Fail2ban genuine IP block issue, and Whitelist method

Example Blocked Domain: ienergizer.com

Resolution:

1. Search in Iptables rule for block status of ienergizer.com.

iptables -L -v | grep iener

Expected output if the domain is blocked by fail2ban.

3794 192K REJECT all -- any any mx1.ienergizer.in anywhere reject-with icmp-port-unreachable.

2. Now check the IP of blocked email gateway.

[root@sysmet-zimbra ~]# host mx1.ienergizer.in.

mx1.ienergizer.in has address 103.212.20.190

3. Now whitelist the Blocked IP (103.212.20.190),like below in /etc/fail2ban/jail.conf file,

ignoreip = 127.0.0.1/8 10.240.40.228/32 59.163.17.112 103.212.20.190/32

4. Restart service of fail2ban.

/etc/init.d/fail2ban stop

/etc/init.d/fail2ban start

5. Now check below,

iptables -L -n | grep 103.212.20.19

Now nothing should come.