firewall check

Discussion in 'Installation/Configuration' started by Peterwebdev, Jun 7, 2018.

  1. Peterwebdev

    Peterwebdev New Member

    in the control panel i added a rule with all the ports i need and press save.
    How do i check in the cli to if the service is active or is its blocking all ports other then the ones i enable

    Also is there any command i need to run after adding or removing ports from the ispconfig panel?


    ##### PORT CHECK #####

    [WARN] Port 8080 (ISPConfig) seems NOT to be listening
    [WARN] Port 143 (IMAP server) seems NOT to be listening
    [WARN] Port 993 (IMAP server SSL) seems NOT to be listening
    [WARN] Port 110 (POP3 server) seems NOT to be listening
    [WARN] Port 995 (POP3 server SSL) seems NOT to be listening
    [WARN] Port 21 (FTP server) seems NOT to be listening
    [WARN] Port 22 (SSH server) seems NOT to be listening


    22 and 8080 i changed the default already so didn't enable those port but i tried to enable 20,21 but its appearing not to be listing i will need to open Port 993 for ssl right, would this be for udp or tcp?
     
    Last edited: Jun 7, 2018
  2. Stephan Ververda

    Stephan Ververda Member HowtoForge Supporter

    Depends on what firewall you are running ofc.. but most likely:
    Code:
    iptables -L -v
    or
    Code:
    ufw -v
    will do the trick

    I think, but i'm not sure right now, for using the ispconfig panel to configure firewall rules you need to have UFW installed and enabled.
    UFW by default blocks everything unless specifically enabled, iptables by default allows everything unless specifically blocked.
     
    Last edited: Jun 7, 2018
  3. Peterwebdev

    Peterwebdev New Member

    To Action From
    -- ------ ----
    3306/udp ALLOW IN Anywhere
    20/tcp ALLOW IN Anywhere
    21/tcp ALLOW IN Anywhere
    40110:40210/tcp ALLOW IN Anywhere
    custom/tcp ALLOW IN Anywhere
    80/tcp ALLOW IN Anywhere
    443/tcp ALLOW IN Anywhere
    custom/tcp ALLOW IN Anywhere
    194/tcp ALLOW IN Anywhere
    993/tcp ALLOW IN Anywhere
    3306/udp (v6) ALLOW IN Anywhere (v6)
    20/tcp (v6) ALLOW IN Anywhere (v6)
    21/tcp (v6) ALLOW IN Anywhere (v6)
    40110:40210/tcp (v6) ALLOW IN Anywhere (v6)
    custom/tcp (v6) ALLOW IN Anywhere (v6)
    80/tcp (v6) ALLOW IN Anywhere (v6)
    443/tcp (v6) ALLOW IN Anywhere (v6)
    custom/tcp (v6) ALLOW IN Anywhere (v6)
    194/tcp (v6) ALLOW IN Anywhere (v6)
    993/tcp (v6) ALLOW IN Anywhere (v6)



    this is the rules i got not sure why there is duplicates for what is v6? but yeh my ftp is still not working ispconfig monitor is showing it and imap is offline i am not sure where to start from here

    is
    VServer-Server
    XMPP Server
    dns needed for those service? i have disable them since im using digitalocean's nameservers
     
  4. Stephan Ververda

    Stephan Ververda Member HowtoForge Supporter

    v6 is standing for IPv6, so that's why you see everything duplicated. Once for IPv4 and once for IPv6.
    So basically it's not the firewall on your ISPconfig server. Is the server perhaps behind another firewall? (networklevel, router etc?). Can you actually ping the server, both on ip and dns name?

    Where is that ###PORT CHECK coming from that you posted first?
     

Share This Page