Received-SPF: pass (Last token {include:_netblocks.google.com} (res=PASS)) client-ip=209.85.222.41; envelope-from=<awbaker@gmail.com>; x-ip-name=mail-ua1-f41.google.com;
X-Received: from mail-ua1-f41.google.com (mail-ua1-f41.google.com [209.85.222.41])
by netwin.co.nz (SurgeMail 7.3p) with ESMTP (TLS) id 4722999-1391920
for <surgemail-list@netwin.co.nz>; Thu, 01 Nov 2018 16:44:54 +0000
X-Return-Path: awbaker
X-Received: by mail-ua1-f41.google.com with SMTP id e16so7446767uam.1
for <surgemail-list@netwin.co.nz>; Thu, 01 Nov 2018 09:44:54 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:references:in-reply-to:from:date:message-id:subject:to;
bh=ZBY5plu706nmV5P8AHxqEDe64jV1rp8DcXBHFltxP1o=;
b=K34B3zD9LHyhmlxELqSHTIm93iNa+pfr9wR2MmqRbjJApKV/RfKARiDmeDhoRhxHfX
Fl5OfOIsQeOsfKeLLq/EYz6cPG2FrnArIJziaz0xIlb6zaw/rI8KrJTZeDIk6tIdgkOM
9gKGSm498Ee/BIHdwsK1+pE6g7WsNmfurYLdB7lleN/oQ7ZIRBi1QXB0mVsgVMVl5lhZ
CtT2YfzntOKPqNXvvDc0kZ5FQoBH3n++CpjCuN/MlCokqHdABGHCNUOIeNiOcEiJYRZZ
yKpn1DkBnrk3igeLCaX4zCLGJ5mVcgc/WHluEoKimlpYqdBWGLbCHnOPtfkbT5bBfBUR
k5mg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:references:in-reply-to:from:date
:message-id:subject:to;
bh=ZBY5plu706nmV5P8AHxqEDe64jV1rp8DcXBHFltxP1o=;
b=VenYlb1H9dUopTPcWtaLeA+ttZdMl8JJ7UsycafW8OqvPUpMrmxI2wILeJcGSXhcV+
OjfMHyEiX55Z67+Ab956SQ1TamSw9kSBLeIlWU667jRh78czCTplxFSzBEuehnG5cHoD
QE7hq2wt9ax5G8Ap84YTMQVe2RALtNnXijUSDl/8cFyXXEuif16f78hwNNQzwxJY75FH
Nce1EwGZMZJGHFQAuLL4v+9+Uv4jQbwvTPFtQSUYcDKddYQIbK8VlQus67LBl+dgnw5j
b+60Te6Rk7Vex+2ELyXyasjqc8IIIzfwT8D7Y9ysqRO2CEmyjG/TSOuZhcuiR4v8QOYD
sHMA==
X-Gm-Message-State: AGRZ1gJZTH/SXGchAg7spYwR/4kVd8uRfOPtBydIFPCAkmpvkLLEq3Ie
oJUD+q/e/ykJAO+oM26DQfPoBptQYqrTjdhPQdn1Iw==
X-Google-Smtp-Source: AJdET5dE5N+RW3WnGvULvF2tFibwJT7EiK3ThzhMapNYNc2XK1433V064S1cf4odlUVwdh8NBXSdOK0IrcN5PdhGudI=
X-Received: by 2002:ab0:13a9:: with SMTP id m38mr3913630uae.31.1541090693341;
Thu, 01 Nov 2018 09:44:53 -0700 (PDT)
MIME-Version: 1.0
References: <BN6PR15MB13968F161CE3548BD945085094CE0@BN6PR15MB1396.namprd15.prod.outlook.com>
In-Reply-To: <BN6PR15MB13968F161CE3548BD945085094CE0@BN6PR15MB1396.namprd15.prod.outlook.com>
From: Andy Baker
Date: Thu, 1 Nov 2018 16:44:39 +0000
Message-ID: <CAFT6cVXnDVpRHXOhs8tVs10EcUse-PY5esefL1BG3pxtzSbBCQ@mail.gmail.com>
Subject: Re: [SurgeMail List] Deny Login From IP List
To: surgemail-list@netwin.co.nz
X-Originating-IP: 209.85.222.41
X-Country: code=US country="United States" ip=209.85.222.41
X-ORBS-Stamp: hostkarma_yellow, hostkarma_quitok
X-Rcpt-To: <surgemail-list@netwin.co.nz>
X-SpamDetect: : 0.1 sd=0.1 lv=0.00 nok=6/0 m=3 nf=0 Close 0.08(genuine_gmail) 0.90(X-Phrase:isspam) 0.10(X-myrbl:Color=yellow) 0.10(free_email) 0.24(genuine) 0.24(dkimok) 0.28(X-Verify-Helo:+OK) 0.34(X-Country:States) 0.37(StandardTLD) 0.38(X-NotAscii:utf) 0.45(spfpass) 0.45(X-LangGuess:English) 0.47(X-Verify-MX present) 0.52(X-ORBS-Stamp:yellow) Saned 5.0 Sval 0.1 bsan 5.0 Moved 5.0->0.1 Sval 0.1
X-NotAscii: charset=utf-8
X-LangGuess: English
X-Probe: +OK nothing bad found
X-Phrase: IsSpam score=1.00
X-Verify-Helo: +OK mail-ua1-f41.google.com
Authentication-Results: netwin.co.nz header.from=awbaker@gmail.com; dkim=pass (good signature)
X-Verify-MX: <awbaker@gmail.com> senders ip (ch=209.85.222.41 msg=209.85.222.41, net=209.85.) not in mx data dom=gmail.com ipname=mail-ua1-f41.google.com (172.217.197.26 64.233.190.27 74.125.193.)
X-Encryption: SSL encrypted
X-MyRbl: Color=Yellow Age=83 Spam=1 Notspam=20 Stars=629 Good=11077 Friend=14440 Surbl=13 Catch=0 r=0.002 ip=209.85.222.41
X-IP-stats: Incoming Last 0, First 15, in=1, out=0, spam=0 ip=209.85.222.41
List-Unsubscribe: <mailto:surgemail-list-leave@netwin.co.nz?subject=unsubscribe>
X-Mailing-List: surgemail-list@netwin.co.nz
List-ID: <surgemail-list@netwin.co.nz>
Precedence: bulk
Reply-To: surgemail-list@netwin.co.nz
Content-Transfer-Encoding: quoted-printable
Hi Jim,
To block the logins you could block those IP's and subnets on your firewall (Local firewall on the box, iptables if running Linux, or hardware firewall in front of your server if you have one) from accessing your server on what ever port you are running your login page on (HTTPS ?) but allow them to connect via SMTP.
Andy
Netwin,
I am trying to block logins from certain IP addresses and IP subnets but still allow those IP address to send email to users on our system (SMTP). You current have g_deny which blocks everything and g_deny_smtp which blocks only SMTP. I was looking for something like g_deny_login but there does not appear to be a setting that currently meets our need. If this feature does not exist, I would like to add this as a feature request.
Also, while we are on the subject of IP lists, is it possible to insert comments into the line items such as the example below. For all of the IP lists in SurgeMail, we sometimes struggle to remember why a particular IP address or block exists on a list. Being able to add comments to the entries would be very helpful.
10.0.0.0/24 # Hacking attempt 20181101
Thanks,
Jim Lohiser
N2Net