Page 1 of 1

IP in csf.allow with temporary block

Posted: 27 Feb 2018, 07:22
by delalibera
I'm have a problem with CSF over access to emails.

The client IP is in csf.allow but even so the client it is being temporarily blocked only to email access.

In other words, even the client ip being in csf.allow the client is being blocked temporarily.

I try to release the IP again but it does not appear as blocked, it seems to be only a temporary block.

The client accesses the site and webmail normally but can not log in to webmail, POP3 is blocked.

I need help.

This is a bug or exists a configuration in csf for that.

Re: IP in csf.allow with temporary block

Posted: 27 Feb 2018, 14:00
by delalibera
I need help.

At this moment a client can not access their emails but their ip is allow.

This is the message received from server.
________

Time: Tue Feb 27 10:10:45 2018 -0300
IP: 187.84.58.38 (BR/Brazil/187-84-58-38.bommtempo.inf.br)
Failures: 5 (smtpauth)
Interval: 3600 seconds
Blocked: Permanent Block [LF_SMTPAUTH] (IP match in csf.allow, block may not work)

Log entries:

2018-02-27 10:07:21 dovecot_login authenticator failed for 187-84-58-38.bommtempo.inf.br (PM0081) [187.84.58.38]:49887: 535 Incorrect authentication data (set_id=juridico@harmonia.rs.gov.br)
_________

That IP is allowed, but it is not possible to login in webmail, smtp or pop.

Re: IP in csf.allow with temporary block

Posted: 28 Feb 2018, 12:13
by iodisciple
I believe it's not blocked because of csf (IP match in csf.allow, block may not work) but because of incorrect authentication data (password, protocol, certificate, cipher suite, etc.) Check your auth logs.