Portal Home > Knowledgebase > Articles Database > CSF problem - ICMP
CSF problem - ICMP
| Posted by SAHostKing, 11-26-2014, 04:47 PM |
| Hi guys,
strange issue when I use "http://startping.com/" on a website or gtmetrix.com I get something like the following if CSF is enabled:
All is Lost 100%
Europe Italy Milan Lost 100% - - - [IP address]
Europe Latvia Riga Lost 100% - - - [IP address]
Europe Lithuania Siauliai Lost 100% - - - [IP address]
Europe Luxembourg Luxembourg Lost 100% - - - [IP address]
Europe Moldova Chisinau Lost 100% - - - [IP address]
Europe Netherlands Amsterdam Lost 100% - - - [IP address]
Europe Norway Bergen Lost 100% - - - [IP address]
Europe Norway Oslo Lost 100% - - - [IP address]
Europe Poland Warsaw Lost 100% - - - [IP address]
Europe Portugal Lisbon Lost 100% - - - [IP address]
Europe Romania Bucharest Lost 100% - - - [IP address]
Europe Russia Moscow Lost 100% - - - [IP address]
Europe Russia St Petersburg Lost 100% - - - [IP address]
Europe Slovakia Bratislava Lost 100% - - - [IP address]
Europe Slovenia Ljubljana Lost 100% - - - [IP address]
Europe Spain Barcelona Lost 100% - - - [IP address]
If I disable CSF I get this all successful. Now I'm assuming its a protection system in and not something serious as the site loads but would like to it to work?
Europe Lithuania Siauliai Ok 217.8 218.1 218.6 [IP address]
Europe Luxembourg Luxembourg Ok 175.2 175.3 175.6 [IP address]
Europe Moldova Chisinau Ok 220.6 220.9 221.1 [IP address]
Europe Netherlands Amsterdam Ok 173.7 174 175.6 [IP address]
Europe Norway Bergen Ok 205.9 206.5 210.5 [IP address]
Europe Norway Oslo Ok 207.3 207.5 207.9 [IP address]
Europe Poland Warsaw Ok 199.1 200.4 203 [IP address]
Europe Portugal Lisbon Ok 194.1 194.3 194.4 [IP address]
Europe Romania Bucharest Ok 215.1 215.1 215.3 [IP address]
Europe Russia Moscow Ok 228.6 228.7 228.8 [IP address]
Europe Russia St Petersburg Ok 202.9 203.5 205.2 [IP address]
Europe Slovakia Bratislava Ok 193.5 193.8 193.9 [IP address]
Europe Slovenia Ljubljana Ok 193.8 193.9 194.1 [IP address]
Europe Spain Barcelona Ok 203.1 210.5 217.3 [IP address]
Europe Spain Madrid Ok 191.2 191.4 191.9 [IP address]
Europe Spain Valencia Ok 197.9 198.2 198.6 [IP address]
|
| Posted by PCS-Chris, 11-26-2014, 04:49 PM |
| Probably too obvious, but what does this give you:
Should be "1" to allow incoming ping requests
|
| Posted by Server Management, 11-26-2014, 04:57 PM |
| As Chris has said above overview your CSF settings to make sure everything is setup as you like.
|
| Posted by GeekGhost-GM, 11-26-2014, 05:07 PM |
| I've seen ICMP_IN_RATE cause that issue. Try setting it to 0 and re-test.
|
| Posted by SAHostKing, 11-26-2014, 05:08 PM |
| Icmp_in = "1"
icmp_in_rate = "0"
still same issue.
Sites load just can't use those 2 sites when CSF is enabled:
"http://startping.com/" on a website or gtmetrix.com
|
| Posted by PCS-Chris, 11-26-2014, 05:17 PM |
| What you really need to do is look at the complete list of rules in iptables when CSF is running to pinpoint what is causing the issue.
Run "iptables-save > rules.txt" to dump them into a file then you can easily filter through it.
Just be careful if you try to remove rules through process of elimination, as the default iptables policy with CSF running is DROP - i.e. If you were to just flush iptables or remove something important you will get locked out of your server
|
| Posted by SAHostKing, 11-26-2014, 06:21 PM |
| checked and couldn't find anything wrong. Tried a different IP and that worked so may be a network setup issue. Sent this to our network admin to just check and confirm.
|
| Posted by Srv24x7, 11-27-2014, 02:33 AM |
| Hi,
Try increasing the "ICMP_IN_RATE" per second value and see what difference it makes.
The ICMP packet limitation may be causing this.
|
Add to Favourites 
Print this Article
Also Read
