Hi,

Wondering if it would be possible to incorporate an URL that pulls a TXT list with IPs from the intrusion detection system from a running Xeams instance internally.
Lately we keep receiving invalid login attempts e.g.

Too many invalid login attempts made from 46.148.40.49. This IP has been blocked for the next 10 minutes. Someone from this IP is trying to connect to the Smtp Server on HOSTNAME. Total attempts so far: 5

Example, UptimeRobot supplies such an (TXT) URL provides a list with their public IPs that you can add to some firewalls to allow their services from connecting to certain ports.

If Xeams would be able to present a list with blocked URLs then we could create such a rule that "auto-blocks" the remote IP by use of an inverted source rule, without the need of the end-user/sysadmin to keep updating this list.

Thanks!

Sure. I'll add a feature to display the blocked IP addresses.

In the meantime, try the following:

• Add the IP addresses belonging to UptimeRobot to FriendlyIP.txt file. Check https://www.xeams.com/friendlyip.htm
• By the way, Xeams now has a similar service, called WatchDog, included for free. Check https://www.xeams.com/watchdog.htm for details.

Great, thanks!

Currently I keep getting flooded, so I have to update my firewall alias list the whole time. It would definitely save me some worktime :)

What is the URL for the service provider? Does it return IP addresses in a textual format, or it returns data in XML/JSON?

Seems I can't add an example URL to the thread, I'll send a mail towards Synametrics support.