We are encountering an issue with our VPS Almalinux 8.7, which is equipped with Webuzo and CSF.
Despite not having any rules in place to block them, the IP blocking section under Webuzo's Security settings displays the recursive DNS of Hetzner along with Wildcard entries multiple times. These IPs should not be blocked under any circumstances. (see pictures bellow)
It is unclear whether these IPs are genuinely blocked, as the Wildcard entries are shown as blocked, which should prevent access to the server. However, we can still access the server from various tested IPs. We suspect that the display of blocked IPs in Webuzo may be a bug.
We have made attempts to whitelist the IPs and verified that the csf.deny file is empty. However, upon removing the blocked IPs from the Security/IP Blocked section in the UI and refreshing the page, the IPs reappear as blocked.
- When we disable CSF, the IPs do not appear as blocked.
- When we enable CSF, the IPs appear as blocked.
We have tested this with different providers and encountered the same issue.
- Hetzner
- Upcloud
- DigitalOcean
We also tried using Ubuntu, where only the Wildcard IPs were repeatedly displayed as blocked, which is still abnormal.
The only workaround we found was to manually whitelist the IP in IPtables using the following command:
iptables -A INPUT -p tcp -s 185.12.64.1 -j ACCEPT
iptables -A INPUT -p udp -s 185.12.64.1 -j ACCEPT
iptables -A INPUT -p tcp -s 185.12.64.2 -j ACCEPT
iptables -A INPUT -p udp -s 185.12.64.2 -j ACCEPT
This method, however, is not ideal.
We have submitted a ticket, but the development team is currently unavailable to address the issue.
Given that we have encountered the same problem across various servers, it is likely that other users with Almalinux 8.7, Webuzo, and CSF setups are also experiencing this issue.
We hope that filing a bug report will expedite the resolution process and allow us to proceed with our website deployment.
Kind regards.
