Access Denied to whitelisted name/IP ?

[Nomadadon]

I'm using the latest Docker version of Sabnzbd, 2.3.7 according to the log. I have a white list entry:

host_whitelist = HOSTNAME, FQDN, 172.21.0.0/24, 172.21.0.1

I have connected to the docker container, grep white from config.ini give the same line. When I try to connect, my web browser gives just the error "access denied" but in the Docker log I get:

sabnzbd | 2019-03-10 17:22:38,366::DEBUG Refused connection from 172.21.0.1

The IP in the log line matches MYIP above and is in the subnet.

It was working up until 2 days ago and I just ran out of good searches.

Any ideas?

[sander]

Code: Select all

host_whitelist = HOSTNAME, FQDN, 172.21.0.0/24, 172.21.0.1

You never never need to host_whitelist an IP address; the host_whitelist is there if you want SABnzbd to accept *host names*.
AFAIK You cannot fill out a subnet in host_whitelist

Code: Select all

in the Docker log I get:

sabnzbd | 2019-03-10 17:22:38,366::DEBUG Refused connection from 172.21.0.1

Is that SAB logging? In SAB logging, there would be the SAB module and line number in it.

If you have that SAB logging, we can see the reason. Maybe you filled out extra blocking in SABnzbd.

[Nomadadon]

I added the the IP's because the hostnames weren't working either. I can change it back to hostname,fqdn as I had it last night but I doubt that will change.

I just reloaded the http interface:

Code: Select all

root@059a022b3e79:/datadir/logs# tail -1 sabnzbd.log
2019-03-10 18:02:34,485::DEBUG::[interface:146] Refused connection from 172.21.0.1

Nothing else in the logbefore it or after other than calls via api from couchpotato.

[sander]

interface line 146: AFAIK that is the general access checking, which you can block / specify in Config -> General. So check that out: SABnzbd Host, and Security settings.

The host_whitelist is only used/checked in interface.py line 173.

[Nomadadon]

I can't log into the GUI to change it. If I go to "http://host:8080" I get the access denied immediately.

[sander]

It's a docker ... so kill it and start from fresh. Treat a docker like "cattle, not a pet"

The problem is in your sabnzbd.ini (you locked yourself out), or how you approach it. Not in SABnzbd.

Code: Select all

If I go to "http://host:8080"

... why the host stuff? Please use an IP address, and I would say 127.0.0.1