Network Service Error has occurred: Difference between revisions
No edit summary |
No edit summary |
||
Line 2: | Line 2: | ||
__FORCETOC__ | __FORCETOC__ | ||
<div class="col-md-12 ibox-content"> | <div class="col-md-12 ibox-content"> | ||
=Network Service Error has occurred= | =Network Service Error has occurred due to suspended IP addresses= | ||
{{KB|{{ZC}}|{{ZCS 8.8}}|{{ZCS 8.7}}|{{ZCS 8.6}}|}} | {{KB|{{ZC}}|{{ZCS 8.8}}|{{ZCS 8.7}}|{{ZCS 8.6}}|}} | ||
==Problem== | ====Problem==== | ||
The webclient shows "HTTP/1.1 503 Service Unavailable", and the /opt/zimbra/log/mailbox.log file has the following error: | |||
2016-06-02 10:15:33,436 INFO [qtp509886383-1033602:http://127.0.0.1:80/service/soap/AuthRequest] [] misc - Access to IP 10.10.10.3suspended, for repeated failed login. | |||
2016-06-02 10:15:33,437 WARN [qtp509886383-1033601:https://63.237.45.232:443/zimbra/] [] webclient - system failure: error while proxying request to target server: HTTP/1.1 503 Service Unavailable | 2016-06-02 10:15:33,437 WARN [qtp509886383-1033601:https://63.237.45.232:443/zimbra/] [] webclient - system failure: error while proxying request to target server: HTTP/1.1 503 Service Unavailable | ||
com.zimbra.common.service.ServiceException: system failure: error while proxying request to target server: HTTP/1.1 503 Service Unavailable | com.zimbra.common.service.ServiceException: system failure: error while proxying request to target server: HTTP/1.1 503 Service Unavailable | ||
==Solution== | ====Solution==== | ||
White-list the | White-list the IP addresses: | ||
su - zimbra | |||
zmprov mcf +zimbraHttpThrottleSafeIPs 10.1.2.3/32 | |||
zmprov mcf +zimbraHttpThrottleSafeIPs 192.168.4.0/24 | |||
If whitelisting isn't possible, disable the DoS filter for the repeated login failure: | |||
su - zimbra | su - zimbra | ||
zmprov mcf zimbraInvalidLoginFilterMaxFailedLogin 0 | zmprov mcf zimbraInvalidLoginFilterMaxFailedLogin 0 | ||
Line 18: | Line 23: | ||
Then restart the mailbox services to reflect the changes : | Then restart the mailbox services to reflect the changes : | ||
zmmailboxdctl restart | zmmailboxdctl restart | ||
Submitted by: Sourabh Bhushan | Submitted by: Sourabh Bhushan | ||
{{Article Footer|ZCS 8.8, 8.7 | {{Article Footer|ZCS 8.8, 8.7|2018-08-08}} | ||
[[Category:Troubleshooting MTA]] | [[Category:Troubleshooting MTA]] |
Revision as of 13:47, 15 May 2018
Network Service Error has occurred due to suspended IP addresses
Problem
The webclient shows "HTTP/1.1 503 Service Unavailable", and the /opt/zimbra/log/mailbox.log file has the following error:
2016-06-02 10:15:33,436 INFO [qtp509886383-1033602:http://127.0.0.1:80/service/soap/AuthRequest] [] misc - Access to IP 10.10.10.3suspended, for repeated failed login. 2016-06-02 10:15:33,437 WARN [qtp509886383-1033601:https://63.237.45.232:443/zimbra/] [] webclient - system failure: error while proxying request to target server: HTTP/1.1 503 Service Unavailable com.zimbra.common.service.ServiceException: system failure: error while proxying request to target server: HTTP/1.1 503 Service Unavailable
Solution
White-list the IP addresses:
su - zimbra zmprov mcf +zimbraHttpThrottleSafeIPs 10.1.2.3/32 zmprov mcf +zimbraHttpThrottleSafeIPs 192.168.4.0/24
If whitelisting isn't possible, disable the DoS filter for the repeated login failure:
su - zimbra zmprov mcf zimbraInvalidLoginFilterMaxFailedLogin 0
Then restart the mailbox services to reflect the changes :
zmmailboxdctl restart
Submitted by: Sourabh Bhushan