Outbound http connections blocked

charu · 11-21-2010, 05:25 AM

(centos 5.5 86*64 with cpanel)
I am trying to set up a php script from projecthoneypot.org

The script requires an outbound connection to project honeypot and when I go to the honeypot.php on my server I get an error asking if outbound connections are disabled.

They could be...I am not sure where to check, I have checked csf and outbound tcp is allowed on port 80, but I am not sure if I should be looking somewhere else.

Obviously I dont want to make the server insecure, so I am wondering how I can allow this outbound connection.

smoker · 11-21-2010, 11:03 AM

Check your setting for allow_url_fopen in php.ini
(I assume you have access to a phpinfo(); page )
The script might require it to be on, but it may be disabled by default.

http://stackoverflow.com/questions/1...l-fopen-in-php

charu · 11-21-2010, 03:04 PM

Yes allow_url_fopen was disabled. I have enabled it, but still have not got the script to work. the script I notice, the bits that are readable include fopen() and there is this include_path option in php.ini

Quote:

Specifies a list of directories where the require(), include(), fopen(), file(), readfile() and file_get_contents() functions look for files. The format is like the system's PATH environment variable: a list of directories separated with a colon in Unix or semicolon in Windows.

I also have disabled the following functions, but it is hard to see as some of the script is encrypted..

Code:

ini_set,exec,passthru,shell_exec,system,proc_open,popen,curl_exec,curl_multi_exec,parse_ini_file,show_source, phpinfo,popen, proc_open,allow_url_fopen,apache_get_modules,apache_get_version,apache_getenv,apache_note,apache_setenv,disk_free_space,diskfreespace,dl,highlight_file,ini_alter,ini_restore,openlog,proc_nice,symlink,fsockopen