Knowledgebase

Incoming / outgoing packets blocked

Posted by scrapme, 06-22-2009, 04:54 AM
Hi, I am facing very unique issue at two of my servers hosted at hivelocity from last 3 or 4 months. In every couple of days all incoming and outgoing activity get stopped except on port 3386 (RDP) i.e. no one can get website hosted on the server or neither I can access any website from the server but all other services continue to work. A reboot to the server will solve the issue but that is only a temp solution. I have checked event logs one by one but no issue or error found on it. I have even run the server without firewall but still it stops working. Scanned the server from 3 different antiviruses one by one but they didn't found any virus. Datacenter tech staff monitored the server and found no DoS or other such kind of attack on the server or IP. I am totally clueless on this issue on how to solve it.... anybody here who can help me? OS: Windows 2003 Firewall: Previous hardware based, then software based and now windows firewall (same issue with all) Third party softwares: No Scripts: ASP, ASP.NET, PHP Database: SQL and MySQL No other software installed on the server Last edited by scrapme; 06-22-2009 at 04:58 AM.

Posted by MarkioE, 06-22-2009, 05:12 AM
Just to confirm, you're sure that you can't access other ports such as FTP?

Posted by scrapme, 06-22-2009, 05:39 AM
FTP, DNS, HTTP none working from inside or outside while they are running on the server. I also tried to restart them but it doesn't solve the issue and the only remedy comes in is a server reboot.

Posted by MarkioE, 06-22-2009, 02:46 PM
Have you tried running a tracert on one of your domains hosted there? It sounds like a firewall issue so make sure you definately aren't running one. Also if you can, try starting the OS in safe mode.

Posted by mindbend, 06-22-2009, 09:02 PM
iptables -L -nv Check for the active rules. Also, if you have CSF installed, make sure it didn't snag 0.0.0.0. If you have a firewall entry Appending for 3306 access, it could be active on top of any rule blocking everything. I'm a retard this is windows, ignore this post. Sorry.

Posted by Collabora, 06-22-2009, 10:23 PM
Have you done any testing with telnet and/or contacted HV? If you can provide a domain name I can do some tests from here.



Was this answer helpful?

Add to Favourites Add to Favourites

Print this Article Print this Article

Also Read
Server hammered dailly (Views: 540)


Language:

Client Login

Email

Password

Remember Me

Search