update error last few days

wizzywig
Junior Member
Posts: 1
Joined: 31 Mar 2015, 09:12
Contact:

update error last few days

Post by wizzywig »

Hi for the last few days i keep getting a cron email saying it can't update with the following message

[root@www ~]# /usr/sbin/csf -u
Oops: Unable to download: Can't connect to download.configserver[dot]com:443 (connect: Connection timed out)

also when downloading the csf.tgz its currupted
h**ps://download.configserver[dot]com/csf.tgz
sauvegardezvous99
Junior Member
Posts: 9
Joined: 27 Nov 2014, 01:29

Re: update error last few days

Post by sauvegardezvous99 »

same thing for me :

Code: Select all

[xxxxxxxx@xxxxxxxxxxxxxx /]# csf -u
Oops: Unable to download: 599 - Could not connect to 'download.configserver[dot]com:80': IO::Socket::INET: connect: Connection timed out

Code: Select all

[xxxxxx@xxxxxxxx /]# ping configserver[dot]com
PING configserver[dot]com (85.13.195.235) 56(84) bytes of data.
64 bytes from server.configserver[dot]net (85.13.195.235): icmp_seq=1 ttl=51 time=97.5 ms
64 bytes from server.configserver[dot]net (85.13.195.235): icmp_seq=2 ttl=51 time=97.6 ms

Code: Select all

[xxxxxxx@xxxxxxxxxxx /]# ping download.configserver[dot]com
PING download.configserver[dot]com (85.10.199.177) 56(84) bytes of data.
^C
--- download.configserver[dot]com ping statistics ---
39 packets transmitted, 0 received, 100% packet loss, time 38872ms
Sarah
Moderator
Posts: 921
Joined: 09 Dec 2006, 22:49

Re: update error last few days

Post by Sarah »

We have had several reports from people with OVH servers in the last few days, confirming that the issue is with the OVH firewall. Disabling the OVH firewall resolves the connection problem. I would assume that adding the download server's IP address (85.10.199.177) to the OVH firewall allow list would also work, but have not had that confirmed yet.
Bastille
Junior Member
Posts: 10
Joined: 02 Apr 2015, 20:46

Re: update error last few days

Post by Bastille »

It's tied to the mitigation component of the OVH firewall. If you either have the firewall enabled or toggled the mitigation mode from automatic to permanent, it will result in what we're currently experiencing. We've submitted a ticket to OVH regarding this so it should hopefully be resolved later today.
sauvegardezvous99
Junior Member
Posts: 9
Joined: 27 Nov 2014, 01:29

Re: update error last few days

Post by sauvegardezvous99 »

I confirm. I am with OVH. and at this time, it's not working yet.

thank you,
Bastille
Junior Member
Posts: 10
Joined: 02 Apr 2015, 20:46

Re: update error last few days

Post by Bastille »

Bleh, my apologies. I was gone for the weekend and wasn't able to check OVH's response until earlier today. All they initially gave me was a generic "This is how to whitelist an IP", which is a localized band-aid solution at best. I reopened the ticket but we may need one of the CSF devs to go yell at OVH regarding this.
Bastille
Junior Member
Posts: 10
Joined: 02 Apr 2015, 20:46

Re: update error last few days

Post by Bastille »

It appears that there are some IPs that are being filtered thorugh our VAC. We
are currently investigating the issue and will see to get back to you with
more informations as soon as we have them.

For the moment, we recommend to disable the OVH firewall.
At least it's some form of progress.
vlus
Junior Member
Posts: 10
Joined: 31 Dec 2013, 21:47

Re: update error last few days

Post by vlus »

Hello,

I don't know if this is related, but I do not believe my IP addresses are getting updated, as I have been getting similar email:

Oops: Unable to download: Can't connect to download.configserver.com:443 (timeout)

I have a dedicated server with Codero. And I use some different CC blocking successfully, but last few days I've had some folks in USA telling me that can't see the website, which coincides with the error emails.

a) how can I check to see if my IP address blocks are getting updated, and
b) if there is a more widespread known issue, please advise

Thanks you very much for your help.
Vlus
Sarah
Moderator
Posts: 921
Joined: 09 Dec 2006, 22:49

Re: update error last few days

Post by Sarah »

vlus wrote:Hello,

I don't know if this is related, but I do not believe my IP addresses are getting updated, as I have been getting similar email:

Oops: Unable to download: Can't connect to download.configserver.com:443 (timeout)

I have a dedicated server with Codero. And I use some different CC blocking successfully, but last few days I've had some folks in USA telling me that can't see the website, which coincides with the error emails.

a) how can I check to see if my IP address blocks are getting updated, and
b) if there is a more widespread known issue, please advise

Thanks you very much for your help.
Vlus
You are conflating two completely different issues.

1. If you want us to check whether your servers' IP addresses are blocked by our firewall or are part of the OVH problem, please contact us by PM or email with your server IP address(es).

2. Your server being unable to connect to our server to update csf would have no connection whatsoever on issues of other people being able to view your website, CC blocking, or individual IPs being blocked by csf on your server.

Regards,
Sarah
saeconsulting
Junior Member
Posts: 5
Joined: 09 Apr 2015, 20:30

Re: update error last few days

Post by saeconsulting »

I have the same problem and I am using OVH server.

Well, I would like to say that this is not an OVH error. Here it is a traceroute test from my server:

--------------------------------------------
[root@XXXX ~]# traceroute download.configserver.com
traceroute to download.configserver.com (85.10.199.177), 30 hops max, 60 byte packets
1 91.121.211.253 (91.121.211.253) 0.865 ms 0.911 ms 0.970 ms
2 rbx-g2-a9.fr.eu (37.187.231.97) 0.702 ms rbx-g2-a9.fr.eu (37.187.231.107) 0.777 ms 0.762 ms
3 * * *
4 decix2-gw.hetzner.de (80.81.193.164) 14.511 ms 14.537 ms 14.539 ms
5 core4.hetzner.de (213.239.245.2) 14.185 ms 14.226 ms 14.218 ms
6 core11.hetzner.de (213.239.245.34) 14.121 ms 14.134 ms 14.092 ms
7 juniper1.rz1.hetzner.de (213.239.245.50) 14.151 ms juniper2.rz1.hetzner.de (213.239.245.186) 32.336 ms 21.168 ms
8 hos-tr1.ex3k5.rz1.hetzner.de (213.239.255.6) 15.331 ms hos-tr3.ex3k5.rz1.hetzner.de (213.239.237.134) 19.290 ms hos-tr2.ex3k5.rz1.hetzner.de (213.239.255.38) 18.975 ms
9 * * *
10 * * *
11 * * *
12 * * *
13 * * *
14 * * *
15 * * *
16 * * *
17 * * *
18 * * *
19 * * *
20 * * *
21 * * *
22 * * *
23 * * *
24 * * *
25 * * *
26 * * *
27 * * *
28 * * *
29 * * *
30 * * *
[root@XXXX ~]#
--------------------------------------------

Another traceroute from my home ADSL:

--------------------------------------------
C:\Windows\system32>tracert download.configserver.com

Traza a la dirección download.configserver.com [85.10.199.177]
sobre un máximo de 30 saltos:

1 1 ms <1 ms <1 ms 192.168.1.1
2 77 ms 158 ms 91 ms 1.176.79.188.dynamic.jazztel.es [188.79.176.1]
3 38 ms 38 ms 40 ms 10.255.163.254
4 52 ms 73 ms 43 ms 45.217.106.212.static.jazztel.es [212.106.217.45
]
5 * * 43 ms 42.217.106.212.static.jazztel.es [212.106.217.42
]
6 * * * Tiempo de espera agotado para esta solicitud.
7 57 ms 63 ms 55 ms 146.216.106.212.static.jazztel.es [212.106.216.1
46]
8 74 ms 74 ms 75 ms 193.149.1.204
9 80 ms 79 ms 81 ms r1mrs1.core.init7.net [82.197.168.234]
10 129 ms 94 ms 99 ms r1vie1.core.init7.net [77.109.140.245]
11 106 ms 201 ms 105 ms r1nue1.core.init7.net [77.109.140.250]
12 117 ms 103 ms 102 ms gw-hetzner.init7.net [77.109.135.102]
13 94 ms 95 ms * core11.hetzner.de [213.239.203.137]
14 96 ms 94 ms 95 ms juniper2.rz1.hetzner.de [213.239.245.186]
15 90 ms 91 ms 94 ms hos-tr4.ex3k5.rz1.hetzner.de [213.239.237.166]
16 * 103 ms 103 ms download.configserver.com [85.10.199.177]

Traza completa.
--------------------------------------------

As you may see, the problem is at Hetzner servers, not at OVH side. But maybe Hetzner is blocking OVH connections. MAybe Hetzner is the Config Server datacenter provider?

Regards,
Post Reply