Users get 'Network service error', and mailbox.log shows 'Access to IP x.x.x.x suspended, for repeated failed login'

Users get 'Network service error', and mailbox.log shows 'Access to IP x.x.x.x suspended, for repeated failed login'

   KB 22296        Last updated on 2015-08-27  




0.00
(0 votes)

Purpose

Users get 'Network service error', and mailbox.log shows 'Access to IP x.x.x.x suspended, for repeated failed login'

Resolution

Add the IP to the safe IP list:

zmprov mcf +zimbraHttpThrottleSafeIPs 192.168.2.1
zmprov ms `zmhostname` +zimbraHttpThrottleSafeIPs 192.168.2.1
zmmailboxdctl restart

This is our feature in 8.5+ to prevent a malicious IP from trying brute force attacks.

But it can come up if all the users of a network access the mail server via a single gateway, and that gateway shows up as the originating IP for all the users. Thus even if a couple of users set incorrect passwords a few times, the IP gets blacklisted, blocking out all the users.

These values are also of interest, and can be changed:

zimbraInvalidLoginFilterDelayInMinBetwnReqBeforeReinstating: 15
zimbraInvalidLoginFilterMaxFailedLogin: 10
zimbraInvalidLoginFilterReinstateIpTaskIntervalInMin: 5
  • zimbraInvalidLoginFilterDelayInMinBetwnRegBeforeReinstating sets how long an IP is blocked.
  • zimbraInvalidLoginFilterMaxFailedLogin sets the number of failed logins before an IP is blocked.
  • zimbraInvalidLoginFilterReinstateIpTaskIntervalInMin sets how long between running the process to unblock IPs.

Additional Content

Verified Against: Zimbra Collaboration 8.6, 8.508/27/2015 Date Created: {{{2}}}
Article ID: https://wiki.zimbra.com/index.php?title=Users_get_%27Network_service_error%27,_and_mailbox.log_shows_%27Access_to_IP_x.x.x.x_suspended,_for_repeated_failed_login%27 Date Modified: 2015-08-27



Try Zimbra

Try Zimbra Collaboration with a 60-day free trial.
Get it now »

Want to get involved?

You can contribute in the Community, Wiki, Code, or development of Zimlets.
Find out more. »

Looking for a Video?

Visit our YouTube channel to get the latest webinars, technology news, product overviews, and so much more.
Go to the YouTube channel »


Wiki/KB reviewed by SME1 SME2 Copyeditor Last edit by Jorge de la Cruz
Jump to: navigation, search