DenyHosts not Sync'ing
-
- Posts: 7
- Joined: 2016/03/13 14:16:21
DenyHosts not Sync'ing
Hi,
I have used DenyHosts a number of times on various installations without a problem, however a new server just refuses to sync. All Internet connectivity is ok, except DenyHosts will not Sync with the RPC server. I have even copied the DenyHosts.conf file over from a working server with no luck...
I am getting the following error:-
2016-03-13 19:04:53,057 - sync : ERROR 'SYNC_PROXY_SERVER'
2016-03-13 19:04:53,057 - sync : ERROR Could not initiate xmlrpc connection
The affected server is a physical Centos 7 server. I have tried starting with the --debug flag to get more info, but the systemctl control doesn't like the extra parameter.
Has anyone else seen this with DenyHosts?
Thanks,
Steve
I have used DenyHosts a number of times on various installations without a problem, however a new server just refuses to sync. All Internet connectivity is ok, except DenyHosts will not Sync with the RPC server. I have even copied the DenyHosts.conf file over from a working server with no luck...
I am getting the following error:-
2016-03-13 19:04:53,057 - sync : ERROR 'SYNC_PROXY_SERVER'
2016-03-13 19:04:53,057 - sync : ERROR Could not initiate xmlrpc connection
The affected server is a physical Centos 7 server. I have tried starting with the --debug flag to get more info, but the systemctl control doesn't like the extra parameter.
Has anyone else seen this with DenyHosts?
Thanks,
Steve
-
- Posts: 7
- Joined: 2016/03/13 14:16:21
Re: DenyHosts not Sync'ing
Oh how I 'LOL'd"... The server is a new 1and1 hosted server... Which they sold me with pre-blacklisted IP!
When trying to relay mail I get a 554 error (Even from 1and1's own relays!) so I guess this is the problem, as I believe the DenyHosts server checks on connection.
When trying to relay mail I get a 554 error (Even from 1and1's own relays!) so I guess this is the problem, as I believe the DenyHosts server checks on connection.
-
- Posts: 7
- Joined: 2016/03/13 14:16:21
Re: DenyHosts not Sync'ing
Ok, so I've finally got 1&1 to issue new server - Yeah not a new IP, but a whole new server!
Anyway, this IP isn't and never was blacklisted and is now relaying email fine, but I'm still getting the XMLRPC errors... Does anyone have any ideas how I can investigate this?
Anyway, this IP isn't and never was blacklisted and is now relaying email fine, but I'm still getting the XMLRPC errors... Does anyone have any ideas how I can investigate this?
Re: DenyHosts not Sync'ing
Do you have any outbound iptables rules? Or a firewall in front of your server that only allows certain ports out?
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke
-
- Posts: 7
- Joined: 2016/03/13 14:16:21
Re: DenyHosts not Sync'ing
Outbound traffic is totally unrestricted Trevor, I can telnet to xmlrpc.denyhosts.net:9911 and get the following response:-TrevorH wrote:Do you have any outbound iptables rules? Or a firewall in front of your server that only allows certain ports out?
Trying 204.9.137.194...
Connected to xmlrpc.denyhosts.net
So it seems to be connecting, it just won sync. My VPS connects fine, I have even taken a direct copy of the denyhosts.conf file with no luck.... The only difference here is that the working server is CentOS 6 (x64) and the non-working is CentOS 7 (x64). Neither has SELinux running.
Re: DenyHosts not Sync'ing
i have the same issue too. you are probably on the same old version as i am:
if you build from source, using their latest version, you wont have this issue.
https://github.com/denyhosts/denyhosts/releases
but it would be really nice if there was an updated rpm available out there somewhere, though i haven't been able to find it
Code: Select all
rpm -q denyhosts
denyhosts-2.9-4.el7.noarch
https://github.com/denyhosts/denyhosts/releases
but it would be really nice if there was an updated rpm available out there somewhere, though i haven't been able to find it
Re: DenyHosts not Sync'ing
You need to report that to EPEL (epel7), asking for a version update, saying that the current version is no longer functional because it cannot sync with its master server and blah blah blah...
Root is evil: Do not use root (sudo) to run any of the commands specified in my posts unless explicitly indicated. Please, provide the necessary amount of context to understand your problem/question.
-
- Posts: 7
- Joined: 2016/03/13 14:16:21
Re: DenyHosts not Sync'ing
Awesome, thanks very much for the info! I'll give it a go. I just tried TCPDUMP on the EPEL version, and it doesn't even TRY to connect so I was going nowhere fast with that!fwiffo wrote:i have the same issue too. you are probably on the same old version as i am:if you build from source, using their latest version, you wont have this issue.Code: Select all
rpm -q denyhosts denyhosts-2.9-4.el7.noarch
https://github.com/denyhosts/denyhosts/releases
but it would be really nice if there was an updated rpm available out there somewhere, though i haven't been able to find it
I'll report back when I have built from the source.
Cheers
-
- Posts: 7
- Joined: 2016/03/13 14:16:21
Re: DenyHosts not Sync'ing
Excellent, that works - Thanks fwiffoSteveH0773 wrote:Awesome, thanks very much for the info! I'll give it a go. I just tried TCPDUMP on the EPEL version, and it doesn't even TRY to connect so I was going nowhere fast with that!fwiffo wrote:i have the same issue too. you are probably on the same old version as i am:if you build from source, using their latest version, you wont have this issue.Code: Select all
rpm -q denyhosts denyhosts-2.9-4.el7.noarch
https://github.com/denyhosts/denyhosts/releases
but it would be really nice if there was an updated rpm available out there somewhere, though i haven't been able to find it
I'll report back when I have built from the source.
Cheers
I did have to change the sync.py file as that had an error in it, but now that is done all is working!
Thanks again
Re: DenyHosts not Sync'ing
could you describe your change to sync.py because i ended up rebuilding the rpm (download the source rpm) for centos7 and that seemed to be enough. maybe i missed something?