Difference between revisions of "Network Service Error has occurred"

 
(One intermediate revision by the same user not shown)
Line 2: Line 2:
 
__FORCETOC__
 
__FORCETOC__
 
<div class="col-md-12 ibox-content">
 
<div class="col-md-12 ibox-content">
=Network Service Error has occurred=
+
=Network Service Error has occurred due to suspended IP addresses=
 
{{KB|{{ZC}}|{{ZCS 8.8}}|{{ZCS 8.7}}|{{ZCS 8.6}}|}}
 
{{KB|{{ZC}}|{{ZCS 8.8}}|{{ZCS 8.7}}|{{ZCS 8.6}}|}}
  
==Problem==
+
====Problem====
'''Error''' :  HTTP/1.1 503 Service Unavailable
+
The webclient shows "HTTP/1.1 503 Service Unavailable", and the /opt/zimbra/log/mailbox.log file has the following error:
<pre>2016-06-02 10:15:33,436 INFO  [qtp509886383-1033602:http://127.0.0.1:80/service/soap/AuthRequest] [] misc - Access to IP 10.10.10.3suspended, for repeated failed login.
+
2016-06-02 10:15:33,436 INFO  [qtp509886383-1033602:http://127.0.0.1:80/service/soap/AuthRequest] [] misc - Access to IP 10.10.10.3suspended, for repeated failed login.
2016-06-02 10:15:33,437 WARN  [qtp509886383-1033601:https://63.237.45.232:443/zimbra/] [] webclient - system failure: error while proxying request to target server: HTTP/1.1 503 Service Unavailable
+
2016-06-02 10:15:33,437 WARN  [qtp509886383-1033601:https://63.237.45.232:443/zimbra/] [] webclient - system failure: error while proxying request to target server: HTTP/1.1 503 Service Unavailable
com.zimbra.common.service.ServiceException: system failure: error while proxying request to target server: HTTP/1.1 503 Service Unavailable</pre>
+
com.zimbra.common.service.ServiceException: system failure: error while proxying request to target server: HTTP/1.1 503 Service Unavailable
  
==Solution==
+
====Solution====
White-list the IPs or if impossible to white-list lots of IP address list then client can disable the DoS filter for the repeated login failure.
+
White-list the IP addresses:
 +
su - zimbra
 +
zmprov mcf +zimbraHttpThrottleSafeIPs 10.1.2.3/32
 +
zmprov mcf +zimbraHttpThrottleSafeIPs 192.168.4.0/24
 +
 
 +
If whitelisting isn't possible, disable the DoS filter for the repeated login failure:
 
  su - zimbra
 
  su - zimbra
 
  zmprov mcf zimbraInvalidLoginFilterMaxFailedLogin 0
 
  zmprov mcf zimbraInvalidLoginFilterMaxFailedLogin 0
  
Then restart the mailbox services to reflect the changes :  
+
Then restart the mailbox services to reflect the changes:  
 
  zmmailboxdctl restart
 
  zmmailboxdctl restart
 
 
  
  
 
Submitted by:  Sourabh Bhushan
 
Submitted by:  Sourabh Bhushan
{{Article Footer|ZCS 8.8, 8.7, 8.6|8/8/2017}}
+
{{Article Footer|ZCS 8.8, 8.7|2018-08-08}}
{{NeedSME|Sourabh|SME2|Copyeditor}}
 
 
[[Category:Troubleshooting MTA]]
 
[[Category:Troubleshooting MTA]]

Latest revision as of 13:48, 15 May 2018

Network Service Error has occurred due to suspended IP addresses

   KB 23283        Last updated on 2018-05-15  




0.00
(0 votes)

Problem

The webclient shows "HTTP/1.1 503 Service Unavailable", and the /opt/zimbra/log/mailbox.log file has the following error:

2016-06-02 10:15:33,436 INFO  [qtp509886383-1033602:http://127.0.0.1:80/service/soap/AuthRequest] [] misc - Access to IP 10.10.10.3suspended, for repeated failed login.
2016-06-02 10:15:33,437 WARN  [qtp509886383-1033601:https://63.237.45.232:443/zimbra/] [] webclient - system failure: error while proxying request to target server: HTTP/1.1 503 Service Unavailable
com.zimbra.common.service.ServiceException: system failure: error while proxying request to target server: HTTP/1.1 503 Service Unavailable

Solution

White-list the IP addresses:

su - zimbra
zmprov mcf +zimbraHttpThrottleSafeIPs 10.1.2.3/32
zmprov mcf +zimbraHttpThrottleSafeIPs 192.168.4.0/24

If whitelisting isn't possible, disable the DoS filter for the repeated login failure:

su - zimbra
zmprov mcf zimbraInvalidLoginFilterMaxFailedLogin 0

Then restart the mailbox services to reflect the changes:

zmmailboxdctl restart


Submitted by: Sourabh Bhushan

Verified Against: ZCS 8.8, 8.7 Date Created: 2018-08-08
Article ID: https://wiki.zimbra.com/index.php?title=Network_Service_Error_has_occurred Date Modified: 2018-05-15



Try Zimbra

Try Zimbra Collaboration with a 60-day free trial.
Get it now »

Want to get involved?

You can contribute in the Community, Wiki, Code, or development of Zimlets.
Find out more. »

Looking for a Video?

Visit our YouTube channel to get the latest webinars, technology news, product overviews, and so much more.
Go to the YouTube channel »

Jump to: navigation, search