I’ve tried turning off my PC firewall and other people can’t log into my webmin https://46.43.15.187:10000
I am not sure what your setup is, when you say pc what do you mean?
Is this a server you are running at home?
Is webmin running in a virtual machine?
My PC is at home. I am running my website on a server I rent which is based elsewhere. I use putty from my PC to access the server ( 46.43.15.187). The PC is running AVG antivirus. Webmin is running on the server that I use to maintain my website (mainly SQL stuff). I access Webmin from my home PC. The server I think is a virtual machine.
Wait, what?
Why would you install it? If you didn’t have it installed it obviously could not be the source of the problem!
1 Like
Your pc firewall is not the problem
Your home router is not the problem.
I think it may be SSL I was logging in via just http: maybe http has been disabled now and only https is available. I’m now sure if my webmin SSL has been turned. I converted my site to SSL but I had no idea what I was doing or how it actually worked.
I mean on the server
systemctl stop ufw test it
then
systemctl start ufw
I tried on the server no change.
There firewall somewhere blocking that port
use this command to see if the server is listening on that port
lsof -i:10000
You never set any IP access control on webmin?
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
miniserv. 6748 root 5u IPv4 4570425 0t0 TCP *:webmin (LISTEN)
miniserv. 6748 root 6u IPv6 4570426 0t0 TCP *:webmin (LISTEN)
miniserv. 6748 root 7u IPv4 4570427 0t0 UDP *:10000
I don’t remember setting any IP access control on webmin. Certainly not in the last week.
That the issue, you set it a while ago, for some reason your IP changes at home due to your ISP and you can get locked out.
check /etc/webmin/miniserv.conf and look for allow=
with ip set in there, if its there then delete that line and restart webmin
Else you may have to contact support at where you have the server and ask them if there is a firewall before the server.
No ipadress in miniserv.conf:
port=10000
addtype_cgi=internal/cgi
realm=Webmin Server
logfile=/var/webmin/miniserv.log
errorlog=/var/webmin/miniserv.error
pidfile=/var/webmin/miniserv.pid
logtime=168
ppath=
ssl=0
no_ssl2=1
no_ssl3=1
no_tls1=1
no_tls1_1=1
ssl_honorcipherorder=1
no_sslcompression=1
env_WEBMIN_CONFIG=/etc/webmin
env_WEBMIN_VAR=/var/webmin
atboot=1
logout=/etc/webmin/logout-flag
listen=10000
denyfile=.pl$
log=1
blockhost_failures=5
blockhost_time=60
syslog=1
ipv6=1
session=1
premodules=WebminCore
userfile=/etc/webmin/miniserv.users
keyfile=/etc/webmin/miniserv.pem
passwd_file=/etc/shadow
passwd_uindex=0
passwd_pindex=1
passwd_cindex=2
passwd_mindex=4
passwd_mode=0
preroot=gray-theme
passdelay=1
failed_script=/etc/webmin/failed.pl
logout_script=/etc/webmin/logout.pl
login_script=/etc/webmin/login.pl
cipher_list_def=1
sudo=1
logouttimes=
root=/usr/share/webmin
mimetypes=/usr/share/webmin/mime.types
server=MiniServ/2.105
As this installation is on a PC at home can you connection to it via the loopback interface (localhost)
try and connect via that, with a bit of luck your local IP will be displayed (unless you changed it to something else) from that you can do some diagnosis on the router network just to confirm it’s firewall is correct
example (vodaphone) but most routers have a page similar to this
once you have checked that the port mapping is correct i.e ports 10000-10100 are mapped to your PC try and log in like this
@shoulders so you have been round and checked then ? There has been in the past a user added a second router, rather than a network switch to his network as an extender and his webmin box was wired to the second router. The fix was removing the second router & replacing with a switch. Not saying this is the error here, just saying home networks can be difficult to diagnose.
I think the server is not at home from what he said. Elsewhere may have another firewall.
sorry missed that … thanks
@PaulSingleton have you asked your VPS provider if they can see any blocked ports? I am sure with providers like cloudflare they can block port 10000, maybe your company has just changed their policy and not told you.
Your websites and SSH are running so it is not a routing issue. This is definitely a blocked port issue.
My VPS provider says: “While checking, I can see there is no OnApp platform firewall enabled for the VM. Hence it is clear that no changes were made from our end.”
you need to check iptables directly to see what is blocking port 10000.
Most of the firewalls out their will be front for iptables
Google is your friend
- Troubleshooting Websites | Virtualmin — Open Source Web Hosting Control Panel
- https://www.bing.com/search?form=MOZLBR&pc=MOZI&q=check+which+port+is+blocked+with+iptables
- https://www.linuxquestions.org/questions/linux-software-2/how-to-check-if-a-port-is-allowed-in-iptables-827943/
- How to see what port was blocked in iptables log file? - Unix & Linux Stack Exchange
This is just some random links
I’m not sure what you mean but port 10000 is closed to the internet.
when I run:
nc -v 46.43.15.187 10000
I get:
nc: connectx to 46.43.15.187 port 10000 (tcp) failed: Connection refused
where were you running netcat from? if you are running it from your PC it is pointless.