4000 autobans

Use this forum if you have installed hMailServer and want to ask a question related to a production release of hMailServer. Before posting, please read the troubleshooting guide. A large part of all reported issues are already described in detail here.
Post Reply
JohnHace
Normal user
Normal user
Posts: 33
Joined: 2015-05-02 21:13

4000 autobans

Post by JohnHace » 2020-12-21 21:33

I'm getting thousands of autobans from five IP ranges. I tried putting a block on them in the windows firewall but they keep coming in. BTW, this is an AWS EC2 instance running the hMailserver. I looked at blocking these ranges there but it is over my head. Any suggestions? Thanks.

palinka
Senior user
Senior user
Posts: 2475
Joined: 2017-09-12 17:57

Re: 4000 autobans

Post by palinka » 2020-12-21 22:51

JohnHace wrote:
2020-12-21 21:33
I'm getting thousands of autobans from five IP ranges. I tried putting a block on them in the windows firewall but they keep coming in. BTW, this is an AWS EC2 instance running the hMailserver. I looked at blocking these ranges there but it is over my head. Any suggestions? Thanks.
If they're blocked by the firewall, they wouldn't be in your autoban list. ¯\_ (ツ)_/¯

But you can block them in the IP ranges (Settings > advanced > IP ranges). Create new IP range, name it whatever, insert low and high ip for the range, deselect everything under "allow connections". Also, give it a high priority, like 100 or anything higher than the priorities of your other IP ranges.

User avatar
johang
Senior user
Senior user
Posts: 448
Joined: 2008-09-01 09:20

Re: 4000 autobans

Post by johang » 2020-12-21 23:21

JohnHace wrote:
2020-12-21 21:33
I'm getting thousands of autobans from five IP ranges. I tried putting a block on them in the windows firewall but they keep coming in. BTW, this is an AWS EC2 instance running the hMailserver. I looked at blocking these ranges there but it is over my head. Any suggestions? Thanks.
tell us exactly how you tried to block them in your windows firewall..

in my firewall i have added an rule in "inbound rules" which i named IP BLOCK LIST
its enabled
in action i chose "block the connection"
and i added all ip addresses or networks in scope tab under remote IPadresses

how did you set it up ?
___________________________________________________________end of the line

JohnHace
Normal user
Normal user
Posts: 33
Joined: 2015-05-02 21:13

Re: 4000 autobans

Post by JohnHace » 2020-12-24 00:07

I will try that with the priority 100. I did not understand that before.

JohnHace
Normal user
Normal user
Posts: 33
Joined: 2015-05-02 21:13

Re: 4000 autobans

Post by JohnHace » 2020-12-24 00:08

johang wrote:
2020-12-21 23:21
JohnHace wrote:
2020-12-21 21:33
I'm getting thousands of autobans from five IP ranges. I tried putting a block on them in the windows firewall but they keep coming in. BTW, this is an AWS EC2 instance running the hMailserver. I looked at blocking these ranges there but it is over my head. Any suggestions? Thanks.
tell us exactly how you tried to block them in your windows firewall..

in my firewall i have added an rule in "inbound rules" which i named IP BLOCK LIST
its enabled
in action i chose "block the connection"
and i added all ip addresses or networks in scope tab under remote IPadresses

how did you set it up ?
I set it exactly as you describe.

User avatar
johang
Senior user
Senior user
Posts: 448
Joined: 2008-09-01 09:20

Re: 4000 autobans

Post by johang » 2020-12-24 19:01

JohnHace wrote:
2020-12-24 00:08
johang wrote:
2020-12-21 23:21
JohnHace wrote:
2020-12-21 21:33
I'm getting thousands of autobans from five IP ranges. I tried putting a block on them in the windows firewall but they keep coming in. BTW, this is an AWS EC2 instance running the hMailserver. I looked at blocking these ranges there but it is over my head. Any suggestions? Thanks.
tell us exactly how you tried to block them in your windows firewall..

in my firewall i have added an rule in "inbound rules" which i named IP BLOCK LIST
its enabled
in action i chose "block the connection"
and i added all ip addresses or networks in scope tab under remote IPadresses

how did you set it up ?
I set it exactly as you describe.
if IP adresses that you invoke in your firewall rule still hits autoban in hmailserver... the firewall rule does not work
___________________________________________________________end of the line

palinka
Senior user
Senior user
Posts: 2475
Joined: 2017-09-12 17:57

Re: 4000 autobans

Post by palinka » 2020-12-24 20:47

johang wrote:
2020-12-24 19:01
JohnHace wrote:
2020-12-24 00:08
johang wrote:
2020-12-21 23:21


tell us exactly how you tried to block them in your windows firewall..

in my firewall i have added an rule in "inbound rules" which i named IP BLOCK LIST
its enabled
in action i chose "block the connection"
and i added all ip addresses or networks in scope tab under remote IPadresses

how did you set it up ?
I set it exactly as you describe.
if IP adresses that you invoke in your firewall rule still hits autoban in hmailserver... the firewall rule does not work
¯\_(ツ)_/¯ That's what I said.

User avatar
johang
Senior user
Senior user
Posts: 448
Joined: 2008-09-01 09:20

Re: 4000 autobans

Post by johang » 2020-12-25 14:16

palinka wrote:
2020-12-24 20:47
johang wrote:
2020-12-24 19:01
JohnHace wrote:
2020-12-24 00:08


I set it exactly as you describe.
if IP adresses that you invoke in your firewall rule still hits autoban in hmailserver... the firewall rule does not work
¯\_(ツ)_/¯ That's what I said.
i know :roll: :lol: :lol: :lol: but perhaps it has to be special way due to EC2 AWS ( read other post from JohanHace where there are indications EC2 aws is used )
___________________________________________________________end of the line

JohnHace
Normal user
Normal user
Posts: 33
Joined: 2015-05-02 21:13

Re: 4000 autobans

Post by JohnHace » 2020-12-25 19:28

JohnHace wrote:
2020-12-24 00:07
I will try that with the priority 100. I did not understand that before.
That worked like a charm! Thanks.

Post Reply