I want to Disable the IP address allow list for login attempsts from SFTP

1

Hi

I mistakenly entered wrong IP adress for Use IP address allow list for login attempts.

After I log out I cannot login now to the hestia control panel. It says invalid username or password

I have a SFTP root access. What is the command line I need to enter to disable the IP address allow list featur.

I tried using SSH but it said the service allows only SFTP.

So please try to help me correctly.

I’m able to connect my server to SFTP. I need to find a way to dsiable the IP address allow allow list for login attempts

Thanks

2

May I ask what command you used? Is there an error log for your login?

3

Hi. I added a wrong ip address like 122.0.0.0 for the allowed ip address admin login feature

This was not done through any command. But rather via the hestia control panel. After that I can’t login to hestia control panel.

But I can connect to server with SFTP.

So I want to find a way to remove that allowed ip thing through SFTP command line

4

Hi @santhoshmurali

Via SFTP you can’t execute commands. Do you mean SSH? If you hace access via SSH and you have access to root or a user with sudo privileges:

Note: You must replace HereYourAdminUser with the actual admin user you are using.

sudo /usr/local/hestia/bin/v-change-user-config-value HereYourAdminUser LOGIN_USE_IPLIST 'no'
sudo /usr/local/hestia/bin/v-change-user-config-value HereYourAdminUser LOGIN_ALLOW_IPS ''
5

Thank you

But the thing is that when I tried to connect with ssh it said this service allows SFTP only.

So just wondering how to fix my problem

6

Don’t you have a user to access the machine other than one of those used in Hestia? Or access with the root user? It’s possible that your hosting provider offers terminal access from its control panel.

7

If you can navigate to /usr/local/hestia/data/users/HESTIAUSERIDHERE (example admin or hestia) & be able to edit the user.conf file, then towards the end, you should be able to see these 2 lines:

LOGIN_USE_IPLIST='no'
LOGIN_ALLOW_IPS=''

First one’s value should be 'no and the second one should be blank.

Reboot the system or restart the firewall to get it working.