Hi, sorry for this post but im in an alert mode…
By mistake i deleted the Allow rules from the firewall dashborad at my Hestia server…
I rebooted the machine but now i don’t even have access with bitvise ssh client…
Im on an Oracle Machine…
Please help.
Bruno Miranda
You will need console access or a rescue boot disk, neither of which have anything to do with Hestia which means this is the wrong place to expect to receive training in their use.
Hello Bruno, you have to contact your provider. In this case, oracle. And ask them to recover or grant you local shell access.
Yes, thanks, i have knowledge about creating instances and vps machines, however i made a mistake…
Thanks for the support provided
Thanks a lot for your guidance. really helped!
Login via VNC / what ever Oracle Cloud provide
Then run: CLI Reference | Hestia Control Panel
I apologize for writing here again, but I really need guidance now regarding the Hestia server.
I am incredibly grateful for the valuable time you have taken to provide me with assistance. I have successfully accessed the files on my boot volume by attaching it to another instance.
I’ve added the correct Rules to the file
/usr/local/hestia/data/firewall/rules.conf
Added the following 10 Rules Manualy
RULE=‘1’ ACTION=‘ACCEPT’ PROTOCOL=‘ICMP’ PORT=‘0’ IP=‘0.0.0.0/0’ COMMENT=‘PING’ SUSPENDED=‘no’ TIME=‘17:13:48’ DATE=‘2014-09-16’
RULE=‘2’ ACTION=‘ACCEPT’ PROTOCOL=‘TCP’ PORT=‘2083’ IP=‘0.0.0.0/0’ COMMENT=‘HESTIA’ SUSPENDED=‘no’ TIME=‘07:40:16’ DATE=‘2014-05-25’
RULE=‘3’ ACTION=‘ACCEPT’ PROTOCOL=‘TCP’ PORT=‘143,993’ IP=‘0.0.0.0/0’ COMMENT=‘IMAP’ SUSPENDED=‘no’ TIME=‘07:40:16’ DATE=‘2014-05-25’
RULE=‘4’ ACTION=‘ACCEPT’ PROTOCOL=‘TCP’ PORT=‘110,995’ IP=‘0.0.0.0/0’ COMMENT=‘POP3’ SUSPENDED=‘no’ TIME=‘07:40:16’ DATE=‘2014-05-25’
RULE=‘5’ ACTION=‘ACCEPT’ PROTOCOL=‘TCP’ PORT=‘25,465,587’ IP=‘0.0.0.0/0’ COMMENT=‘SMTP’ SUSPENDED=‘no’ TIME=‘21:47:04’ DATE=‘2018-11-07’
RULE=‘6’ ACTION=‘ACCEPT’ PROTOCOL=‘TCP’ PORT=‘53’ IP=‘0.0.0.0/0’ COMMENT=‘DNS’ SUSPENDED=‘no’ TIME=‘07:40:16’ DATE=‘2014-05-25’
RULE=‘7’ ACTION=‘ACCEPT’ PROTOCOL=‘UDP’ PORT=‘53’ IP=‘0.0.0.0/0’ COMMENT=‘DNS’ SUSPENDED=‘no’ TIME=‘07:40:16’ DATE=‘2014-05-25’
RULE=‘8’ ACTION=‘ACCEPT’ PROTOCOL=‘TCP’ PORT=‘21,12000-12100’ IP=‘0.0.0.0/0’ COMMENT=‘FTP’ SUSPENDED=‘no’ TIME=‘07:40:16’ DATE=‘2014-05-25’
RULE=‘9’ ACTION=‘ACCEPT’ PROTOCOL=‘TCP’ PORT=‘80,443’ IP=‘0.0.0.0/0’ COMMENT=‘WEB’ SUSPENDED=‘no’ TIME=‘17:04:27’ DATE=‘2014-09-24’
RULE=‘10’ ACTION=‘ACCEPT’ PROTOCOL=‘TCP’ PORT=‘22’ IP=‘0.0.0.0/0’ COMMENT=‘SSH’ SUSPENDED=‘no’ TIME=‘17:14:41’ DATE=‘2014-09-16’
However i connected the server again but not still not working… or better… without connection…
What is missing? can you help me?
Restart server or v-update-firewall
I’ve restarted the server but is not working…
Still no connection for dashboard or even ssh on port 22…
The only way i can edit the files is mounting this server to another working instance… that way i can’t use the v-update-firewall…
Should i update the v-update-firewall file with all the new mounted path ?
root@instance-20230607-2318:/mnt/sdb# /mnt/sdb/usr/local/hestia/bin/v-update-firewall
/mnt/sdb/usr/local/hestia/bin/v-update-firewall: line 19: /etc/profile.d/hestia.sh: No such file or directory
/mnt/sdb/usr/local/hestia/bin/v-update-firewall: line 21: /etc/hestiacp/hestia.conf: No such file or directory
/mnt/sdb/usr/local/hestia/bin/v-update-firewall: line 23: /func/main.sh: No such file or directory
/mnt/sdb/usr/local/hestia/bin/v-update-firewall: line 25: /func/firewall.sh: No such file or directory
/mnt/sdb/usr/local/hestia/bin/v-update-firewall: line 27: source_conf: command not found
/mnt/sdb/usr/local/hestia/bin/v-update-firewall: line 33: is_system_enabled: command not found
/mnt/sdb/usr/local/hestia/bin/v-update-firewall: line 40: heal_iptables_links: command not found
I restarted already hoping the v-update-firewall could work…
Sorry, Im just missing this step for v-update-firewall
Have you tried from a chroot environment while booted from another system volume?
Yes, i get to the point to execute on chroot environmet the v-update-firewall
i get this error
root@instance-20230607-2318:/home# /usr/local/hestia/bin/v-update-firewall
cat: /proc/cpuinfo: No such file or directory
cat: /proc/cpuinfo: No such file or directory
grep: /proc/1/environ: No such file or directory
Error: Invalid object format: RULE=‘10’ ACTION=‘ACCEPT’ PROTOCOL=‘TCP’ PORT=‘22’ IP=‘0.0.0.0/0’ COMMENT=‘SSH’ SUSPENDED=‘no’ TIME=‘17:14:41’ DATE=‘2014-09-16’
I think im almost there…
should i must leave a blank line at the end of the rules.conf?
v-stop-firewall
And sort everything else via ssh…
It looks like you neglected to bind mount /proc before your chroot.
https://wiki.debian.org/chroot#Mounting_pseudo_filesystems
The approach that @eris just suggested should be rather expedient if are having trouble with your chroot environment.
Thanks i’ve done it all steps for the chroot you send me, thanks a lot.
At this point in time im just here to ask about this warning im having…
root@instance-20230607-2318:/# /usr/local/hestia/bin/v-update-firewall
This is the chroot environment…
Sorry for all this work and posts…
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.