Localhost IPv6 listed in hulk
It happens for a user who tries to access emails via cPanel/Webmail that localhost gets added into hulk like:
User: (user's email address)
IP Address: 0000:0000:0000:0000:0000:0000:0000:0001
Country: (empty)
Service: mail
Authentiation Service: dovecot
When I try to unblock it via shell, I get.
[root@cpanel ~]# /usr/local/cpanel/scripts/hulk-unban-ip 0000:0000:0000:0000:0000:0000:0000:0001
[nftables] “/usr/sbin/nft delete element inet filter cphulk-TempBan { 0000:0000:0000:0000:0000:0000:0000:0001 }” failed: Error: Could not resolve hostname: Address family for hostname not supported
delete element inet filter cphulk-TempBan { 0000:0000:0000:0000:0000:0000:0000:0001 }
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
: The subprocess reported error number 1 when it ended. at /usr/local/cpanel/Cpanel/NFTables.pm line 80.
I cannot whitelist ::1 either in hulk.
The only solution is to "Remove Blocks and Clear Reports" in hulk manually.
-
Did you try WHMAPI function:
https://support.cpanel.net/hc/en-us/articles/360059718753-How-to-remove-a-blocked-IP-address-from-cPHulk-via-SSH0 -
Well no, because the core question is why ::1 gets in there at all.
If I flush the blocks or use the whmapi still means manual action for a problem that should not exist.
0 -
I'm not very familiar with CpHulk (we don't use it), but I think that that block is for a mail user connecting from localhost, i.e. webmail.
0 -
What are you using?
I wonder if it makes sense to keep Hulk enabled when it cannot add blocks to the firewall anymore.
0 -
We use CSF.
0
Please sign in to leave a comment.
Comments
5 comments