Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 4 replies
  • Answers 1 answer
  • Subscribers 3 subscribers
  • Views 6065 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[Solved] Incorrect country identified for ip address - blocking inbound from my mail provider

SalishSwede

I'm seeing my UTM block inbound mail from a US ip address (my email service provider). 

I haven't seen this behavior before.

Any ideas how to troubleshoot this?

Here's the ip to geolocation information

From the logs:

22:49:01 Country blocked TCP  
52.29.144.204 : 37566
→
10.1.1.2 : 25
 
[SYN] len=60 ttl=52 tos=0x00 srcmac=c4:ea:1d:95:a8:b9 dstmac=00:0c:29:f2:87:23
22:49:04 NAT rule #2 TCP  
52.29.144.204 : 37566
→
192.168.0.4 : 52525
 
[SYN] len=60 ttl=52 tos=0x00 srcmac=c4:ea:1d:95:a8:b9 dstmac=00:0c:29:f2:87:23
22:49:04 Country blocked TCP  
52.29.144.204 : 37566
→
10.1.1.2 : 25
 
[SYN] len=60 ttl=52 tos=0x00 srcmac=c4:ea:1d:95:a8:b9 dstmac=00:0c:29:f2:87:23
22:49:08 NAT rule #2 TCP  
52.29.144.204 : 37566
→
192.168.0.4 : 52525
 
[SYN] len=60 ttl=52 tos=0x00 srcmac=c4:ea:1d:95:a8:b9 dstmac=00:0c:29:f2:87:23
22:49:08 Country blocked TCP  
52.29.144.204 : 37566
→
10.1.1.2 : 25
 
[SYN] len=60 ttl=52 tos=0x00 srcmac=c4:ea:1d:95:a8:b9 dstmac=00:0c:29:f2:87:23
22:49:11 NAT rule #2 TCP  
52.29.144.204 : 37566
→
192.168.0.4 : 52525
 
[SYN] len=60 ttl=52 tos=0x00 srcmac=c4:ea:1d:95:a8:b9 dstmac=00:0c:29:f2:87:23
22:49:11 Country blocked TCP  
52.29.144.204 : 37566
→
10.1.1.2 : 25
 
[SYN] len=60 ttl=52 tos=0x00 srcmac=c4:ea:1d:95:a8:b9 dstmac=00:0c:29:f2:87:23
22:49:17 NAT rule #2 TCP  
52.29.144.204 : 37566
→
192.168.0.4 : 52525
 
[SYN] len=60 ttl=52 tos=0x00 srcmac=c4:ea:1d:95:a8:b9

dstmac=00:0c:29:f2:87:23

 


This thread was automatically locked due to age.
Parents Reply
  • 0 in reply to sachingurung

    So if the IP is Germany, then a rule blocking the US wouldn't change much.

    I checked the location of the IP address using a different service, and did find it was in Germany.

    Checking the country rules, I had blocking turn on for connections originating from Germany.

     

    This was the problem.

    Thanks

Children
Unfiltered HTML