zimbraHttpThrottleSafeIPs ignored?

[7224jobe]

Hi everyone, in my Zimbra 10 single server installation I set up zimbraHttpThrottleSafeIPs this way:

Code: Select all

zimbra@mail:~$ zmprov gcf zimbraHttpThrottleSafeIPs
zimbraHttpThrottleSafeIPs: 172.31.0.0/20
zimbraHttpThrottleSafeIPs: XXX.245.254.160/29
zimbraHttpThrottleSafeIPs: YYY.28.71.164/32

zimbra@mail:~$ zmprov getServer `zmhostname` zimbraHttpThrottleSafeIPs
# name mail.company.com
zimbraHttpThrottleSafeIPs: 172.31.0.0/20
zimbraHttpThrottleSafeIPs: XXX.245.254.160/29
zimbraHttpThrottleSafeIPs: YYY.28.71.164/32

But I noticed that sometimes my users can not login to webmail since one of our IPs gets banned by Zimbra, here is the log line:

Code: Select all

Access from IP XXX.245.254.162 suspended, for repeated failed login.

XXX.245.254.162 is the IP address of our central headquarter, where most of users reside.

As far as I know IP address XXX.245.254.162 is included in 200.245.254.160/29, so why it is banned by Zimbra? Am I missing something?