Cloudron Restore. Problem with Bunny DNS

[matix131997]

Hello I am reporting a problem with restoring a server from a backup. During the restore it is throwing an Bunny API error.

2024-06-22T13:00:16.775Z box:dns registerLocation: Get error. retryable: true. getaddrinfo EAI_AGAIN api.bunny.net
2024-06-22T13:00:16.778Z box:provision restoreTask: error. BoxError: getaddrinfo EAI_AGAIN api.bunny.net at registerLocation (/home/yellowtent/box/src/dns.js:226:15) at process.processTicksAndRejections (node:internal/process/task_queues:95:5) at async /home/yellowtent/box/src/dns.js:264:13 at async promiseRetry (/home/yellowtent/box/src/process.processTicksAndRejections (node:internal/process/task_queues:95:5) at async /home/yellowtent/box/src/dns.js:264:13 at async promiseRetry (/home/yellowtent/box/src/promise-retry.js:17:20) at async Object.registerLocations (/home/yellowtent/box/src/dns.js:255:9) at async restoreTask (/home/yellowtent/box/src/provision.js:186:13) {reason: 'Network Error', details: {} }

[matix131997]

This is a very strange situation... OVH firewall is to blame.....

Now I don't know how I'm supposed to set it up correctly myself So far in most of the hosting without a problem

[nebulon]

Cloudron configures the server side firewall already, so you might as well just disable the OVH one if possible or allow everything.

[girish]

@matix131997 It seems DNS lookup of api.bunny.net is failing on the server.

Check if a) unbound is running under Services and b) Does host api.bunny.net work on the server ?

[matix131997]

I did another firewall test today. OVH's firewall is working strangely. I set the rule differently and it worked for an hour - there was limited access to SSH, and the rest worked. After an hour, everything stopped working.

Why did I want to do this?
Generally I wanted to restrict port 22 to a given IP address - VPN, having additional security with a key. I wanted to from the iptables level but I am aware that Cloudron manages and is hard to restrict.

Well, unless you add an option e.g.: in the Network tab item to add IP addresses to ports 22 to iptables.

[girish]

Sorry, but I am not following how name resolution is dependent on port 22. Name resolution uses UDP port 52 and is completely different from SSH which is TCP port 22 .