Solved whitelisted IP gets blacklisted

[Leon Zetekoff]

Hi there....I whitelisted my two home IPs yesterday since I got locked out the other day. Today I got blacklisted trying to reprovision my GS 2170. Luckily I routed out the second IP I have and was able to rewhite list the one that got blacklisted.

Is this supposed to happen?

Thanks leon

 

[leejor]

Were the whitelisted and blacklisted IPs both in the list, and as single IPs? Dis you go back through the Activity Log to when the blacklist occurred to see if there is anything pointing to why this might have happened?

In the past I've whitelisted the local LAN, as some ATAs were (for some unknown reason) failing to register properly at times, causing them to be blacklisted. I have not had any issues since.

 

[Leon Zetekoff]

hi there....happy 4th!

Yes both were single IP entries. I didn't verify it was still whitelisted prior to my playing around today, but I would expect I set it and it should stick.

Ok on whitelisting the lan. I'm running this in the cloud. but might do that as well. thanks

Here's the error message:

RPS ID: 12290
The IP 70.44.10.180 has been blacklisted for 86400 sec. (Expires at: 2018-07-05 15:37:58). Reason: Blocked for too many failed authentications

 

[Leon Zetekoff]

I just checked the other home IP I whitelisted yesterday disappeared and no longer in the list. one for the remote location is still whitelisted. will watch over this rest of the week to see if there is a pattern

 

[leejor]

Once you whitelist, reload the list and be certain that it is in there. I haven't heard reports of entries just "disappearing".

 

[YiannisH_3CX]

Hello @Leon Zetekoff

What i am guessing is happening is the following:

An IP gets blacklisted and it appears as en entry in the blacklist tab. Then you change that entry to Allow but you do not change the expiration value so when the expiration timer elapses then the entry is deleted.

 

[Leon Zetekoff]

possibly but I noticed when an entry is set to ALLOW, the timer fields go away in the form.

 

[YiannisH_3CX]

possibly but I noticed when an entry is set to ALLOW, the timer fields go away in the form.

Yes they do but if the entry was originally a blacklist then the timer still applies. Before switching the entry to allow adjust the timer to a high value so it does not expire or delete the entry and add a new Allow entry that will not expire

 

[Leon Zetekoff]

ah ha that splains it. what you guys might want to do in that case, is wipe out the timer from the blacklist if it is switched to whitelist

thanks leon

 

[YiannisH_3CX]

Glad i could assist and thank you for the feedback