Not allowed IP!

[Matthew Marlowe]

Hello, I updated from NX < 2.0 (I forget the version) to 2.0.6.  Everything is working, most of my clients are using nxlogon - But for those not, we used to get the login page.. I just found out that those PCs are getting rejected with Not allowed IP!.  I have confirmed in Allowed IP range is as follows: 192.168.16 192.168.17 192.168.46 192.168.20, the client is 192.168.16.XX, I even tried replacing Allowed IP with 192.168.  It's going to NxFilter, those DNS names that are Whitelisted with No Auth and No Filter work, but login page not being presented.  As a last resort I removed all IPs from Allowed section, still same error.  Now, I restarted the NxFilter service, but still the same error.. Nothing in the log file.  So only clients using nxlogon are working.  Please help me out.

---

This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message, which arise as a result of e-mail transmission. If verification is required please request a hard-copy version.

[Matthew Marlowe]

I even tried removing all from allowed_ip which should allow all, and restarted.. Still from those clients that don't use nxlogon, get Not allowed IP! - Please help ASAP if you can, because I have clients not working because of this.  I don't want to go back to the previous version (I have a backup), because then my logging will be all messed up.. I don't understand why it allows login from nxlogon but other clients says Not allowed IP!

[Jinhee Lee]

Try ip range user to cover login-page users temporarily.
Where do you get that error messages?
Gui or console?

[Matthew Marlowe]

The client receives the error when accessing through web browser.  If I do an ip range user, if that works - Then, I won't know who's logging in :-)  Also just noticed on the server running NxFilter, if I go to IP/admin it works but localhost/admin says same error... Very strange, can we enable debug somehow if not happening for you to get to bottom of this? Otherwise I'll just reload previous nxfilter I guess....

[Jinhee Lee]

Not on the pc atm.
Restore the old one.
And get me the version.
I will test the version up on my side.

[Matthew Marlowe]

I'm back to version 1.6.0.  All is OK.  Let me know what you need from me, if anything.  I have the bad copy saved as nxfilter-bad locally so I can send any file if need be.  Entire dir is 823mb, so let me know what to send if anything.

[Jinhee]

There are 2 problems.

1. That GUI IP restriction applied to the login-page as well.
  - block-page, login-page, welcome-page will be excluded from the restriction on v2.0.7

2. The difference between 127.0.01 and localhost is that your browser uses ipv6 for localhost and v2 doesn't check ipv6.
  - ipv6 will be checked on v2.0.7.

But I don't know why it's not working when you remove everything from IP restriction.
We can find out with the new version.

Jinhee

[Matthew Marlowe]

Ok let me know when 2.0.7 is released and I'll try again..

[Jinhee]

We're doing the beta test for v2.0.7.

  https://groups.google.com/forum/#!topic/nxfilter200/C_Iyf01EsD4

Jinhee