Licensing issues, probably due to not being able to reach the needed server

Hello,

I have been using CWP Pro for several years now for myself and some clients.
This is working as expected, very good job there for the team.

I'm busy making a whitelist for services that should be able to connect to specific servers for specific tasks.
The CWP Pro license on one of the machines that is participating suddenly got expired .

Since the firewall on that machine has been setup very strict i'm guessing it needs to be allowed certain connections to maybe certain ports.

Is there anyone who can telle me what ip(s) to exclude from the deny list?

Kind regards

Another server also lost the license!

So please let me know what ip addres(ses) to allow for Centos webpanel.

ty very much

Hello,

I have been using CWP Pro for several years now for myself and some clients.
This is working as expected, very good job there for the team.

I'm busy making a whitelist for services that should be able to connect to specific servers for specific tasks.
The CWP Pro license on one of the machines that is participating suddenly got expired .

Since the firewall on that machine has been setup very strict i'm guessing it needs to be allowed certain connections to maybe certain ports.

Is there anyone who can telle me what ip(s) to exclude from the deny list?

Kind regards

As shown below it won't connect even allowing ip 37.187.72.216 and putting that ip in the ignore list won't let it register. there is a block for the subnet 37.187.xxx.xxx in my csf.deny file.

sending a ping to 37.187.72.216 also has many drops over 50% (both from server ip as from residential ip)
Allowing 37.187.72.216 removed the below error

Code: [Select]

PHP Warning:  file_get_contents(http://centos-webpanel.com/webpanel/versions/el7.txt): failed to open stream: Connection refused in /usr/local/cwpsrv/htdocs/resources/admin/include/cron.php on line 0
PHP Notice:  Undefined offset: 1 in /usr/local/cwpsrv/htdocs/resources/admin/include/cron.php on line 0
Redirecting to /bin/systemctl restart cwpsrv.service
But the register errors stay alive

Code: [Select]

sh /scripts/update_cwp


====================================================
============= CentOS Web Panel Cron ================
====================================================


###########################
Firewall Flush Daily Blocks
###########################


######################
Update Server Packages
######################
PHP Warning:  file_get_contents(http://centos-webpanel.com/webpanel/versions/el7.txt): failed to open stream: Connection refused in /usr/local/cwpsrv/htdocs/resources/admin/include/cron.php on line 0
PHP Notice:  Undefined offset: 1 in /usr/local/cwpsrv/htdocs/resources/admin/include/cron.php on line 0
Redirecting to /bin/systemctl restart cwpsrv.service

** (pkttyagent:27707): WARNING **: 12:43:04.348: Unable to register authentication agent: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Cannot determine user of subject
Error registering authentication agent: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Cannot determine user of subject (polkit-error-quark, 0)
Redirecting to /bin/systemctl restart httpd.service

** (pkttyagent:27777): WARNING **: 12:43:04.594: Unable to register authentication agent: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Cannot determine user of subject
Error registering authentication agent: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Cannot determine user of subject (polkit-error-quark, 0)
Redirecting to /bin/systemctl reload httpd.service

** (pkttyagent:27939): WARNING **: 12:43:09.118: Unable to register authentication agent: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Cannot determine user of subject
Error registering authentication agent: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Cannot determine user of subject (polkit-error-quark, 0)

** (pkttyagent:28065): WARNING **: 12:43:11.029: Unable to register authentication agent: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Cannot determine user of subject
Error registering authentication agent: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Cannot determine user of subject (polkit-error-quark, 0)
Redirecting to /bin/systemctl reload nginx.service

** (pkttyagent:28095): WARNING **: 12:43:11.134: Unable to register authentication agent: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Cannot determine user of subject
Error registering authentication agent: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Cannot determine user of subject (polkit-error-quark, 0)

** (pkttyagent:28113): WARNING **: 12:43:11.212: Unable to register authentication agent: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Cannot determine user of subject
Error registering authentication agent: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Cannot determine user of subject (polkit-error-quark, 0)
Redirecting to /bin/systemctl reload httpd.service

** (pkttyagent:28142): WARNING **: 12:43:11.332: Unable to register authentication agent: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Cannot determine user of subject
Error registering authentication agent: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Cannot determine user of subject (polkit-error-quark, 0)


allowing 37.187.72.216 does activate the pro license again but the errors in the console stay.

Any idea on how to solve the remaining errors?

P.S.
It looks a bit weird that the hoster of these ip's is a reseller from cpanel 

Hi, try to open a ticket to CWP support and send them your server IP. Maybe it blocked.

Hi,
Why are they blocking my IP when I have never visited before?

Your server pings their licensing server to validate your CWP Pro license.

And as JeroenL discovered, CSF can be overly aggressive and block different IPs and ranges. And be careful about what countries you block -- their data center is in France but the dev team is eastern European. So I have blocked Romania and Bulgaria in the past due to hacking sprees out of those countries. But it could interfere with their support attempts if you need their help. So best just to block the big 3 culprits, based on my experience:

Code: [Select]

CC_DENY = "CN,RU,KP"