Host Access Control no longer working

kpmedia

• March 03, 2016 03:21

This used to work: pop3 daemon ALL EXCEPT 5. 12. 14. 23. 27. 37. 41. 46. 58. 59. 60. 61. 78. 80. 85. 88. 91. 92. 95. 99. 103. 105. 109. 110. 112. 113. 115. 116. 117. 118. 119. 120. 121. 122. 123. 124. 125. 175. 177. 178. 183. 186. 187. 188. 189. 194. 197. 210. 211. 213. 217. 218. 219. 220. 221. 222. 223. allow It quit at some recent point. Now all the BS crap login attempts from China et al (113., etc, the not allowed IPs) are getting through. They're supposed to not be able to connect to the service at all. They're getting firewalled, and making CSF pull double duty. I want to block them (again) so the firewall doesn't have to do anything. What happened?

• 

  24x7server

  • March 03, 2016 10:04

  Hello, I think you have not correctly setup your host access list. Please check following URL and try to setup it. Host Access Control - Documentation - cPanel Documentation You can also use "ALL EXCEPT x.x.x.x" as an Access List which will allow all IP addresses except x.x.x.x (replace with a specific IP address).
  

  0
• 

  kpmedia

  • March 03, 2016 10:36

  I realize the documentation says "You can also enter ALL EXCEPT IP address in the Access List text box. When you enter allow", but it does not suggest or state that the inverse DENY is disallowed. And "5." is a wildcard for anything 5.0.0.0/8 In fact, if I'm not mistaken, the reason it's now in the docs is because of me asking this years ago. It wasn't in there at the time. And it was cPanel personnel that gave me the syntax that I'm using now. And DENY was that conversation, not ALLOW. And it used to work.

  0
• 

  cPanelMichael

  • March 09, 2016 16:50

  Hello :) The "Host Access Control" option in Web Host Manager is essentially a user interface for the /etc/hosts.allow file that's provided by your operating system. Could you let us know which operating system and version is installed on your server? Thank you.

  0

Please sign in to leave a comment.