Hello,
My Sabnzbd has been running on my Unraid server for years flawlessly.
Lately suddenly I have had all sorts of problems and messages from Sabnzbd.
Such as:
ERROR 4 hours ago [10/Jun/2021:19:45:34] ENGINE Error in HTTPServer.serve
Traceback (most recent call last):
File "/usr/lib/python3.9/site-packages/cheroot/server.py", line 1810, in serve
self._connections.run(self.expiration_interval)
File "/usr/lib/python3.9/site-packages/cheroot/connections.py", line 201, in run
self._run(expiration_interval)
File "/usr/lib/python3.9/site-packages/cheroot/connections.py", line 218, in _run
new_conn = self._from_server_socket(self.server.socket)
File "/usr/lib/python3.9/site-packages/cheroot/connections.py", line 272, in _from_server_socket
s, ssl_env = self.server.ssl_adapter.wrap(s)
File "/usr/lib/python3.9/site-packages/cheroot/ssl/builtin.py", line 277, in wrap
s = self.context.wrap_socket(
File "/usr/lib/python3.9/ssl.py", line 500, in wrap_socket
return self.sslsocket_class._create(
File "/usr/lib/python3.9/ssl.py", line 1040, in _create
self.do_handshake()
File "/usr/lib/python3.9/ssl.py", line 1309, in do_handshake
self._sslobj.do_handshake()
ssl.SSLError: [SSL: BAD_KEY_SHARE] bad key share (_ssl.c:1129)
WARNING 4 hours ago Refused connection from: 23.129.64.143 [Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)]
WARNING 7 hours ago Refused connection from: 167.248.133.54 [Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)]
WARNING 7 hours ago Refused connection from: 167.248.133.54 [None]
WARNING 13 hours ago Refused connection from: 188.161.162.34 [None]
WARNING a day ago Refused connection from: 74.120.14.53 [Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)]
WARNING a day ago Refused connection from: 74.120.14.53 [None]
WARNING 3 days ago Refused connection from: 74.120.14.40 [Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)]
WARNING 3 days ago Refused connection from: 74.120.14.40 [None]
WARNING 3 days ago Refused connection from: 167.248.133.38 [Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)]
WARNING 4 days ago Refused connection from: 188.161.163.175 [None]
I solved some of the problems and at the moment the only issues remaining are these errors coming up all the time and the fact that Sabnzbd won't automatically scan the watched folder anymore. But if I manually trigger a scan from the menu it detects files and starts downloading.
Any idea?
Sabnzbd is misbehaving lately
Forum rules
Help us help you:
Help us help you:
- Are you using the latest stable version of SABnzbd? Downloads page.
- Tell us what system you run SABnzbd on.
- Adhere to the forum rules.
- Do you experience problems during downloading?
Check your connection in Status and Interface settings window.
Use Test Server in Config > Servers.
We will probably ask you to do a test using only basic settings. - Do you experience problems during repair or unpacking?
Enable +Debug logging in the Status and Interface settings window and share the relevant parts of the log here using [ code ] sections.
Re: Sabnzbd is misbehaving lately
Your refused connections looks like your Sab is exposed to the internet. We tightened the security a lot in the last release so these ports scans were happening before too, you just didn't get a notice about it.
The ssl error I'm not sure, do you use https? Can you refresh the certificates?
The ssl error I'm not sure, do you use https? Can you refresh the certificates?
If you like our support, check our special newsserver deal or donate at: https://sabnzbd.org/donate
Re: Sabnzbd is misbehaving lately
You're SABnzbd is reachable from Internet. Do you know & want that?
is a robot from Internet, using a bad SSL setup
also a robot trying stuff
So first answer my question.
Plus: which version of SABnzbd are you using
Code: Select all
ssl.SSLError: [SSL: BAD_KEY_SHARE] bad key share (_ssl.c:1129)
Code: Select all
WARNING 3 days ago Refused connection from: 74.120.14.40
So first answer my question.
Plus: which version of SABnzbd are you using
Re: Sabnzbd is misbehaving lately
I always used https and opened ports on my router to access sabnzbd with IOS apps. These problems only started in the last 2 weeks.
Maybe I should do things differently?
And my version is 3.3.0
Please advise
Maybe I should do things differently?
And my version is 3.3.0
Please advise
Re: Sabnzbd is misbehaving lately
To get rid of robot scanners, the most easy thing is: on your router, do not forward 8080 from the outside to 8080 inside, but on the outside use a weird port like 8111 of 16161 (anything below 65000). That way, you limit the chance a robot finds you.
Plus, possibly:
Since SAB 3.3.0, SAB has more security built in ... read https://sabnzbd.org/wiki/extra/access-denied.html
Plus, possibly:
Since SAB 3.3.0, SAB has more security built in ... read https://sabnzbd.org/wiki/extra/access-denied.html
Re: Sabnzbd is misbehaving lately
Did it. Thought https, api key and login was enough. I will monitor the behavior now. Thankssander wrote: ↑June 11th, 2021, 1:22 am To get rid of robot scanners, the most easy thing is: on your router, do not forward 8080 from the outside to 8080 inside, but on the outside use a weird port like 8111 of 16161 (anything below 65000). That way, you limit the chance a robot finds you.
Plus, possibly:
Since SAB 3.3.0, SAB has more security built in ... read https://sabnzbd.org/wiki/extra/access-denied.html
Re: Sabnzbd is misbehaving lately
Yes, that is enough to make it secure. But what you saw were warnings by SAB and the underlying webserver about wrong/refused connections. So ... harmless, but indeed annoying. By changing the port, chances are now 100 times lower you get such robot scanners and thus warnings.
Re: Sabnzbd is misbehaving lately
If you want to disable the warnings, you can go into Config > Specials and disable "api_warnings".
If you like our support, check our special newsserver deal or donate at: https://sabnzbd.org/donate