DOS Filter Permenan...
 
Notifications
Clear all

DOS Filter Permenance

1 Posts
1 Users
0 Reactions
68 Views
(@mhammett)
Active Member
Joined: 11 years ago
Posts: 16
Topic starter  

I have a Zimbra Desktop install with like 40 accounts in it. I keep locking myself out of the Carbonio server because as soon as it comes back up, it hammers the server and then gets blocked again. Of course, I'm accessing it from the same IP, so then I think the web (user and admin) interfaces don't work and panic. It probably worked for everyone else the whole time.

I'm grepping /opt/zextras/logs for different things that might point to what's going on.

The two different ways the commands show up in the logs, whether I do it via carbonio prov or zmprov:

/opt/zextras/log/audit.log:2025-02-08 02:31:01,674 INFO  [qtp332149166-18123] [name=zimbra;ua=zmprov/24.12.4_ZEXTRAS_202501;soapId=690d44ca;] security - cmd=ModifyConfig; +zimbraHttpThrottleSafeIPs=65.182.164.62;
/opt/zextras/log/audit.log:2025-02-08 02:40:15,372 INFO [qtp332149166-18179] [name=zimbra;ua=zmprov/24.12.4_ZEXTRAS_202501;soapId=690d44df;] security - cmd=ModifyServer; name=webmail.ics-il.net; +zimbraHttpThrottleSafeIPs=65.182.164.62;

zextras@webmail:~$ carbonio prov getConfig -zimbraHttpThrottleSafeIPs
zextras@webmail:~$ zmprov gcf zimbraHttpThrottleSafeIPs
zimbraHttpThrottleSafeIPs: 65.182.164.62
zimbraHttpThrottleSafeIPs: 5.5.5.5

Interesting result. The 65. address is the one I'm interested in. The 5. address is one I just threw in to see what happened.

/opt/zextras/log/mailbox.log:2025-02-08 03:27:31,347 INFO  [qtp332149166-18648] [ip=65.182.164.52;oip=65.182.164.62;port=52184;ua=Zimbra Desktop/7.3.1_13063_Windows;soapId=690d4933;] account - Error occurred during authentication: authentication failed for [8530753d-9a2f-446f-a6af-d0583e9c33e4]. Reason: account not found.
/opt/zextras/log/mailbox.log:2025-02-08 02:55:36,966 INFO [qtp332149166-18242] [ip=65.182.164.52;oip=65.182.164.62;port=56470;ua=Zimbra Desktop/7.3.1_13063_Windows;via=127.0.0.1(ZimbraWebClient - GC59 (Win)/7.3.1 GA);soapId=690d46ff;] account - Error occurred during authentication: authentication failed for [8530753d-9a2f-446f-a6af-d0583e9c33e4]. Reason: account not found.

I'm not sure what "account" that is, given that it's not an email address. grep didn't find anything on the files I transferred over - hoping it was some GUID that was being referenced and not the address.


   
Quote