portsentry not working properly

[thisisit3]

I believe that portsentry is not working properly on my system (cPanel).

Looking at the logs, i found out that some IP addresses could access my system even though portsentry had banned them.

For example, i looked at the banned IP's reported by portsentry in /var/log/messages and /var/portsentry/portsentry.history and compared them to the output of:

iptables --list -n

it seems that SOME of them are listed, while others are not.... hmm weird.

i've now edited my /etc/portsentry/portsentry.conf and switched from KILL_ROUTE to KILL_RUN_CMD. I'll let it run for a while and see if it works better this way (they both execute the same iptables command).

[thisisit3]

ah...

/sbin/iptables -I INPUT -s 75.47.99.250 -j DROP
iptables: Memory allocation problem

hmm this vps has reached its QoS limit 'numiptent' :P