Mailing List CGatePro@mail.stalker.com Message #101342
From: Tom Rymes <trymes@rymes.com>
Subject: Re: Error - 476 connections from your host are denied
Date: Mon, 10 Jan 2011 15:00:35 -0500
To: CommuniGate Pro Discussions <CGatePro@mail.stalker.com>
X-Mailer: CommuniGate Pro Pronto 3.10
On 01/10/2011 11:12 AM, Nicolas Hatier wrote:
Grep with the IP or its DNS name, maybe. Then check what happened around
each instance you find.

OK, looks like our router's address is being blocked after Pidgin kept trying to login every 10 minutes, even though the password was rejected.

13:06:12.478 1 ACCOUNT(username) login(XMPP) from [x.x.x.x]:2198(TLS) failed. Error Code=incorrect password
13:06:14.490 1 ACCOUNT(username) login(XMPP) from [x.x.x.x]:2198(TLS) failed. Error Code=incorrect password
13:06:16.503 1 ACCOUNT(username) login(XMPP) from [x.x.x.x]:2198(TLS) failed. Error Code=incorrect password
13:06:44.770 1 ACCOUNT(username) login(XMPP) from [x.x.x.x]:2207(TLS) failed. Error Code=incorrect password
13:06:46.782 1 ACCOUNT(username) login(XMPP) from [x.x.x.x]:2207(TLS) failed. Error Code=incorrect password
13:06:46.782 3 SYSTEM [x.x.x.x] blocked on 5 login failures

What's frustrating about this is that, if I paste the router's address into the "test" field on this page:

http://my.server.address:8010/Master/Settings/BlacklistedIPs.html?#Test

it returns as "LAN:[x.x.x.x] is Trusted" even though it's been temporarily balcklisted. Shouldn't this report as "temporarily blacklisted"?

I also wonder how I can remove the host from the temporary blacklist before the 60 minutes I have specified are up. I have tried modifying the blocking time, but that only seems to work for new entries.  I also wonder if there is some way I can avoid having this happen in the future without causing a security problem.

Of course, theI'm trying Pidgin as a replacement for Spark upon the recommendation of Support. I have to say that I really don't like it anywhere near as much, but it might resolve the roster/presence issues we've had with both Microsoft Messenger and Spark.

I'm going to give Pandion a shot, too. Maybe it'll prove to have a better user interface; I haven't been impressed with Pidgin.

Tom
Subscribe (FEED) Subscribe (DIGEST) Subscribe (INDEX) Unsubscribe Mail to Listmaster