Setting Sys-Firewall Area Rules

CQT

Setting Sys-Firewall Area Rules from India, Russia, Vietnam, Urkaine, Honkong cannot be set as a blockade

aaPanel_Jose

CQT
Reinstalling the plugin can solve this problem (Will not affect the rules)

gistapo

Issue still presented. SYS Firewall uninstall/install doesn't help.

System: CentOS 7.9.2009(Py3.7.9)
aapanel v6.8.24
SYS Firewall v2.6

aaPanel_Kern

gistapo
Hi, thanks for your feedback. We will test it and fix it.

AApGoood2

Hello

Apart from what the partner says, it also happens to me. I have exactly the same version as him but I'm using Ubuntu server.

It also happens to me that when I block the country Russia. The server freezes and I have to restart it.
And it's not because of the ip of my server, because the ip of the server is from France. And my IP is from Spain.

For now it does not happen to me in the other countries, but I have not tried them all.

Are the IP ranges of the countries of this tool up to date?

Greetings

aaPanel_Kern

AApGoood2
Hello, this tool will update the ip range from time to time. It cannot guarantee that each ip is accurate. Please make sure that your ip is open when operating the system firewall.

AApGoood2

As I said. The server's IP is a French IP and mine a Spanish.

As I say, when I try to block the country Russia, the VPS server was blocked. If I enter my VPS server remotely, it is fully blocked, until I am forced a reset, it is not solved. If it were for the blockade of my IP, I would have to let me in VNC, since I enter the supplier's website and they have another IP and in this case it is not as I say.

Greetings

aaPanel_Kern

AApGoood2
Hello, try to open the ip of the system firewall and change 192.168.247.55 to your ip
ufw allow from 192.168.247.55
ufw reload

firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.247.55" accept"
firewall-cmd --reload

AApGoood2

I repeat again. The IP is not the problem. It is the SYS-Firewall plugin

I have also found another bug, after trying to add other countries for testing. For example I add CHINA and do an iptables -S the following is given away.

-A INPUT -m set --match-set CN src -j DROP

But the moment I restart the server (VPS) and do an iptables -S again it disappears. If I go to the AAPANEL panel and go to the SYS-Firewal plugin and go to the country blocking tab again, the country CHINA is still added.

The plugin is definitely not working properly.

I'm going to disable it.

gistapo

AApGoood2 Mate, don't waste your time on them, they do not understand what you are saying, and don't try to actually investigate the problem if you use free version. I had completely the same issue as you, but I have added United States just to try how it works and lost web UI to aapanel, the only option was connecting via ssh to VPS hosting terminal and fix firewalld (SYS Firewall) issue. This aapanel does make incorrect changes with this area block feauture that leads to firewalld complete crash and it can not run anymore. In my case I get rid of the issue with following:

firewall-cmd --permanent --delete-ipset=US
sudo systemctl restart firewalld