LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > CentOS
User Name
Password
CentOS This forum is for the discussion of CentOS Linux. Note: This forum does not have any official participation.

Notices


Reply
  Search this Thread
Old 09-10-2016, 10:12 AM   #1
farid110
LQ Newbie
 
Registered: Nov 2011
Posts: 6

Rep: Reputation: Disabled
Server firewall problem


today suddenly my website did not come up after i contacted to my provider they told me you should type: service iptables stop command at your SSH,the thing is my SSH does not establish as always so i figured out i should use the temporary session which i have created at my VPS panel this one will working on 1349 as port so when i try to connect with the session login information after i input password the putty begins to show a huge amount of commands like these:
.55.226.255 LEN=160 TOS=0x00 PREC=0x00 TTL=128 ID=14318 PROTO=UDP SPT=17500 DPT=17500 LEN=140
Firewall: UDP_IN Blocked IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:16:3e:c0:f6:90:08:00 SRC=185.55.226.183 DST=255.255.255.255 LEN=122 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=5678 DPT=5678 LEN=102
Firewall: UDP_IN Blocked IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:4c:5e:0c:fd:da:5a:08:00 SRC=192.168.10.1 DST=255.255.255.255 LEN=134 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=5678 DPT=5678 LEN=114
Firewall: UDP_IN Blocked IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:16:3e:43:1a:eb:08:00 SRC=185.55.226.153 DST=255.255.255.255 LEN=160 TOS=0x00 PREC=0x00 TTL=128 ID=24300 PROTO=UDP SPT=17500 DPT=17500 LEN=140
Firewall: UDP_IN Blocked IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:16:3e:43:1a:eb:08:00 SRC=185.55.226.153 DST=185.55.226.255 LEN=160 TOS=0x00 PREC=0x00 TTL=128 ID=14319 PROTO=UDP SPT=17500 DPT=17500 LEN=140
Firewall: UDP_IN Blocked IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:16:3e:69:6b:a0:08:00 SRC=185.55.226.180 DST=255.255.255.255 LEN=117 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=5678 DPT=5678 LEN=97
Firewall: UDP_IN Blocked IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:16:3e:43:1a:eb:08:00 SRC=185.55.226.153 DST=255.255.255.255 LEN=160 TOS=0x00 PREC=0x00 TTL=128 ID=24301 PROTO=UDP SPT=17500 DPT=17500 LEN=140
Firewall: UDP_IN Blocked IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:16:3e:43:1a:eb:08:00 SRC=185.55.226.153 DST=185.55.226.255 LEN=160 TOS=0x00 PREC=0x00 TTL=128 ID=14320 PROTO=UDP SPT=17500 DPT=17500 LEN=140
Firewall: UDP_IN Blocked IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:16:3e:c0:f6:90:08:00 SRC=185.55.226.183 DST=255.255.255.255 LEN=122 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=5678 DPT=5678 LEN=102

which never seems to be finished! how can i resolve this problem?
many thanks is advance
 
Old 09-10-2016, 10:26 AM   #2
Emerson
LQ Guru
 
Registered: Nov 2004
Location: Saint Amant, Acadiana
Distribution: Gentoo ~arch
Posts: 6,316

Rep: Reputation: Disabled
SSH not working any more, this log ... Hacked by Iranians, I guess.
 
Old 09-10-2016, 10:33 AM   #3
farid110
LQ Newbie
 
Registered: Nov 2011
Posts: 6

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by Emerson View Post
SSH not working any more, this log ... Hacked by Iranians, I guess.
so whats the solution?
 
Old 09-10-2016, 10:49 AM   #4
Emerson
LQ Guru
 
Registered: Nov 2004
Location: Saint Amant, Acadiana
Distribution: Gentoo ~arch
Posts: 6,316

Rep: Reputation: Disabled
Quote:
Originally Posted by farid110 View Post
so whats the solution?
?!

Compromised server goes offline of course, should be investigated to determine how it was breached so you won't make the same mistake when configuring your new server.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
problem with ubuntu server firewall ganfun Linux - Software 9 05-28-2010 12:24 AM
problem with iptables firewall for web server author_unknown Linux - Networking 3 05-17-2009 01:23 AM
problem: only one way (ssh/ftp) allow between two firewall server steeles Linux - Networking 10 03-17-2007 06:22 AM
Suse 10.0 firewall and ftp server problem maximvs Linux - Networking 2 12-15-2005 03:11 AM
firewall problem with x server dive Slackware 5 08-17-2005 01:40 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > CentOS

All times are GMT -5. The time now is 03:56 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration