Php scripts not work without sudo

[ganfi]

I installed php 8.2 and use php-fpm8.2.
So if I try to execute script with stream_socket_client function or another they'll return error. But if I connect to server via ssh and try to execute this script via terminal and sudo - all is work.
Why does it happen ?

 

[ganfi]

I forgot to add sceenshoot

 

[Ohm J]

this cause by csf firewall option "SMTP_BLOCK=ON".

you need to disable this option
...and disable csf in custombuild to prevent enable again when updating directadmin.

 

[ganfi]

this cause by csf firewall option "SMTP_BLOCK=ON".

you need to disable this option
...and disable csf in custombuild to prevent enable again when updating directadmin.

I use external SMTP service like gmail

 

[ganfi]

maybe something is wrong with my php-fpm config ?

 

[Ohm J]

I'm not talking to fixed your external service, just re-read again or google search "what's is csf firewall"

 

[ganfi]

I'm not talking to fixed your external service, just re-read again or google search "what's is csf firewall"

I checked rules in csf firewall and SMTP_BLOCK = "0"

 

[Ohm J]

ok... maybe something other rules blocked that's external server.

try searching block list.

csf -g "external server IP Address"

if still not found anything, just disable csf and re-check connection again

csf -x

re-enable with "csf -e"

 

[Ohm J]

More information between "root" amd normal user.

"root" can create connection without blocking from csf firewall even if there have some block rules.

Normal user will strict with firewall rules.

 

[ganfi]

ok... maybe something other rules blocked that's external server.

try searching block list.

csf -g "external server IP Address"

if still not found anything, just disable csf and re-check connection again

csf -x

re-enable with "csf -e"

This command return - No matches found

But if I disable csf all is work

 

[Ohm J]

yeah, I don't know what's the rules cause issued. Hire someone checking directly to your server is good idea.

because port 25, 465, 587 already enable by default, you might need to confirm in option "TCP_OUT", "TCP6_OUT".


Also, are you sure only this external connection have problem ?, gmail or hotmail working normally ?

 

[ganfi]

yeah, I don't know what's the rules cause issued. Hire someone checking directly to your server is good idea.

because port 25, 465, 587 already enable by default, you might need to confirm in option "TCP_OUT", "TCP6_OUT".


Also, are you sure only this external connection have problem ?, gmail or hotmail working normally ?

So it happens for any email service - gmail, mail trap and etc

 

[ganfi]

So the problem was with firewall, 465 port was blocked...