Can an IP address be whitelisted?

I have a small GroupWise server.

The server uses blacklists.

Outgoing email from my iPhone is sent to my GWIA on port 25.

Many of my cellphone provider's dynamically assigned IP addresses are
blacklisted. <whoops!>

I can't send email from my own cellphone to/via my own GroupWise server.

I want to continue using blacklists but I'm willing to make an
exception for a couple of IP addresses and Secure Messaging Gateway is
not a solution in this case.

I actually spoke with my cellphone provider to see if they could remove
their IP addresses from the RBL servers. They didn't have a clue what I
was talking about and suggested I had a problem with my own server
because they don't blacklist IP addresses. Once I explained how
blacklists worked and they began to appreciate the magnitude of the
problem, they just laughed! I can't say I blame them! :-(

--
Kevin Boyle - Knowledge Partner
If you find this post helpful and are logged into the web interface,
please show your appreciation and click on the star below this post.
Thank you.

Tags:

Parents Reply Children
  • On 31.10.2018 08:34, laurabuckley wrote:
    >
    > Hi Kevin,
    >
    > Perhaps "overriding a blacklist" is what you are looking for:
    > https://www.novell.com/documentation/groupwise18/gw18_guide_admin/data/adm_gwia_internet_access.html#ak7rzdi


    I just checked and indeed that same sentence is in the groupwise docs
    back to Groupwise 7. I'm 99,999% sure that's incorrect. GWIA never ever
    checks the class of service or anything else on a blacklist hit.

    CU,
    --
    Massimo Rosen
    Micro Focus Knowledge Partner
    No emails please!
    http://www.cfc-it.de
  • Hi Massimo,

    Maybe Kevin can confirm that for us.....

    Cheers,
  • laurabuckley wrote:

    >
    > Hi Kevin,
    >
    > Perhaps "overriding a blacklist" is what you are looking for:
    >

    https://www.novell.com/documentation/groupwise18/gw18_guide_admin/data/adm_gwia_internet_access.html#ak7rzdi
    >
    > Cheers,


    Hi Laura,

    Your link states this:
    > You can use the SMTP Incoming Exceptions list on a class of service
    > to override a blacklist. For information about editing or creating a
    > class of service, see Creating a Class of Service.



    The GWIA "help" says:
    /gwadmin-console/help/en/gwia.html#gwia_ac_blacklists

    > If a blacklist is blocking a specific SMTP host that you want to
    > receive messages from, you can allow a specific SMTP host as an
    > exception to the blacklist. On the Default Class of Service, use SMTP
    > Incoming tab > Allow incoming messages to override the blacklisted
    > host. For example, if goodhost.com has been added to a blacklist but
    > you still want to receive messages from that host, you could edit the
    > default class of service to add goodhost.com to the list of allowed
    > hosts.


    The Class of Service description states:

    > If you've chosen to prevent incoming Internet messages but you want
    > to allow messages from specific Internet sites, add the sites to the
    > Allow Messages From list.
    >
    > Allow Messages From List: Lists the only Internet sites from which
    > members of the class of service can receive messages.
    >
    > You can use the Allow Message From list to override blacklists
    > (Access Control tab > Blacklists page). For example, if goodhost.com
    > has been added to a blacklist but you still want to receive messages
    > from that host, you could add the host to the Allow Messages From
    > list.


    From what I can see, the documentation is wrong or, at best, very
    misleading.

    When I look at the Default Class of Service or when I create a new
    Class of service and select "Allow incoming messages", the exceptions
    will "Prevent messages from:"

    When I create a new Class of service and select "Prevent incoming
    messages", the exceptions will "Allow messages from:"

    Neither of these options appear to allow me to override blacklisted IP
    addresses while still accepting email from anyone.

    The only way I can see to override a blacklisted IP address is to
    create a new Class of service, select "Prevent incoming messages", then
    as exceptions list every possible incoming IP address I might receive
    email from and include any blacklist IP addresses I want to override.
    This is obviously impractical nor can I be sure it will actually
    override the blacklist. :-(


    --
    Kevin Boyle - Knowledge Partner
    If you find this post helpful and are logged into the web interface,
    please show your appreciation and click on the star below this post.
    Thank you.