SMTP > Inbound > IP Address Connection Restrictions (VERY SLOW)

[kiamori]

Can we improve on this or is their a way to edit this directly using something like VS Code or notepad++ where we can load and edit this data faster? Currently it takes up to 5 minutes to load this after clicking on "Access Control". Which is very painful when adding several entries per day.

I would be happy to edit it directly but didn't know if it's save to edit the tab file directly?

Can we edit SMTP-DENY.TAB directly?

[gxavier.bh]

It seams that this forum is almost abandon. I would suggest you start a test on a different machine. Install mailenable, edit it manually and after that, go to "Access Control" and see if the IP you direct enter, is there.

[hunter0512]

Hello gxavier.bh,

I have been able to directly edit the SMTP-DENY.TAB file with Notepad++ in the past, the only problem with this is the more lines that you add, it can cause your server to slow down as it has to parse each line (I have been this route before).

Temporarily as a workaround I have setup an "Inbound Rule" in my Windows Defender Firewall with Advanced Security that takes the load off Mailenable but the load will still be on the Windows itself as my firewall cannot process CIDR-4 Layer 3 rules ... yet.

If you are trying to block a large amount of IPs you may want to consider moving the blocking on to your firewall so the processing is not on Mailenable or Windows as this can cause processing delays.

Jason

[gxavier.bh]

I was thinking about use proxmox mail gateway to do so, but it does not handle user authentication for SMTP.

[gxavier.bh]

I also have a IP block on my linux router and on Windows firewall. I prefer to stop the connection on router to avoid unwanted connection on the server.
if you want to find a router / switch L3, go to google and type:
"router to do CIDR-4 Layer 3 suggest some routers models explanation in english" type ENTER, go to IA mode an see the answer.

[hunter0512]

Hello gxavier.bh,

I use Cisco Meraki hardware, the firewall is a MX85-HW and I recently contacted support about enabling CIDR-4 for Layer 3 inbound blocking because they have to turn it on in the back-end and the support engineer said that the latest release of the firmware (which I am loading this weekend) will enable the feature.

My guess they got a lot of emails/support calls from companies to enable it. Once that is done I am going to move all of my blocking from the Windows firewall to the MX and get the load off the server.

Jason

[gxavier.bh]

Hello gxavier.bh,

I use Cisco Meraki hardware, the firewall is a MX85-HW and I recently contacted support about enabling CIDR-4 for Layer 3 inbound blocking because they have to turn it on in the back-end and the support engineer said that the latest release of the firmware (which I am loading this weekend) will enable the feature.

My guess they got a lot of emails/support calls from companies to enable it. Once that is done I am going to move all of my blocking from the Windows firewall to the MX and get the load off the server.

Jason

Very nice. Keep this post up to date so others can see your solution.