status of services in ovh monitoring always comes out in red

Question

status of services in ovh monitoring always comes out in red

Navigation

#1 by (0 votes)
#2 by (0 votes)

0

I have a vps kvm openstack in OVH. The status of services in ovh monitoring always comes out in red and I think the rules are well configured in the firewall.

Rules:

/sbin/iptables-A INPUT -i ens3 -m state --state ESTABLISHED,RELATED -j ACCEPT
/sbin/iptables -A INPUT -i ens3 -p tcp --dport 25 -j ACCEPT
/sbin/iptables -A INPUT -i ens3 -p tcp --dport 53 -j ACCEPT
/sbin/iptables -A INPUT -i ens3 -p udp --dport 53 -j ACCEPT
/sbin/iptables -A INPUT -i ens3 -p tcp --dport 80 -j ACCEPT
/sbin/iptables -A INPUT -i ens3 -p tcp --dport 110 -j ACCEPT
/sbin/iptables -A INPUT -i ens3 -p tcp --dport 443 -j ACCEPT
/sbin/iptables -A INPUT -i ens3 -p tcp --dport 21 --source xx.xx.xx.xx -j ACCEPT
/sbin/iptables -A INPUT -i ens3 -p tcp --dport 22 --source cache.ovh.net -j ACCEPT
/sbin/iptables -A INPUT -i ens3 -p tcp --dport 22 --source xx.xx.xx.xx -j ACCEPT
/sbin/iptables -A INPUT -i ens3 -p icmp --source proxy.ovh.net -j ACCEPT
/sbin/iptables -A INPUT -i ens3 -p icmp --source proxy.p19.ovh.net -j ACCEPT
/sbin/iptables -A INPUT -i ens3 -p icmp --source proxy.rbx.ovh.net -j ACCEPT
/sbin/iptables -A INPUT -i ens3 -p icmp --source proxy.rbx2.ovh.net -j ACCEPT
/sbin/iptables -A INPUT -i ens3 -p icmp --source AAA.BBB.CCC.250 -j ACCEPT
/sbin/iptables -A INPUT -i ens3 -p icmp --source AAA.BBB.CCC.251 -j ACCEPT
/sbin/iptables -A INPUT -i ens3 -p icmp --source ping.ovh.net -j ACCEPT
/sbin/iptables -A INPUT -i ens3 -p tcp --source 192.168.0.0/16 -j ACCEPT
/sbin/iptables -A INPUT -i ens3 -p udp --source 192.168.0.0/16 -j ACCEPT
/sbin/iptables -A INPUT -i ens3 -j REJECT

Message:

systemctl start iptables

Failed to start iptables.service: Unit iptables.service not found.

'   The operating system is Debian 9.

debian vps iptables

asked by Ferran 05.11.2017 в 21:16

source

2 answers

Select Change event does not work on Onload How do I look for a label by printing its ruby content?

score 0 · Answer 1

About:

systemctl start iptables

Failed to start iptables.service: Unit iptables.service not found.

It's normal because iptables is not a service. If not a demon. As I do not have much experience with OVH and its monitoring, being a rookie with OVH, I am going to discuss the issue of the firewall with an experienced sysadmin with the OVH ISP. Thanks,

Install UFW and the same thing keeps happening ...

score 0 · Answer 2

Good morning!

I have a VPS with OVH and it was solved by authorizing some IP addresses that indicate them within your client area. If you notice, below the status of your services that you see now marked with a red X puts you "Monitoring SLA". If you click on the "..." that is right next to it and then on "Monitoring SLA of IP addresses". Those are the addresses / blocks that you must authorize.

Greetings.