Whitelist priority

Issue #862 new
Rafael Batiati created an issue

IP addresses have been blocked even when they are added to the “whitelist”, it appears that an automatically generated blacklist entry due to “too many invalid connections” overrides the whitelist entry.

Reason: Integrated-tests server attempts to send emails with the wrong password propositionally.

Comments (7)

  1. SH repo owner

    Hello Rafael, what exact procedure will hit this issue?

    Once connection is whitelisted/blacklisted server will not generate any block. You can check if connection is whitelisted/blacklisted in logs…

  2. Rafael Batiati reporter

    Just trying to log in on the administration console

    My IP is whitelisted

    But it is also blacklisted, due invalid connections

    I’d expected the whitelist priority over the automatically generated blacklist entry.

    Also, it’s only on Administration console, the webmail works fine.

  3. SH repo owner
    • If you delete record in autogenerated blacklist it will create again?
    • both manual and automatic records are with mask /32 ?

    I am trying to find moment when this item generates because manual whitelist has highest priority and whole guard subsystem should be disabled once this flag is set up

  4. Rafael Batiati reporter

    Yes, if I delete the autogenerated blacklist record it will be recreated again because my CI server tries to SMTP with the wrong user/password as part of its test cases.

    Both records are with /32

    I just deleted the autogenerated entry, and I will send you the logs when it is recreated.

    I’m using this settings:

  5. Rafael Batiati reporter

    hi,

    A new blacklist record was generated again. I tried to find something relevant in the logs, but I couldn’t figure it out.

    There is some log you want me to send?

  6. Log in to comment