Discussion:
[Fail2ban-users] allow legitimate IP after being rejected with icmp port unreachable
Daminto Lie
2014-08-01 06:25:38 UTC
Permalink
Hi,

I want to allow the following IP address only that's being rejected with icmp-port-unreachable by iptables. I wonder if anyone would be kind to help me how to do it.

When I run $ iptables -L -n:

<snip>

Chain f2b-dovecot-pop3imap (1 references)
target     prot opt source               destination
REJECT     all  --  100.100.10.10       0.0.0.0/0            reject-with icmp-port-unreachable
<snip>

Any help would be very much appreciated.

Thank you
Dvorcovoy Dmitry V.
2014-08-01 08:10:18 UTC
Permalink
unban ip:
fail2ban-client set f2b-dovecot-pop3imap unbanip 100.100.10.10

whitelist ip:
fail2ban-client set f2b-dovecot-pop3imap addignoreip 100.100.10.10
Post by Daminto Lie
I want to allow the following IP address only that's being rejected with icmp-port-unreachable by iptables. I wonder if anyone would be kind to help me how to do it.
<snip>
Chain f2b-dovecot-pop3imap (1 references)
target prot opt source destination
REJECT all -- 100.100.10.10 0.0.0.0/0 reject-with icmp-port-unreachable
<snip>
Any help would be very much appreciated.
Thank you
Loading...