1

Topic: IP Source Throttling?

Using iRedmail 0.7.3
Using Ubuntu 10.04 LTS Server

We have a mail server with a public IP address.

Our client has 500+ computers on a network behind a different static public IP address.

Every now and then, users on that network are unable to connect to the mail server.

However, at the same time, users working remotely (home/etc) are able to access the server without any issues at all.

Is there something running on the server (iptables/etc) that would stop/pause/reject/throttle access from the main network if it has over X number of requests or connections?

What should I be looking for?

Thanks!

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: IP Source Throttling?

You running Fail2Ban? That would do it.

3

Re: IP Source Throttling?

fail2ban is currently running.

Is there a way I could put in an exception for this other IP?

I have very little familiarity with fail2ban.

Thanks, glacierdigital!

4

Re: IP Source Throttling?

Actually, I did a quick look.

I went into the /etc/fail2ban/jail.conf file and added:

ignoreip = 127.0.0.1 123.123.123.123 123.123.123.124

(Where IPs 123.123.123.123 and 123.123.123.124  represent our static IPs for the network.)

I then restarted the fail2ban service:

service fail2ban restart

Should this do the trick or is there something else to do as well?

Thanks again!