Community Discussions and Support
Security - Restrict Access to specif IP Addresses.

Thanks.

I'll check the logs and update the IP Address range.

<p>Thanks. </p><p>I'll check the logs and update the IP Address range. </p>

I have setup Connection Control as follows:

allow : 10.10.10.1 - 10.10.10.254

allow : 127.0.0.1

refuse : 0.0.0.0 - 255.255.255.255

in MercuryS / MercuryP and MercuryI

Yet I can still check POP3 email from an external address.

WHY ?? What have I do wrong ?

Thanks :) 

 

 

 

<p>I have setup Connection Control as follows:</p><p>allow : 10.10.10.1 - 10.10.10.254</p><p>allow : 127.0.0.1</p><p>refuse : 0.0.0.0 - 255.255.255.255</p><p>in MercuryS / MercuryP and MercuryI</p><p>Yet I can still check POP3 email from an external address.</p><p>WHY ?? What have I do wrong ?</p><p>Thanks :) </p><p> </p><p> </p><p> </p>

0.0.0.0 and 255.255.255.255 are not valid network addresses

Enter 1.0.0.0 - 255.255.255.254 as refusal addresses.

<P>0.0.0.0 and 255.255.255.255 are not valid network addresses</P> <P>Enter 1.0.0.0 - 255.255.255.254 as refusal addresses.</P>

[quote user="tomt"]

I have setup Connection Control as follows:

allow : 10.10.10.1 - 10.10.10.254

Yet I can still check POP3 email from an external address.

[/quote]

These addresses indicate that your network is behind a NAT router of some kind. Depending on how the NAT router is configured, it's possible that connections from the outside world are being remapped as they pass through it, so to machines on the inside of your network, they appear to be from a local machine. Take a look at the Mercury console when you do one of these outside connections (or check the logs) and see what the connecting address is reported as. If it's something in the 10.10.10.x addressing range, then your NAT router is doing address remapping and you won't be able to do this type of connection control.

Cheers!

-- David --

[quote user="tomt"]<p>I have setup Connection Control as follows:</p><p>allow : 10.10.10.1 - 10.10.10.254</p><p>Yet I can still check POP3 email from an external address.</p>[/quote] These addresses indicate that your network is behind a NAT router of some kind. Depending on how the NAT router is configured, it's possible that connections from the outside world are being remapped as they pass through it, so to machines on the inside of your network, they appear to be from a local machine. Take a look at the Mercury console when you do one of these outside connections (or check the logs) and see what the connecting address is reported as. If it's something in the 10.10.10.x addressing range, then your NAT router is doing address remapping and you won't be able to do this type of connection control. Cheers! -- David --
live preview
enter atleast 10 characters
WARNING: You mentioned %MENTIONS%, but they cannot see this message and will not be notified
Saving...
Saved
With selected deselect posts show selected posts
All posts under this topic will be deleted ?
Pending draft ... Click to resume editing
Discard draft