3306 (1281/mariadbd)
    ***.***.***.***:53 (414/systemd-resolve)
    [localhost]:53 (816/named)
    [localhost]:53 (816/named)
    [localhost]:53 (816/named)
    [localhost]:53 (816/named)
    ***.***.***.***:53333 (7341/pure-ftpd)
    [localhost]:953 (816/named)
    [localhost]:953 (816/named)
    [localhost]:953 (816/named)
    [localhost]:953 (816/named)
    *:*:*:*::*:8081 (1567/apache2)
    *:*:*:*::*:8080 (1567/apache2)
    *:*:*:*::*:995 (457/dovecot)
    *:*:*:*::*:993 (457/dovecot)
    *:*:*:*::*:587 (2208/master)
    *:*:*:*::**:*:*:*::*53 (816/named)
    *:*:*:*::**:*:*:*::*53 (816/named)
    *:*:*:*::**:*:*:*::*53 (816/named)
    *:*:*:*::**:*:*:*::*53 (816/named)
    *:*:*:*::*:465 (2208/master)
    *:*:*:*::*:443 (1567/apache2)
    *:*:*:*::*:80 (1567/apache2)
    [localhost]11 (1/init)
    [localhost]10 (457/dovecot)
    *:*:*:*::*:25 (2208/master)
    *:*:*:*::*:22 (913/sshd:)
    *:*:*:*::*:21 (1797/pure-ftpd)
    [localhost]43 (457/dovecot)
    *:*:*:*::*:953 (816/named)
    *:*:*:*::*:953 (816/named)
    *:*:*:*::*:953 (816/named)
    *:*:*:*::*:953 (816/named)
    *:*:*:*::*:53 (816/named)
    *:*:*:*::*:53 (816/named)
    *:*:*:*::*:53 (816/named)
    *:*:*:*::*:53 (816/named)
    *:*:*:*::*:3306 (1281/mariadbd)
    *:*:*:*::*:10024 (1158/amavisd-new)
    *:*:*:*::*:10026 (1158/amavisd-new)




    ##### IPTABLES #####
    Chain INPUT (policy ACCEPT)
    target prot opt source destination
    f2b-postfix tcp -- [anywhere]/0 [anywhere]/0 multiport dports 25
    f2b-postfix-sasl tcp -- [anywhere]/0 [anywhere]/0 multiport dports 25
    f2b-dovecot-pop3imap tcp -- [anywhere]/0 [anywhere]/0 multiport dports 110,995,143,993

    Chain FORWARD (policy ACCEPT)
    target prot opt source destination

    Chain OUTPUT (policy ACCEPT)
    target prot opt source destination

    Chain f2b-dovecot-pop3imap (1 references)
    target prot opt source destination
    RETURN all -- [anywhere]/0 [anywhere]/0

    Chain f2b-postfix (1 references)
    target prot opt source destination
    RETURN all -- [anywhere]/0 [anywhere]/0

    Chain f2b-postfix-sasl (1 references)
    target prot opt source destination
    REJECT all -- ***.***.***.*** [anywhere]/0 reject-with icmp-port-unreachable
    RETURN all -- [anywhere]/0 [anywhere]/0




    ##### LET'S ENCRYPT #####
    Certbot is installed in /usr/bin/letsencrypt
     
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    Apache seems to be running fine. Is it possible that you blocked port 80 or 443 in a firewall or router on or in front of the server?
     
  7. stst

    stst Member HowtoForge Supporter

    thanks, meanwhile it's also my guess, that aws blocked these ports for my IP, but I still don't know how to get rid of that...

    Thanks for your help.
     
  8. nhybgtvfr

    nhybgtvfr Well-Known Member HowtoForge Supporter

    aws would not just suddenly block ports without sending you a notice.

    was ufw enabled before? did that allow ports 80 and 443? possibly it wasn't running before and now is, and that's blocking you.

    do all the sites uses php? do you have any plain html sites?
    possibly apache isn't properly passing stuff over to php.. it's rare. but i've seen it happen sometimes when services are restarted repeatedly.. easy test is to see if you can access a plain html site.. if you can.. then just try restarting the php-fpm services.
     
  9. stst

    stst Member HowtoForge Supporter

    found the problem, it was not aws, blocking my IP, but my Fortigate. Somehow the IP seems to be on a blacklist...
     
    till likes this.
  10. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    The test script showed
    Code:
    ##### VERSION CHECK #####
    
    [INFO] php (cli) version is 8.3.12
    [INFO] php-cgi (used for cgi php in default vhost!) is version 8.2.24
    
    Those should be: Ubuntu 22.04: PHP 8.1
     

Share This Page