Can't even get login screen up on port 1000

Virtualmin
1

Alma Linux 8
Virtualmin 7.20.2
VPS
3 GB RAM
75 GB storage
Fresh current (v8) Linux install

No errors on Virtualmin install

We can see the default Web page at port 80, but we cannot connect to the VPS on port 10000.

No errors on port 10000 from firewall.
Times out on connect by port 10000 though.
(Timeout is the specific browser error.)
( http://[IPv4]:10000 )

We do get to the log-in screen on computers if they don’t block Google, so the install worked.

Obviously it’s a firewall issue but what about the firewall?

Only errors came from blocking Google.
We block EVERY Google IPv4 network and all of IPv6.

Is Google requisite to using Virtualmin?
Google wasn’t listed as a requirement.

Every firewall block, on our side, mandatorily generates an error in the log, so the absence of errors almost looks like a port drop on the VPS end.

We just deleted the install but could we have installed Virtalmin in a manner that does not require Google?

2

Does your provider have a firewall with ports you need to open?

3

whats google got to do with anything?

1 Like
4

nothing AFAIK and we also take steps to block it - however many - too many IMO (but each to their own) use it for so called analytics/captcha and such like - watch out for a firewall re-installed by a VM supplier.

5

Not that I’m aware of. We can connect to cPanel, on the same hosting
company, on 2083, 2087, 2096, etc, with no problem.

We opened port 10000 on our firewalls in the same manner.

However, I had forgotten to try to put a secure workstation, we might
use to manage a server, on the outer routers and try that. I cancelled
the subscription but I might re-purchase Virtualmin to try that…and
not be so hasty next time.

We’re putting this on an empty test server.

I can connect by virtual terminal to that server from the hosting
provider and also try to check the logs on the test server for rejected
connection errors.

I should have done that.

6

I just realized, that has to be a “No” because we could get to the login
screen on an SBC toy Windows computer with no firewall at all.

Obviously we didn’t log in because it’s an unsecured computer and it’s
Microsoft but we could not have gotten that far if the host had a
firewall.

Good point though.

7

Of course not.

8

There are lots of Virtualmin servers out there that work ‘out of the box’ with the default configuration. If you followed the docs then chances are it wasn’t something on the server.

9

You were right, just FYI.

We have multiple layers of networks and sometimes the respective
firewalls don’t play well together…or something just plain gets
over-looked, as was the case in this situation.

What I was referring to was CAPTCHA. If someone institutes Google’s
CAPTCHA (not CloudFlare’s CAPTCHA), we’d never see it AND we’d never be
able to get to whatever CAPTCHA is “protecting”. People do that…

Thx.

10

You’re right. The install went just as it should have. The install
wasn’t the problem.

It was an overlooked firewall issue. We thought it might be a Google
CAPTCHA issue. We’d never seen Virtualmin B4.

We block EVERY Google IP we can find, which is quite extensive. We
haven’t found any new Google IP’s recently.

Kind regards,

11

Good question!

We block every one of Google’s IP’s (that we can find which is a HUGE
amount). We have our reasons.

So if a Web site, etc. is “protected” by Google’s CAPTCHA (as opposed to
CloudFlare’s CAPTCHA), we’d never see any sign of the the CAPTCHA
graphics, logo, etc. We would have no way of knowing it’s there. We
just wouldn’t be able to get to whatever the CAPTCHA is “protecting”.
(No one thought to bring the server IP up on a phone with no
firewall…)

Since we’d never seen Virtualmin B4, we didn’t know if Google CAPTCHA
might be the reason we couldn’t bring up the login screen.

It wasn’t…

Kind regards,

12

Nah. It was one of our firewalls.

We have software firewalls, onion-ringed networks, nested hardware
firewalls, etc., and the problem just got overlooked.

Some hosters do have some weird situations, you’re right about
that…just not this one.

It was totally our fault.

Kind regards,

2 Likes
13

Virtualmin has nothing to do with google so no that not a reason. Google authentication is the optional service that virtualmin uses as far as I know.
Good luck with what your trying to do, as its beyond me.

14

Off topic, slightly, all of these Google IPs you have, is there a public list that I can download or look at. Maybe there is a GitHub where the list is kept up to date?

Thanks

15

still “off-topic” slightly but in response … I doubt it. Given the power of Google (just like China) you would be chasing your tail

16

google actually publish it Obtain Google IP address ranges - Google Workspace Admin Help

I think mainly to stop there ip getting blocked :slight_smile:

1 Like