The Perfect Server Debian 11 (Nginx, BIND, Dovecot, ISPConfig 3.2) DNS Problem

Discussion in 'General' started by tbctr, Jan 31, 2023.

Tags:
  1. tbctr

    tbctr Member

    The Perfect Server Debian 11 (Nginx, BIND, Dovecot, ISPConfig 3.2) install no problem. Two domain add ispconfig.
    basketbolvideo.com and koyuncuspor.com
    basketbolvideo.com dns no problem check intodns.com but website no open.
    koyuncuspor.com dns error check intodns.com
    i check dns settings of both sites same configuration.
    I am checking the files in the folder /etc/bind/
    bind.keys db.local named.conf.options~ slave
    db.0 named.conf pri.basketbolvideo.com zones.rfc1918
    db.127 named.conf.default-zones pri.koyuncuspor.com
    db.255 named.conf.local pri.koyuncuspor.com.err
    db.empty named.conf.options rndc.key
    I couldn't understand why it happened pri.koyuncuspor.com.err
    pri.koyuncuspor.com.err content
    Code:
    $TTL        3600
    @       IN      SOA     ns1.koyuncuspor.com. onur.siberpc.com. (
                            2023013104       ; serial, todays date + todays serial #
                            7200              ; refresh, seconds
                            540              ; retry, seconds
                            604800              ; expire, seconds
                            3600 )            ; minimum, seconds
    ;
    
    koyuncuspor.com. 3600      A          217.131.34.248
    mail 3600      A          217.131.34.248
    koyuncuspor.com. 3600      NS         ns1.koyuncuspor.com.
    koyuncuspor.com. 3600      NS         ns2.koyuncuspor.com.
    koyuncuspor.com. 3600      MX     10  mail.koyuncuspor.com.
    koyuncuspor.com. 3600      TXT        "v=spf1 mx a ~all"
    koyuncuspor.com. 3600      CAA        0 issue "letsencrypt.org"
    www.koyuncuspor.com 3600      CNAME      koyuncuspor.com
    www 3600      A          217.131.34.248
    The strange thing is that the website does not even open even though the settings are correct basketbolvideo.com
    I couldn't solve the dns settings on this site giving an error koyuncuspor.com.
    How can I solve these two problems? Can you help me ?
    pri.basketbolvideo.com content
    Code:
    $TTL        3600
    @       IN      SOA     ns1.koyuncuspor.com. onur.siberpc.com. (
                            2023013105       ; serial, todays date + todays serial #
                            7200              ; refresh, seconds
                            540              ; retry, seconds
                            604800              ; expire, seconds
                            3600 )            ; minimum, seconds
    ;
    
    basketbolvideo.com. 3600      A          217.131.34.248
    mail 3600      A          217.131.34.248
    basketbolvideo.com. 3600      NS         ns1.koyuncuspor.com.
    basketbolvideo.com. 3600      NS         ns2.koyuncuspor.com.
    basketbolvideo.com. 3600      MX     10  mail.basketbolvideo.com.
    basketbolvideo.com. 3600      TXT        "v=spf1 mx a ~all"
    basketbolvideo.com. 3600      CAA        0 issue "letsencrypt.org"
    www.basketbolvideo.com 3600      CNAME      basketbolvideo.com
    www 3600      A          217.131.34.248
    
     
  2. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    till likes this.
  3. till

    till Super Moderator Staff Member ISPConfig Developer

    The zone koyuncuspor.com seems to lack A-Records for the ns1 and ns2 subdomains. When NS records of a zone point to subdomains of the same zone, then these subdomains must exist as A records as well. See the tutorial from @Taleman.
     
  4. tbctr

    tbctr Member

    no autoinstaller. Manuel install : https://www.howtoforge.com/perfect-server-debian-10-nginx-bind-dovecot-ispconfig-3.1/
    hostname
    hostname -f ...
    sunucu
    sunucu.koyuncuspor.com
    Local network access website ispconfig panel vs no problem.
     
  5. tbctr

    tbctr Member

    DNS A
    Hostname : ns1.koyuncuspor.com
    IP-Address: 217.131.34.248
    TTL : 3600
    DNS A
    Hostname : ns2.koyuncuspor.com
    IP-Address: 217.131.34.248
    TTL : 3600
    I added these to both fields. Not fixed two problems.
    pri.basketbolvideo.com content

    Code:
    $TTL        3600
    @       IN      SOA     ns1.koyuncuspor.com. onur.siberpc.com. (
                            2023020101       ; serial, todays date + todays serial #
                            7200              ; refresh, seconds
                            540              ; retry, seconds
                            604800              ; expire, seconds
                            3600 )            ; minimum, seconds
    ;
    
    basketbolvideo.com. 3600      A          217.131.34.248
    mail 3600      A          217.131.34.248
    basketbolvideo.com. 3600      NS         ns1.koyuncuspor.com.
    basketbolvideo.com. 3600      NS         ns2.koyuncuspor.com.
    basketbolvideo.com. 3600      MX     10  mail.basketbolvideo.com.
    basketbolvideo.com. 3600      TXT        "v=spf1 mx a ~all"
    basketbolvideo.com. 3600      CAA        0 issue "letsencrypt.org"
    www.basketbolvideo.com 3600      CNAME      basketbolvideo.com
    www 3600      A          217.131.34.248
    ns1.koyuncuspor.com 3600      A          217.131.34.248
    ns2.koyuncuspor.com 3600      A          217.131.34.248
    
    pri.koyuncuspor.com.err content
    Code:
    $TTL        3600
    @       IN      SOA     ns1.koyuncuspor.com. onur.siberpc.com. (
                            2023020102       ; serial, todays date + todays serial #
                            7200              ; refresh, seconds
                            540              ; retry, seconds
                            604800              ; expire, seconds
                            3600 )            ; minimum, seconds
    ;
    
    koyuncuspor.com. 3600      A          217.131.34.248
    mail 3600      A          217.131.34.248
    koyuncuspor.com. 3600      NS         ns1.koyuncuspor.com.
    koyuncuspor.com. 3600      NS         ns2.koyuncuspor.com.
    koyuncuspor.com. 3600      MX     10  mail.koyuncuspor.com.
    koyuncuspor.com. 3600      TXT        "v=spf1 mx a ~all"
    koyuncuspor.com. 3600      CAA        0 issue "letsencrypt.org"
    www.koyuncuspor.com 3600      CNAME      koyuncuspor.com
    www 3600      A          217.131.34.248
    ns1.koyuncuspor.com 3600      A          217.131.34.248
    ns2.koyuncuspor.com 3600      A          217.131.34.248
    
    Why does it open an err file? I couldn't figure it out either.
     
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    You missed adding two dots. any fully qualified domain name in BIND DNS must end with a dot.

    wrong:

    ns1.koyuncuspor.com 3600 A 217.131.34.248
    ns2.koyuncuspor.com 3600 A 217.131.34.248

    correct:

    ns1.koyuncuspor.com. 3600 A 217.131.34.248
    ns2.koyuncuspor.com. 3600 A 217.131.34.248

    also correct:

    ns1 3600 A 217.131.34.248
    ns2 3600 A 217.131.34.248
     
    ahrasis and tbctr like this.
  7. tbctr

    tbctr Member

    Thanks your support till. I corrected the values as you said.
    Dns problems solved. Websites not opening yet, let's take some time and see what happens.

    I also have a problem with backup. ispconfig log error : Failed to make backup of type mysql for domain id 1, because failed to mount backup directory.
    I tried some solutions but couldn't fix it
     
    Last edited: Feb 1, 2023
  8. tbctr

    tbctr Member

    Still not showing on both websites.
    System Messages - Log (Server : sunucu.koyuncuspor.com) content

    Code:
    Feb  1 10:44:08 sunucu kernel: [28333.835990] [UFW BLOCK] IN=enp8s0 OUT= MAC=d8:50:e6:c2:94:f7:48:2c:d0:60:88:f3:08:00 SRC=198.235.24.56 DST=192.168.1.200 LEN=44 TOS=0x00 PREC=0x00 TTL=250 ID=15440 PROTO=TCP SPT=51287 DPT=389 WINDOW=1024 RES=0x00 SYN URGP=0
    Feb  1 10:44:30 sunucu kernel: [28355.858510] [UFW BLOCK] IN=enp8s0 OUT= MAC=d8:50:e6:c2:94:f7:48:2c:d0:60:88:f3:08:00 SRC=192.241.236.37 DST=192.168.1.200 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=54321 PROTO=TCP SPT=39657 DPT=7001 WINDOW=65535 RES=0x00 SYN URGP=0
    Feb  1 10:45:01 sunucu CRON[25587]: (root) CMD (/usr/local/ispconfig/server/server.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
    Feb  1 10:45:01 sunucu CRON[25588]: (getmail) CMD (/usr/local/bin/run-getmail.sh > /dev/null 2>> /dev/null)
    Feb  1 10:45:01 sunucu CRON[25589]: (root) CMD (/usr/local/ispconfig/server/cron.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
    Feb  1 10:45:02 sunucu dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=::1, lip=::1, secured, session=<vKw9oJ7zGocAAAAAAAAAAAAAAAAAAAAB>
    Feb  1 10:45:02 sunucu dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=::1, lip=::1, secured, session=<aK49oJ7zUtAAAAAAAAAAAAAAAAAAAAAB>
    Feb  1 10:45:02 sunucu postfix/submission/smtpd[25689]: connect from localhost[::1]
    Feb  1 10:45:02 sunucu postfix/submission/smtpd[25689]: lost connection after CONNECT from localhost[::1]
    Feb  1 10:45:02 sunucu postfix/submission/smtpd[25689]: disconnect from localhost[::1] commands=0/0
    Feb  1 10:45:04 sunucu kernel: [28389.650594] [UFW BLOCK] IN=enp8s0 OUT= MAC=01:00:5e:00:00:01:48:2c:d0:60:88:f5:08:00 SRC=100.119.244.21 DST=224.0.0.1 LEN=28 TOS=0x00 PREC=0x00 TTL=1 ID=2038 PROTO=2
    Feb  1 10:45:53 sunucu kernel: [28439.009064] [UFW BLOCK] IN=enp8s0 OUT= MAC=d8:50:e6:c2:94:f7:48:2c:d0:60:88:f3:08:00 SRC=39.89.106.22 DST=192.168.1.200 LEN=40 TOS=0x00 PREC=0x00 TTL=44 ID=46296 PROTO=TCP SPT=33091 DPT=23 WINDOW=38060 RES=0x00 SYN URGP=0
    Feb  1 10:46:00 sunucu kernel: [28445.302560] [UFW BLOCK] IN=enp8s0 OUT= MAC=d8:50:e6:c2:94:f7:48:2c:d0:60:88:f3:08:00 SRC=49.89.143.233 DST=192.168.1.200 LEN=40 TOS=0x00 PREC=0x00 TTL=46 ID=46866 PROTO=TCP SPT=49513 DPT=23 WINDOW=58697 RES=0x00 SYN URGP=0
    Feb  1 10:46:01 sunucu CRON[25712]: (root) CMD (/usr/local/ispconfig/server/cron.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
    Feb  1 10:46:01 sunucu CRON[25713]: (root) CMD (/usr/local/ispconfig/server/server.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
    Feb  1 10:46:08 sunucu kernel: [28453.650272] [UFW BLOCK] IN=enp8s0 OUT= MAC=d8:50:e6:c2:94:f7:48:2c:d0:60:88:f3:08:00 SRC=45.148.121.63 DST=192.168.1.200 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=57815 PROTO=TCP SPT=57459 DPT=5555 WINDOW=1024 RES=0x00 SYN URGP=0
    Feb  1 10:46:16 sunucu kernel: [28461.987701] [UFW BLOCK] IN=enp8s0 OUT= MAC=d8:50:e6:c2:94:f7:48:2c:d0:60:88:f3:08:00 SRC=49.75.196.29 DST=192.168.1.200 LEN=40 TOS=0x00 PREC=0x00 TTL=44 ID=22346 PROTO=TCP SPT=58721 DPT=23 WINDOW=51273 RES=0x00 SYN URGP=0
    Feb  1 10:46:40 sunucu kernel: [28485.826529] [UFW BLOCK] IN=enp8s0 OUT= MAC=d8:50:e6:c2:94:f7:48:2c:d0:60:88:f3:08:00 SRC=218.78.26.29 DST=192.168.1.200 LEN=44 TOS=0x00 PREC=0x00 TTL=231 ID=49745 PROTO=TCP SPT=41117 DPT=12035 WINDOW=1024 RES=0x00 SYN URGP=0
    Feb  1 10:47:01 sunucu CRON[25736]: (root) CMD (/usr/local/ispconfig/server/cron.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
    Feb  1 10:47:01 sunucu CRON[25737]: (root) CMD (/usr/local/ispconfig/server/server.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
    Feb  1 10:47:09 sunucu kernel: [28514.619138] [UFW BLOCK] IN=enp8s0 OUT= MAC=01:00:5e:00:00:01:48:2c:d0:60:88:f5:08:00 SRC=100.119.244.21 DST=224.0.0.1 LEN=28 TOS=0x00 PREC=0x00 TTL=1 ID=2039 PROTO=2
    Feb  1 10:47:33 sunucu kernel: [28538.532434] [UFW BLOCK] IN=enp8s0 OUT= MAC=d8:50:e6:c2:94:f7:48:2c:d0:60:88:f3:08:00 SRC=182.240.199.94 DST=192.168.1.200 LEN=40 TOS=0x00 PREC=0x00 TTL=46 ID=23646 PROTO=TCP SPT=27133 DPT=23 WINDOW=24525 RES=0x00 SYN URGP=0
    Feb  1 10:47:38 sunucu kernel: [28543.361069] [UFW BLOCK] IN=enp8s0 OUT= MAC=d8:50:e6:c2:94:f7:48:2c:d0:60:88:f3:08:00 SRC=49.75.196.29 DST=192.168.1.200 LEN=40 TOS=0x00 PREC=0x00 TTL=44 ID=22346 PROTO=TCP SPT=58721 DPT=23 WINDOW=51273 RES=0x00 SYN URGP=0
    Feb  1 10:47:53 sunucu kernel: [28558.906410] [UFW BLOCK] IN=enp8s0 OUT= MAC=d8:50:e6:c2:94:f7:48:2c:d0:60:88:f3:08:00 SRC=45.148.121.63 DST=192.168.1.200 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=21803 PROTO=TCP SPT=57459 DPT=264 WINDOW=1024 RES=0x00 SYN URGP=0
    Feb  1 10:48:01 sunucu CRON[25793]: (root) CMD (/usr/local/ispconfig/server/server.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
    Feb  1 10:48:01 sunucu CRON[25794]: (root) CMD (/usr/local/ispconfig/server/cron.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
    Feb  1 10:48:12 sunucu kernel: [28578.186996] [UFW BLOCK] IN=enp8s0 OUT= MAC=d8:50:e6:c2:94:f7:48:2c:d0:60:88:f3:08:00 SRC=45.148.121.63 DST=192.168.1.200 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=20723 PROTO=TCP SPT=57459 DPT=1452 WINDOW=1024 RES=0x00 SYN URGP=0
    Feb  1 10:48:32 sunucu kernel: [28597.338234] [UFW BLOCK] IN=enp8s0 OUT= MAC=d8:50:e6:c2:94:f7:48:2c:d0:60:88:f3:08:00 SRC=89.248.165.109 DST=192.168.1.200 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=17954 PROTO=TCP SPT=49386 DPT=15182 WINDOW=1024 RES=0x00 SYN URGP=0
    Feb  1 10:49:01 sunucu CRON[25819]: (root) CMD (/usr/local/ispconfig/server/server.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
    Feb  1 10:49:01 sunucu CRON[25820]: (root) CMD (/usr/local/ispconfig/server/cron.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
    Feb  1 10:49:07 sunucu kernel: [28632.977328] [UFW BLOCK] IN=enp8s0 OUT= MAC=d8:50:e6:c2:94:f7:48:2c:d0:60:88:f3:08:00 SRC=121.239.78.19 DST=192.168.1.200 LEN=40 TOS=0x00 PREC=0x00 TTL=46 ID=45778 PROTO=TCP SPT=40051 DPT=60023 WINDOW=144 RES=0x00 SYN URGP=0
    Feb  1 10:49:14 sunucu kernel: [28639.587702] [UFW BLOCK] IN=enp8s0 OUT= MAC=01:00:5e:00:00:01:48:2c:d0:60:88:f5:08:00 SRC=100.119.244.21 DST=224.0.0.1 LEN=28 TOS=0x00 PREC=0x00 TTL=1 ID=2040 PROTO=2
    Feb  1 10:49:50 sunucu kernel: [28675.859094] [UFW BLOCK] IN=enp8s0 OUT= MAC=d8:50:e6:c2:94:f7:48:2c:d0:60:88:f3:08:00 SRC=49.89.143.233 DST=192.168.1.200 LEN=40 TOS=0x00 PREC=0x00 TTL=46 ID=46866 PROTO=TCP SPT=49513 DPT=23 WINDOW=58697 RES=0x00 SYN URGP=0
    Feb  1 10:49:52 sunucu kernel: [28677.640719] [UFW BLOCK] IN=enp8s0 OUT= MAC=d8:50:e6:c2:94:f7:48:2c:d0:60:88:f3:08:00 SRC=45.61.186.102 DST=192.168.1.200 LEN=44 TOS=0x00 PREC=0x00 TTL=235 ID=54321 PROTO=TCP SPT=33637 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0
    Feb  1 10:50:01 sunucu CRON[25854]: (root) CMD (/usr/local/ispconfig/server/server.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
    Feb  1 10:50:01 sunucu CRON[25855]: (getmail) CMD (/usr/local/bin/run-getmail.sh > /dev/null 2>> /dev/null)
    Feb  1 10:50:01 sunucu CRON[25856]: (root) CMD (/usr/local/ispconfig/server/cron.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
    Feb  1 10:50:02 sunucu dovecot: imap-login: Disconnected (disconnected before auth was ready, waited 0 secs): user=<>, rip=::1, lip=::1, secured, session=<k/Qgsp7zRIkAAAAAAAAAAAAAAAAAAAAB>
    Feb  1 10:50:02 sunucu dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=::1, lip=::1, secured, session=<Vikhsp7zsuoAAAAAAAAAAAAAAAAAAAAB>
    Feb  1 10:50:02 sunucu postfix/submission/smtpd[25950]: connect from localhost[::1]
    Feb  1 10:50:02 sunucu postfix/submission/smtpd[25950]: lost connection after CONNECT from localhost[::1]
    Feb  1 10:50:02 sunucu postfix/submission/smtpd[25950]: disconnect from localhost[::1] commands=0/0
    Feb  1 10:50:09 sunucu kernel: [28694.766706] [UFW BLOCK] IN=enp8s0 OUT= MAC=d8:50:e6:c2:94:f7:48:2c:d0:60:88:f3:08:00 SRC=45.93.16.71 DST=192.168.1.200 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=34644 PROTO=TCP SPT=52730 DPT=50802 WINDOW=1024 RES=0x00 SYN URGP=0
    Feb  1 10:50:43 sunucu kernel: [28728.297862] [UFW BLOCK] IN=enp8s0 OUT= MAC=d8:50:e6:c2:94:f7:48:2c:d0:60:88:f3:08:00 SRC=176.111.174.81 DST=192.168.1.200 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=16420 PROTO=TCP SPT=53836 DPT=6628 WINDOW=1024 RES=0x00 SYN URGP=0
    Feb  1 10:50:56 sunucu named[815]: client @0x7fe32c002ca0 93.113.174.225#64927 (adobe.com): query (cache) 'adobe.com/A/IN' denied
    Feb  1 10:50:56 sunucu named[815]: client @0x7fe2f40013a0 93.113.174.225#30629 (adobe.com): query (cache) 'adobe.com/A/IN' denied
    Feb  1 10:50:58 sunucu kernel: [28743.930009] [UFW BLOCK] IN=enp8s0 OUT= MAC=d8:50:e6:c2:94:f7:48:2c:d0:60:88:f3:08:00 SRC=185.156.73.171 DST=192.168.1.200 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=16593 PROTO=TCP SPT=42897 DPT=1144 WINDOW=1024 RES=0x00 SYN URGP=0
    Feb  1 10:51:01 sunucu CRON[25975]: (root) CMD (/usr/local/ispconfig/server/cron.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
    Feb  1 10:51:01 sunucu CRON[25976]: (root) CMD (/usr/local/ispconfig/server/server.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
    Feb  1 10:51:19 sunucu kernel: [28764.556159] [UFW BLOCK] IN=enp8s0 OUT= MAC=01:00:5e:00:00:01:48:2c:d0:60:88:f5:08:00 SRC=100.119.244.21 DST=224.0.0.1 LEN=28 TOS=0x00 PREC=0x00 TTL=1 ID=2041 PROTO=2
    Feb  1 10:51:30 sunucu kernel: [28775.657813] [UFW BLOCK] IN=enp8s0 OUT= MAC=d8:50:e6:c2:94:f7:48:2c:d0:60:88:f3:08:00 SRC=49.75.196.29 DST=192.168.1.200 LEN=40 TOS=0x00 PREC=0x00 TTL=44 ID=22346 PROTO=TCP SPT=58721 DPT=23 WINDOW=51273 RES=0x00 SYN URGP=0
    Feb  1 10:51:52 sunucu kernel: [28797.266940] [UFW BLOCK] IN=enp8s0 OUT= MAC=d8:50:e6:c2:94:f7:48:2c:d0:60:88:f3:08:00 SRC=45.148.121.63 DST=192.168.1.200 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=42931 PROTO=TCP SPT=57459 DPT=263 WINDOW=1024 RES=0x00 SYN URGP=0
    Feb  1 10:52:01 sunucu CRON[26011]: (root) CMD (/usr/local/ispconfig/server/server.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
    Feb  1 10:52:01 sunucu CRON[26012]: (root) CMD (/usr/local/ispconfig/server/cron.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
    Feb  1 10:52:12 sunucu kernel: [28817.344245] [UFW BLOCK] IN=enp8s0 OUT= MAC=d8:50:e6:c2:94:f7:48:2c:d0:60:88:f3:08:00 SRC=4.184.57.122 DST=192.168.1.200 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=16370 PROTO=TCP SPT=49602 DPT=82 WINDOW=1024 RES=0x00 SYN URGP=0
    Feb  1 10:52:34 sunucu kernel: [28839.762087] [UFW BLOCK] IN=enp8s0 OUT= MAC=d8:50:e6:c2:94:f7:48:2c:d0:60:88:f3:08:00 SRC=74.82.47.33 DST=192.168.1.200 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=54321 PROTO=TCP SPT=53438 DPT=2455 WINDOW=65535 RES=0x00 SYN URGP=0
    Feb  1 10:52:46 sunucu freshclam[805]: Wed Feb  1 10:52:46 2023 -> Received signal: wake up
    Feb  1 10:52:46 sunucu freshclam[805]: Wed Feb  1 10:52:46 2023 -> ClamAV update process started at Wed Feb  1 10:52:46 2023
    Feb  1 10:52:46 sunucu freshclam[805]: Wed Feb  1 10:52:46 2023 -> daily.cld database is up-to-date (version: 26798, sigs: 2018894, f-level: 90, builder: raynman)
    Feb  1 10:52:46 sunucu freshclam[805]: Wed Feb  1 10:52:46 2023 -> main.cvd database is up-to-date (version: 62, sigs: 6647427, f-level: 90, builder: sigmgr)
    Feb  1 10:52:46 sunucu freshclam[805]: Wed Feb  1 10:52:46 2023 -> bytecode.cvd database is up-to-date (version: 333, sigs: 92, f-level: 63, builder: awillia2)
    Feb  1 10:52:48 sunucu clamd[853]: Wed Feb  1 10:52:48 2023 -> SelfCheck: Database status OK.
    Feb  1 10:52:51 sunucu kernel: [28857.132505] [UFW BLOCK] IN=enp8s0 OUT= MAC=d8:50:e6:c2:94:f7:48:2c:d0:60:88:f3:08:00 SRC=45.148.121.63 DST=192.168.1.200 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=39595 PROTO=TCP SPT=57459 DPT=3555 WINDOW=1024 RES=0x00 SYN URGP=0
    Feb  1 10:53:01 sunucu CRON[26052]: (root) CMD (/usr/local/ispconfig/server/cron.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
    Feb  1 10:53:01 sunucu CRON[26053]: (root) CMD (/usr/local/ispconfig/server/server.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
    Feb  1 10:53:10 sunucu kernel: [28875.845648] [UFW BLOCK] IN=enp8s0 OUT= MAC=d8:50:e6:c2:94:f7:48:2c:d0:60:88:f3:08:00 SRC=185.156.73.171 DST=192.168.1.200 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=16593 PROTO=TCP SPT=42897 DPT=1144 WINDOW=1024 RES=0x00 SYN URGP=0
    Feb  1 10:53:39 sunucu kernel: [28905.133087] [UFW BLOCK] IN=enp8s0 OUT= MAC=d8:50:e6:c2:94:f7:48:2c:d0:60:88:f3:08:00 SRC=71.73.40.47 DST=192.168.1.200 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=38656 PROTO=TCP SPT=16994 DPT=23 WINDOW=26178 RES=0x00 SYN URGP=0
    Feb  1 10:53:49 sunucu kernel: [28915.107109] [UFW BLOCK] IN=enp8s0 OUT= MAC=d8:50:e6:c2:94:f7:48:2c:d0:60:88:f3:08:00 SRC=31.220.3.140 DST=192.168.1.200 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=54119 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0
    Feb  1 10:53:58 sunucu systemd[1]: Created slice User Slice of UID 0.
    Feb  1 10:53:58 sunucu systemd[1]: Starting User Runtime Directory /run/user/0...
    Feb  1 10:53:58 sunucu systemd[1]: Finished User Runtime Directory /run/user/0.
    Feb  1 10:53:58 sunucu systemd[1]: Starting User Manager for UID 0...
    Feb  1 10:53:58 sunucu systemd[26090]: Queued start job for default target Main User Target.
    Feb  1 10:53:58 sunucu systemd[26090]: Created slice User Application Slice.
    Feb  1 10:53:58 sunucu systemd[26090]: Reached target Paths.
    Feb  1 10:53:58 sunucu systemd[26090]: Reached target Timers.
    Feb  1 10:53:58 sunucu systemd[26090]: Listening on GnuPG network certificate management daemon.
    Feb  1 10:53:58 sunucu systemd[26090]: Listening on GnuPG cryptographic agent and passphrase cache (access for web browsers).
    Feb  1 10:53:58 sunucu systemd[26090]: Listening on GnuPG cryptographic agent and passphrase cache (restricted).
    Feb  1 10:53:58 sunucu systemd[26090]: Listening on GnuPG cryptographic agent (ssh-agent emulation).
    Feb  1 10:53:58 sunucu systemd[26090]: Listening on GnuPG cryptographic agent and passphrase cache.
    Feb  1 10:53:58 sunucu systemd[26090]: Reached target Sockets.
    Feb  1 10:53:58 sunucu systemd[26090]: Reached target Basic System.
    Feb  1 10:53:58 sunucu systemd[26090]: Reached target Main User Target.
    Feb  1 10:53:58 sunucu systemd[26090]: Startup finished in 95ms.
    Feb  1 10:53:58 sunucu systemd[1]: Started User Manager for UID 0.
    Feb  1 10:53:58 sunucu systemd[1]: Started Session 1094 of user root.
    Feb  1 10:54:01 sunucu CRON[26117]: (root) CMD (/usr/local/ispconfig/server/cron.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
    Feb  1 10:54:01 sunucu CRON[26118]: (root) CMD (/usr/local/ispconfig/server/server.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
    Feb  1 10:54:18 sunucu kernel: [28943.726035] [UFW BLOCK] IN=enp8s0 OUT= MAC=d8:50:e6:c2:94:f7:48:2c:d0:60:88:f3:08:00 SRC=45.148.121.63 DST=192.168.1.200 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=25131 PROTO=TCP SPT=57459 DPT=20105 WINDOW=1024 RES=0x00 SYN URGP=0
    Feb  1 10:54:40 sunucu kernel: [28965.830578] [UFW BLOCK] IN=enp8s0 OUT= MAC=d8:50:e6:c2:94:f7:48:2c:d0:60:88:f3:08:00 SRC=64.62.197.148 DST=192.168.1.200 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=54321 PROTO=TCP SPT=60878 DPT=4369 WINDOW=65535 RES=0x00 SYN URGP=0
    Feb  1 10:54:53 sunucu kernel: [28978.257711] [UFW BLOCK] IN=enp8s0 OUT= MAC=d8:50:e6:c2:94:f7:48:2c:d0:60:88:f3:08:00 SRC=192.241.210.26 DST=192.168.1.200 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=54321 PROTO=TCP SPT=49014 DPT=7077 WINDOW=65535 RES=0x00 SYN URGP=0
    Feb  1 10:55:01 sunucu CRON[26186]: (root) CMD (/usr/local/ispconfig/server/cron.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
    Feb  1 10:55:01 sunucu CRON[26187]: (getmail) CMD (/usr/local/bin/run-getmail.sh > /dev/null 2>> /dev/null)
    Feb  1 10:55:01 sunucu CRON[26188]: (root) CMD (/usr/local/ispconfig/server/server.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
    Feb  1 10:55:02 sunucu dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=::1, lip=::1, secured, session=<NNkCxJ7zmLgAAAAAAAAAAAAAAAAAAAAB>
    Feb  1 10:55:02 sunucu dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=::1, lip=::1, secured, session=<O9oCxJ7zNKcAAAAAAAAAAAAAAAAAAAAB>
    Feb  1 10:55:02 sunucu postfix/submission/smtpd[26277]: connect from localhost[::1]
    Feb  1 10:55:02 sunucu postfix/submission/smtpd[26277]: lost connection after CONNECT from localhost[::1]
    Feb  1 10:55:02 sunucu postfix/submission/smtpd[26277]: disconnect from localhost[::1] commands=0/0
    There is more than one firewall blocking. I don't know if it's relevant...

    Code:
    root@sunucu:~# ufw status
    Status: active
    
    To                         Action      From
    --                         ------      ----
    21/tcp                     ALLOW       Anywhere
    22/tcp                     ALLOW       Anywhere
    25/tcp                     ALLOW       Anywhere
    53/tcp                     ALLOW       Anywhere
    80/tcp                     ALLOW       Anywhere
    110/tcp                    ALLOW       Anywhere
    143/tcp                    ALLOW       Anywhere
    443/tcp                    ALLOW       Anywhere
    465/tcp                    ALLOW       Anywhere
    587/tcp                    ALLOW       Anywhere
    993/tcp                    ALLOW       Anywhere
    995/tcp                    ALLOW       Anywhere
    3306/tcp                   ALLOW       Anywhere
    4190/tcp                   ALLOW       Anywhere
    8080/tcp                   ALLOW       Anywhere
    8081/tcp                   ALLOW       Anywhere
    40110:40210/tcp            ALLOW       Anywhere
    53/udp                     ALLOW       Anywhere
    Anywhere                   ALLOW       192.168.1.0/24
    21/tcp (v6)                ALLOW       Anywhere (v6)
    22/tcp (v6)                ALLOW       Anywhere (v6)
    25/tcp (v6)                ALLOW       Anywhere (v6)
    53/tcp (v6)                ALLOW       Anywhere (v6)
    80/tcp (v6)                ALLOW       Anywhere (v6)
    110/tcp (v6)               ALLOW       Anywhere (v6)
    143/tcp (v6)               ALLOW       Anywhere (v6)
    443/tcp (v6)               ALLOW       Anywhere (v6)
    465/tcp (v6)               ALLOW       Anywhere (v6)
    587/tcp (v6)               ALLOW       Anywhere (v6)
    993/tcp (v6)               ALLOW       Anywhere (v6)
    995/tcp (v6)               ALLOW       Anywhere (v6)
    3306/tcp (v6)              ALLOW       Anywhere (v6)
    4190/tcp (v6)              ALLOW       Anywhere (v6)
    8080/tcp (v6)              ALLOW       Anywhere (v6)
    8081/tcp (v6)              ALLOW       Anywhere (v6)
    40110:40210/tcp (v6)       ALLOW       Anywhere (v6)
    53/udp (v6)                ALLOW       Anywhere (v6)
    
    
     
    Last edited: Feb 1, 2023
  9. pyte

    pyte Well-Known Member HowtoForge Supporter

    If i try to connect to 217.131.34.248 (koyuncuspor.com) on ports 80, 443 i don't receive any repsonse. So there is a firewall blocking. Make sure allow traffic on those ports for this host. The firewall on the system itself seems fine.

    Code:
    Discovered open port 110/tcp on 217.131.34.248
    Discovered open port 3306/tcp on 217.131.34.248
    Discovered open port 25/tcp on 217.131.34.248
    Discovered open port 995/tcp on 217.131.34.248
    Discovered open port 993/tcp on 217.131.34.248
    Discovered open port 143/tcp on 217.131.34.248
    Discovered open port 8080/tcp on 217.131.34.248
    Discovered open port 53/tcp on 217.131.34.248
    Discovered open port 8081/tcp on 217.131.34.248
    Discovered open port 33/tcp on 217.131.34.248
    Discovered open port 465/tcp on 217.131.34.248
    //EDIT: You webpanel is accessible under https://217.131.34.248:8080/login/
     
  10. tbctr

    tbctr Member

    ispconfig - Firewal - Open TCP ports: 21,22,25,53,80,110,143,443,465,587,993,995,3306,4190,8080,8081,40110:40210
     
  11. pyte

    pyte Well-Known Member HowtoForge Supporter

    There is a firewall between this server and the internet. You have to allow the connections there as well, not only on the host itself
     
  12. tbctr

    tbctr Member

    It is interesting that although the dmz function is on in the modem, the ports are closed. Manuel add 80 and 443 ports tcp/udp but 443 still closed. Thank you very much to those who replied. Let's try and replace the modem.
     
    pyte likes this.
  13. ahrasis

    ahrasis Well-Known Member HowtoForge Supporter

    DMZ settings are more difficult in my experience, so I don't think it's your router's problem but you can try other router if you think so.

    Personally, I'd prefer port forwarding most of the time and forwarding port 80 443 8080 would suffice for the web server and the panel if I manage other services from the LAN.

    I'd forward other ports only if I need them accessible via WAN directly but I would forward different port from the router to the host e.g. for ssh I'd forward 822 to 22.
     
  14. tbctr

    tbctr Member

    It was working fine before with dmz. I also tried manually opening the tcp/udp ports one by one. 443 won't open strangely.
     
  15. ahrasis

    ahrasis Well-Known Member HowtoForge Supporter

    Supposedly, every ports in router's DMZ are basically opened and thus the targeted server firewall should manage them on its own, so that is weird to me as I am not sure why one would need to manually set opened any ports in router's DMZ. Perhaps your router is a commercial / advanced router and if that is so, check its manual or ask for help / support in from its producer or its community. Anyway, trying on another router is a good way too.
     
  16. tbctr

    tbctr Member

    Failed to run regular backups routine because failed to mount backup directory.
    This issue has not been resolved. What can I do?
     
  17. till

    till Super Moderator Staff Member ISPConfig Developer

    You have to find out why the backup mount script you created to mount your backup directory fails to mount it. Btw, backup directories are not related to DNS, so maybe you better make a new thread as the issue is not related to this thread here.
     
    tbctr likes this.
  18. ahrasis

    ahrasis Well-Known Member HowtoForge Supporter

    How is this relevant?
     
  19. till

    till Super Moderator Staff Member ISPConfig Developer

    May you please explain what you like to do? And please make a new thread for that, as your question seems not to be related to the topic of this thread.
     
  20. till

    till Super Moderator Staff Member ISPConfig Developer

    Which is not related to the topic of this thread. See Read before posting, chapter "when visiting domain b, content of domain a shows up:

    https://forum.howtoforge.com/threads/please-read-before-posting.58408/

    When you visit an apache or nginx server using a (sub) domain that you did not configure in the web server, then the web server must show the content of the first domain it finds on the same IP address.

    You can create new threads when you can post here.
     
    ahrasis likes this.

Share This Page