Blocking Rogue Hits

Post any question you may have in regards to GoAnywhere Services and let our talented support staff and other users assist you.
4 posts Page 1 of 1

samuelaugustine

Posts: 2
Joined: Wed Jun 04, 2014 10:16 am

Post by samuelaugustine » Wed Jul 30, 2014 9:47 pm
Hello ,
We recently implemented Goanywhere Services in our company and we are seeing lot of rogue hits on our
FTP and SFTP ports.
We are not in a position to filter IPs in our firewall since many small stores connect to our server and they dont have a static IP and they keep changing.
Other alternative is to blacklist the rogue IPs , but when we blacklist the IP , the hits start coming from some other IP addresses .
Has anyone faced similar issue .would be intrested to know what measures can be taken to mitigate this.

Thank you,
Samuel Augustine

Support_Rick

Support Specialist
Posts: 590
Joined: Tue Jul 17, 2012 2:12 pm
Location: Phoenix, AZ

Post by Support_Rick » Thu Jul 31, 2014 10:47 am
Try activating the Auto Blacklisting option within GAServices.

This can be found under the Security Menu and allows you to build your own company defined sensitivity into the black listing for DOS and Brute-Force attacks. Ban type can be Permanent as well as Temporary.
Rick Elliott
Lead Solutions Consultant
(402) 944.4242
(800) 949-4696

samuelaugustine

Posts: 2
Joined: Wed Jun 04, 2014 10:16 am

Post by samuelaugustine » Mon Aug 04, 2014 9:41 am
Unfortunately in our case , the services sits behind a firewall and a loadbalancer and does not receive
the original IP.

At the services level there is only one IP ( the gateway IP ) for all the inbound connections.

Support_Rick

Support Specialist
Posts: 590
Joined: Tue Jul 17, 2012 2:12 pm
Location: Phoenix, AZ

Post by Support_Rick » Mon Aug 04, 2014 4:40 pm
Samuel,

For the AutoBlock IP to work, it needs that originating IP address. This value can be passed through your Load Balancer into Gateway -> GAServices for this to happen.

Check with your network folks to see if they can set the option in the Load Balancer to get you that information .
Rick Elliott
Lead Solutions Consultant
(402) 944.4242
(800) 949-4696
4 posts Page 1 of 1