Transfer Tool and Config Server

[coolcom]

I would appreciate some clarification on enabling ports for the Transfer Tool.

I have placed ports 22 and 2087 in Config Server's CC_Allow_Ports_TCP for CA and US only.

However, that is preventing the Transfer Tool from connecting...

" The system failed to connect to “xxx.xxx.com” on port “22” because of an error: Connection refused Failed to establish session and parse security token: 599 Internal Exception (Could not connect to 'xxx.xxx.com:2087': Connection timed out ) at /usr/local/cpanel/3rdparty/perl/536/cpanel-lib/cPanel/PublicAPI.pm line 526.

When I place those two ports in the TCP_IN field instead, for the losing server (the one I am transferring out of), the Transfer Tool works fine.

So if both servers are in the allowed country, can someone explain why I cannot place those two ports in CC_Allow_Ports_TCP field as opposed to TCP_IN?

 

[ffeingol]

Why not make life easy and either just add to add the new servers IP to /etc/csf/csf.allow (to allow the IP to any port) or you can add more detailed lines to allow only port 22. If you do it in csf.allow it's only adding that one IP.

 

[cPRex]

cPanel doesn't make our distribute ConfigServer products, so this is likely a question for them. I think the real answer here is going to be that country code or geolocation IP detection isn't perfect.

 

[coolcom]

Yes, I agree... likely something I have to bring up with Config Server. We had the same issue with a site builder program not being able to function due to FTP restrictions. Will let you know what I find.

 

[coolcom]

Why not make life easy and either just add to add the new servers IP to /etc/csf/csf.allow (to allow the IP to any port) or you can add more detailed lines to allow only port 22. If you do it in csf.allow it's only adding that one IP.

I understand your logic, and in most cases would do so... but this is not a one time issue. We move accounts around for various reasons, so it's not just the one server.