Resolved EMERGENCY: Some troubles with plesk 12.0.18 Ubuntu 12.04.5 LTS

[Sébastien Gortais]

Hello everyone,

Since few days, we're experiencing some problems with our plesk.

First of all some of our websites doesn't receive their email at all, we looked at the maillog and saw that qmail is in trouble with SMTP
"
Oct 23 11:28:51 ns3357925 qmail: 1508750931.267639 delivery 783: deferral: Sorry,_I_wasn't_able_to_establish_an_SMTP_connection._(#4.4.1)/
"

We thought that upgrading qmail and plesk would be a good idea, but when i go in our plesk admin panel, i've got :

• A fail update message in frontpage
• A timeout when i click on the update components tools (/admin/update/product)

With command line, when i try anything about updating/upgrading/repairing plesk i've got this :

"Téléchargement du fichier products.inf3: 0%"
(Downloading file products.inf3: 0%)

and .... it stuck for years there.

I'm kinda stuck too now, running out of ideas.

Does someone have an idea ?

I can bring you some more infos if needed.

Thank you,

 

[IgorG]

Are you sure that autoinstall.plesk.com is not firewalled on your server? Mail issues also may be related to firewall rules. Please check it first.
Also please show me output of command

# cat /root/.autoinstallerrc

 

[Sébastien Gortais]

Thank you for your answer,

Actually, it seems that autoinstall.plesk.com isn't in any firewall rules.

# cat /root/.autoinstallerrc
SOURCE_TYPE="network"
SOURCE="ftp://parallels.mirrors.ovh.net/parallels/"

Is it helpful ?

Thank you,

 

[IgorG]

# cat /root/.autoinstallerrc
SOURCE_TYPE="network"
SOURCE="ftp://parallels.mirrors.ovh.net/parallels/"

Try to temporary remove this file and run Plesk autoinstaller again.

 

[Sébastien Gortais]

Wow nice, i succeed to update every component now !

However, even if i thought this would correct my initial bug

Oct 23 11:28:51 ns3357925 qmail: 1508750931.267639 delivery 783: deferral: Sorry,_I_wasn't_able_to_establish_an_SMTP_connection._(#4.4.1)/

It still doesn't seems to work.

Then i changed qmail into postfix (to match with other servers that we have) and did the same configurations, and now every mail still go in the mail queue with those errors in /var/log/maillog.
Everything seems to end with a time out

Oct 23 14:08:30 ns3357925 postfix/smtp[17290]: connect to mxb.ovh.net[178.33.124.188]:25: Connection timed out
Oct 23 14:08:30 ns3357925 postfix/smtp[17290]: 13DD055400A2: to=<[email protected]>, relay=none, delay=90, delays=0.11/0.01/90/0, dsn=4.4.1, status=deferred (connect to mxb.ovh.net[178.33.124.188]:25: Connection timed out)
Oct 23 14:08:30 ns3357925 postfix/smtp[17297]: connect to mx4.hotmail.com[65.55.33.135]:25: Connection timed out
Oct 23 14:08:50 ns3357925 postfix/smtpd[17256]: connect from unknown[154.126.209.230]

Is it a common bug or something ?

And another question : Is it safe to upgrade Plesk from 12.0.18 to 17.0.17 ?

 

[IgorG]

Looks like port 25 is firewalled. Have you checked it?
And yes, upgrade to even latest 17.5 version is safe.

 

[Sébastien Gortais]

I thought that as well but when i'm doing "telnet localhost 25" (and 587), both of them seems good.

# telnet localhost 25
Trying 127.0.0.1...
Connected to localhost.localdomain.
Escape character is '^]'.
220 ns3357925.ip-37-187-57.eu ESMTP Postfix (Ubuntu)

 

[Sébastien Gortais]

I don't know if this can help you, but i'm kinda lost actually.

~# iptables -L
Chain INPUT (policy DROP)
target     prot opt source               destination
fail2ban-plesk-login  tcp  --  anywhere             anywhere             multiport dports 8880,8443
fail2ban-BadBots  tcp  --  anywhere             anywhere             multiport dports http,https,7080,7081
fail2ban-apache  tcp  --  anywhere             anywhere             multiport dports http,https,7080,7081
fail2ban-plesk-roundcube  tcp  --  anywhere             anywhere             multiport dports http,https,7080,7081
fail2ban-plesk-horde  tcp  --  anywhere             anywhere             multiport dports http,https,7080,7081
fail2ban-plesk-courierimap  tcp  --  anywhere             anywhere             multiport dports imap2,imap3,imaps,pop3,pop3s
fail2ban-plesk-qmail  tcp  --  anywhere             anywhere             multiport dports smtp,ssmtp,submission
fail2ban-plesk-proftpd  tcp  --  anywhere             anywhere             multiport dports ftp,ftp-data,ftps,ftps-data
fail2ban-SSH  tcp  --  anywhere             anywhere             tcp dpt:ssh
ACCEPT     all  --  anywhere             anywhere             state RELATED,ESTABLISHED
REJECT     tcp  --  anywhere             anywhere             tcpflags:! FIN,SYN,RST,ACK/SYN state NEW reject-with tcp-reset
DROP       all  --  anywhere             anywhere             state INVALID
ACCEPT     all  --  anywhere             anywhere
ACCEPT     udp  --  anywhere             anywhere
ACCEPT     tcp  --  anywhere             anywhere
DROP       udp  --  li814-243.members.linode.com  anywhere
DROP       udp  --  23.247.2.11          anywhere
DROP       udp  --  31.202.212.95.format-tv.net  anywhere
DROP       udp  --  69.30.248.162        anywhere
DROP       udp  --  78.138.104.178       anywhere
DROP       tcp  --  li814-243.members.linode.com  anywhere
DROP       tcp  --  23.247.2.11          anywhere
DROP       tcp  --  31.202.212.95.format-tv.net  anywhere
DROP       tcp  --  69.30.248.162        anywhere
DROP       tcp  --  78.138.104.178       anywhere
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:12443
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:11443
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:11444
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:8447
ACCEPT     tcp  --  80.157.adh.rural-it.org  anywhere             tcp dpt:8443
ACCEPT     tcp  --  LMontsouris-657-1-171-178.w82-127.abo.wanadoo.fr  anywhere             tcp dpt:8443
ACCEPT     tcp  --  LAubervilliers-656-1-74-248.w82-127.abo.wanadoo.fr  anywhere             tcp dpt:8443
ACCEPT     tcp  --  80.157.adh.rural-it.org  anywhere             tcp dpt:8880
ACCEPT     tcp  --  LMontsouris-657-1-171-178.w82-127.abo.wanadoo.fr  anywhere             tcp dpt:8880
ACCEPT     tcp  --  LAubervilliers-656-1-74-248.w82-127.abo.wanadoo.fr  anywhere             tcp dpt:8880
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:http
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:https
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:ftp
ACCEPT     tcp  --  176-57-32-24.as16211.net  anywhere             tcp dpt:ssh
ACCEPT     tcp  --  80.157.adh.rural-it.org  anywhere             tcp dpt:ssh
ACCEPT     tcp  --  LMontsouris-657-1-171-178.w82-127.abo.wanadoo.fr  anywhere             tcp dpt:ssh
ACCEPT     tcp  --  LAubervilliers-656-1-74-248.w82-127.abo.wanadoo.fr  anywhere             tcp dpt:ssh
ACCEPT     tcp  --  sal63-2-88-176-45-187.fbx.proxad.net  anywhere             tcp dpt:ssh
ACCEPT     tcp  --  mail.crt-bourgogne.fr  anywhere             tcp dpt:ssh
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:submission
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:smtp
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:ssmtp
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:pop3
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:pop3s
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:imap2
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:imaps
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:poppassd
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:mysql
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:postgresql
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:9008
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:9080
ACCEPT     udp  --  anywhere             anywhere             udp dpt:netbios-ns
ACCEPT     udp  --  anywhere             anywhere             udp dpt:netbios-dgm
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:netbios-ssn
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:microsoft-ds
ACCEPT     udp  --  anywhere             anywhere             udp dpt:openvpn
ACCEPT     udp  --  anywhere             anywhere             udp dpt:domain
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:domain
ACCEPT     icmp --  anywhere             anywhere             icmptype 8 code 0
ACCEPT     all  --  anywhere             anywhere

Chain FORWARD (policy DROP)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere             state RELATED,ESTABLISHED
REJECT     tcp  --  anywhere             anywhere             tcpflags:! FIN,SYN,RST,ACK/SYN state NEW reject-with tcp-reset
DROP       all  --  anywhere             anywhere             state INVALID
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere

Chain OUTPUT (policy DROP)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere             state RELATED,ESTABLISHED
REJECT     tcp  --  anywhere             anywhere             tcpflags:! FIN,SYN,RST,ACK/SYN state NEW reject-with tcp-reset
DROP       all  --  anywhere             anywhere             state INVALID
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere

Chain fail2ban-BadBots (1 references)
target     prot opt source               destination
RETURN     all  --  anywhere             anywhere

Chain fail2ban-SSH (1 references)
target     prot opt source               destination
RETURN     all  --  anywhere             anywhere

Chain fail2ban-apache (1 references)
target     prot opt source               destination
RETURN     all  --  anywhere             anywhere

Chain fail2ban-plesk-courierimap (1 references)
target     prot opt source               destination
RETURN     all  --  anywhere             anywhere

Chain fail2ban-plesk-horde (1 references)
target     prot opt source               destination
RETURN     all  --  anywhere             anywhere

Chain fail2ban-plesk-login (1 references)
target     prot opt source               destination
RETURN     all  --  anywhere             anywhere

Chain fail2ban-plesk-proftpd (1 references)
target     prot opt source               destination
REJECT     all  --  222.216.202.6        anywhere             reject-with icmp-port-unreachable
RETURN     all  --  anywhere             anywhere

Chain fail2ban-plesk-qmail (1 references)
target     prot opt source               destination
RETURN     all  --  anywhere             anywhere

Chain fail2ban-plesk-roundcube (1 references)
target     prot opt source               destination
RETURN     all  --  anywhere             anywhere

 

[Sébastien Gortais]

UPDATE :

soyoustart.com have tagged my server ip as "SPAM", after a request everything is unlock !!!!

Thank you Igor for your time and help if i could i would bring you a cookie and a coffee.