This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Commtouch IP addresses being blocked by XG

Hi,

Our XG is blocking continuously accesses from Commtouch servers on port 80.

Is this normal?

Why are being logged events from several Commtouch servers? Is it connected to the UTM services or attack attempts?

Regards,

Antonio



This thread was automatically locked due to age.
Parents
  • Hi,

    sorry for asking, but what comes out in you Case? I have too 3 ip´s, that will block about everey minute:

    103.5.198.214 (CHN)
    84.39.152.32 (CH)
    216.163.188.34 (USA)
    All Commtouch ip´s.

    I think also, this will be done by a part of XG self. In the Posts from years ago till today, you read often from Commtouch ip´s.

    "UTMs get their live lookups with Port 80 to Commtouch. And after a while, the server will try to reset the old connection."
    "CommTouch (now Cyren) is a company the UTM uses for email spam classification."

    So i found realy a info about Commtouch used by Sophos Products:
    https://community.sophos.com/kb/en-us/126576

    Hope, it helps, at least it helped me.

Reply
  • Hi,

    sorry for asking, but what comes out in you Case? I have too 3 ip´s, that will block about everey minute:

    103.5.198.214 (CHN)
    84.39.152.32 (CH)
    216.163.188.34 (USA)
    All Commtouch ip´s.

    I think also, this will be done by a part of XG self. In the Posts from years ago till today, you read often from Commtouch ip´s.

    "UTMs get their live lookups with Port 80 to Commtouch. And after a while, the server will try to reset the old connection."
    "CommTouch (now Cyren) is a company the UTM uses for email spam classification."

    So i found realy a info about Commtouch used by Sophos Products:
    https://community.sophos.com/kb/en-us/126576

    Hope, it helps, at least it helped me.

Children
No Data