LinkPoint declining all orders - HostGator

[KADesign]

I am also having an issue with LinkPoint declining all my orders. I recently had my site scanned for PCI Compliance and after sending the failing results to my host they tweaked things and it passed. Well now my payment gateway is declining every card that is run on my site and LinkPoint said the requests are not even coming through.
I once again emailed my host and I received the following reply requesting additional information. The problem is, I have no idea how the gateway works which is what they are asking me.

Can someone please tell me what I need to tell them?
I am using 1.3.8a.
Do I also need the fix mentioned in this post? I haven't had any issues until this weekend.
Also... I use HostGator, in case some else is also experiencing the same issue. I have two sites on two different accounts and the same thing is happening on both sites.
The following is the email from them...

Can you provide us with some details on how your payment gateway works exactly? We have recently rolled out some new mod_security rules that could be blocking this, however, it appears that your domains hitting several of these rules, and as such make me believe that some of these are not false positives. Any insight would allow us to quickly determine what the cause might be so that we can assist in getting this working again.

Thank you in advance for any help.

Kelly

[DrByte]

How it works:
1. The credit card number is collected from the customer (via SSL-protected page)
2. The number is submitted via CURL (over SSL) to the Linkpoint server ... on port 1129 (meaning 1129 needs to be open on the firewall)
3. The gateway sends a response back, and the cart stores the order.

mod_security should only be able to affect it at step #1 ... but if that's the case, it's being too restrictive.

If it's never getting to the linkpoint server, then step 2 is failing ... meaning either CURL isn't configured to run over SSL, or port 1129 isn't open on the firewall/router.



Semi-related FAQ article: https://www.zen-cart.com/tutorials/i...hp?article=298


One way to test the CURL/SSL setup is to look in your /extras file for curltest.php, and run it from your browser, using an extra parameter, like this:

www.my_site.com/extras/curltest.php?linkpoint=1

If you get SSL or CURL errors, something's broken in those.
If you get a timeout error then the firewall is blocked.
If you get a message from Linkpoint about invalid account number, then it means you talked to the linkpoint server successfully (ie: the error is from *their* server, meaning your communications is open)

What happens when you do that test?

What happens if you turn on the "Debug Log To File" option in your admin area inside the linkpoint module settings? The logs will be stored in the /cache folder, as long as it's writable.


Ask them to tell you "which" rules are being triggered ... and the log details that indicate such.

[Website Rob]

Sounds like a bit of 'over tweaking' on the part of your Hoster. You should see if you can get copies of the error output regarding your site and mod_sec Rules in question. You may not know that they mean but by posting them here you get can get some knowledgeable feedback on them.

Also, do you use another Payment method type and does that have problems?

[pinkchalkstudio]

Thanks for posting this. I just encountered the exact same problem after installing Config Server Firewall on my Host Gator server.

The port to open is 1129 (as per above post and the tutorials page). I added the port to the TCP_IN and TCP_OUT lists in the firewall configuration file.

In the event someone else encounters this I'll also mention that my customers were getting the following error:

2006 MySQL server has gone away in: [select customers_email_format from customers where customers_email_address='[email protected]']
2006 MySQL server has gone away in:
[select count(*) as total from sessions where sesskey =
'xxx...']

Total red herring message. I knew my Paypal customers were checking out successfully and that the SQL statement ran fine from the console so I assumed it was something with Linkpoint and the firewall.

Thanks for that little trick on pinging Linkpoint Dr. Byte. Made the testing SUPER EASY!!