One-time safe dog parameter configuration leads to the resolution process of the network disconnection

Before the company operation to the server installed the security dog software, I took over the server, also did not control it.

Recently the company has a PHP mall website to go online. I'll be ready for the AB stress test in the evening.

Just started to test, found Xshell and Nginx server connection disconnected, how can not even up. But other servers in the same network segment can connect normally (all servers are placed behind the same firewall and then Nat mapped out). From other node ping Nginx server can ping, Telnet is also pass, indicating that the server did not hang out, it is estimated that the firewall is in trouble.

SSH from other nodes to the Nginx server, log in and then first save the firewall rules,

Systemctl Save Firewalld.service

Cp/etc/sysconfig/iptables/etc/sysconfig/iptables.bak

Cp/etc/sysconfig/iptables.save/etc/sysconfig/iptables.save.bak

Systemctl Stop Firewalld.service

Vim opens a look/etc/sysconfig/iptables impressively found my home's IP address in the drop list. Later thought might be the problem of a safe dog, execute the sdui command, open the console of the security dog, the rule of monitoring DDoS can be relaxed (by default, an IP address is allocated 10 connections, this parameter is too small for the time of the pressure measurement. The modification process is not mapped here.)

After the parameters are changed, the firewall is started Systemctl start Firewalld.service, and Xshell is now able to connect to the server properly.

One-time safe dog parameter configuration leads to the resolution process of the network disconnection