Network Service Error has occurred: Difference between revisions

No edit summary
No edit summary
Line 2: Line 2:
__FORCETOC__
__FORCETOC__
<div class="col-md-12 ibox-content">
<div class="col-md-12 ibox-content">
=Network Service Error has occurred=
=Network Service Error has occurred due to suspended IP addresses=
{{KB|{{ZC}}|{{ZCS 8.8}}|{{ZCS 8.7}}|{{ZCS 8.6}}|}}
{{KB|{{ZC}}|{{ZCS 8.8}}|{{ZCS 8.7}}|{{ZCS 8.6}}|}}


==Problem==
====Problem====
'''Error''' :  HTTP/1.1 503 Service Unavailable
The webclient shows "HTTP/1.1 503 Service Unavailable", and the /opt/zimbra/log/mailbox.log file has the following error:
<pre>2016-06-02 10:15:33,436 INFO  [qtp509886383-1033602:http://127.0.0.1:80/service/soap/AuthRequest] [] misc - Access to IP 10.10.10.3suspended, for repeated failed login.
2016-06-02 10:15:33,436 INFO  [qtp509886383-1033602:http://127.0.0.1:80/service/soap/AuthRequest] [] misc - Access to IP 10.10.10.3suspended, for repeated failed login.
2016-06-02 10:15:33,437 WARN  [qtp509886383-1033601:https://63.237.45.232:443/zimbra/] [] webclient - system failure: error while proxying request to target server: HTTP/1.1 503 Service Unavailable
2016-06-02 10:15:33,437 WARN  [qtp509886383-1033601:https://63.237.45.232:443/zimbra/] [] webclient - system failure: error while proxying request to target server: HTTP/1.1 503 Service Unavailable
com.zimbra.common.service.ServiceException: system failure: error while proxying request to target server: HTTP/1.1 503 Service Unavailable</pre>
com.zimbra.common.service.ServiceException: system failure: error while proxying request to target server: HTTP/1.1 503 Service Unavailable


==Solution==
====Solution====
White-list the IPs or if impossible to white-list lots of IP address list then client can disable the DoS filter for the repeated login failure.
White-list the IP addresses:
su - zimbra
zmprov mcf +zimbraHttpThrottleSafeIPs 10.1.2.3/32
zmprov mcf +zimbraHttpThrottleSafeIPs 192.168.4.0/24
 
If whitelisting isn't possible, disable the DoS filter for the repeated login failure:
  su - zimbra
  su - zimbra
  zmprov mcf zimbraInvalidLoginFilterMaxFailedLogin 0
  zmprov mcf zimbraInvalidLoginFilterMaxFailedLogin 0
Line 18: Line 23:
Then restart the mailbox services to reflect the changes :  
Then restart the mailbox services to reflect the changes :  
  zmmailboxdctl restart
  zmmailboxdctl restart




Submitted by:  Sourabh Bhushan
Submitted by:  Sourabh Bhushan
{{Article Footer|ZCS 8.8, 8.7, 8.6|8/8/2017}}
{{Article Footer|ZCS 8.8, 8.7|2018-08-08}}
{{NeedSME|Sourabh|SME2|Copyeditor}}
[[Category:Troubleshooting MTA]]
[[Category:Troubleshooting MTA]]

Revision as of 13:47, 15 May 2018

Network Service Error has occurred due to suspended IP addresses

   KB 23283        Last updated on 2018-05-15  




0.00
(0 votes)

Problem

The webclient shows "HTTP/1.1 503 Service Unavailable", and the /opt/zimbra/log/mailbox.log file has the following error:

2016-06-02 10:15:33,436 INFO  [qtp509886383-1033602:http://127.0.0.1:80/service/soap/AuthRequest] [] misc - Access to IP 10.10.10.3suspended, for repeated failed login.
2016-06-02 10:15:33,437 WARN  [qtp509886383-1033601:https://63.237.45.232:443/zimbra/] [] webclient - system failure: error while proxying request to target server: HTTP/1.1 503 Service Unavailable
com.zimbra.common.service.ServiceException: system failure: error while proxying request to target server: HTTP/1.1 503 Service Unavailable

Solution

White-list the IP addresses:

su - zimbra
zmprov mcf +zimbraHttpThrottleSafeIPs 10.1.2.3/32
zmprov mcf +zimbraHttpThrottleSafeIPs 192.168.4.0/24

If whitelisting isn't possible, disable the DoS filter for the repeated login failure:

su - zimbra
zmprov mcf zimbraInvalidLoginFilterMaxFailedLogin 0

Then restart the mailbox services to reflect the changes :

zmmailboxdctl restart


Submitted by: Sourabh Bhushan

Verified Against: ZCS 8.8, 8.7 Date Created: 2018-08-08
Article ID: https://wiki.zimbra.com/index.php?title=Network_Service_Error_has_occurred Date Modified: 2018-05-15



Try Zimbra

Try Zimbra Collaboration with a 60-day free trial.
Get it now »

Want to get involved?

You can contribute in the Community, Wiki, Code, or development of Zimlets.
Find out more. »

Looking for a Video?

Visit our YouTube channel to get the latest webinars, technology news, product overviews, and so much more.
Go to the YouTube channel »

Jump to: navigation, search