z-push Zimbra DoSFilter

Diablo666

Hello,

I configured a Z-push with my Zimbra OSE 8.8.15 as a Backend.
I get a lot of error message in z-push log and my Outlook client is desconnected:

08/06/2022 10:08:08 [37817] [ERROR] [mymail@mydomaine.com] Zimbra->SoapRequest(): If using zimbra 8 or later please make sure to whitelist the z-push server IP address(es) in the DoSFilter
08/06/2022 10:08:08 [37817] [ERROR] [mymail@mydomaine.com] Zimbra->SoapRequest(): See zimbra wiki for details - http://wiki.zimbra.com/wiki/DoSFilter
08/06/2022 10:08:08 [37817] [ERROR] [mymail@mydomaine.com] Zimbra->SoapRequest(): DoSFilter trap - See z-push-error.log - Delaying one second before continuing …
08/06/2022 10:08:09 [37817] [ERROR] [mymail@mydomaine.com] Zimbra->SoapRequest(): DoSFilter trap - Setting/Increasing session SOAP Request Delay to [40000] microseconds
08/06/2022 10:08:09 [37817] [ERROR] [mymail@mydomaine.com] Zimbra->SoapRequest(): SOAP FAULT: HTML Error Returned - Error 503 Service Unavailable
08/06/2022 10:08:09 [37817] [ERROR] [mymail@mydomaine.com] Zimbra->SoapRequest(): If using zimbra 8 or later please make sure to whitelist the z-push server IP address(es) in the DoSFilter
08/06/2022 10:08:09 [37817] [ERROR] [mymail@mydomaine.com] Zimbra->SoapRequest(): See zimbra wiki for details - http://wiki.zimbra.com/wiki/DoSFilter
08/06/2022 10:08:09 [37817] [ERROR] [mymail@mydomaine.com] Zimbra->SoapRequest(): DoSFilter trap - See z-push-error.log - Delaying one second before continuing …
08/06/2022 10:08:10 [37817] [ERROR] [mymail@mydomaine.com] Zimbra->SoapRequest(): DoSFilter trap - Setting/Increasing session SOAP Request Delay to [80000] microseconds
08/06/2022 10:08:10 [37817] [ERROR] [mymail@mydomaine.com] Zimbra->SoapRequest(): SOAP FAULT: HTML Error Returned - Error 503 Service Unavailable - Enable ZIMBRA_DEBUG for more details - returning { false }
08/06/2022 10:08:10 [37817] [ERROR] [mymail@mydomaine.com] Zimbra->SoapRequest(): DoSFilter trap - Request FAILED after 2 delays ! - returning { false }

I’ve already whitelisted my z-push IP on my Zimbra mail server:

zmprov mcf +zimbraHttpThrottleSafeIPs 10.1.2.3/32

But nothing changes.

Can you please help resolve this issue.

BR.

liverpoolfcfan

@diablo666 I would suggest you try adding the IP without the /32 on the end. I have simply whitelisted individual IP Addresses without any bitmask modifier and I never see this issue.

The other thing you might check is if you allow IPv6 connectivity. If so, the connection might have an IPv6 form that is not matching your filter rules. I have disabled IPv6 on my servers.