How to: fix a white-list or safe-list suddenly empty

Syncplify.me Server! version: 4.0.0-4.1.4

Occasionally users report that their white-list or safe-list in the web management interface suddenly shows up as “empty” and they cannot add any more IP addresses or networks to it. That bug was already previously documented in our knowledge base, and has been resolved/fixed as of version 4.1.5.

The misbehavior is caused by the fact that an Admin has added the same IP or network twice to the list(s).
Upgrading to the latest version will prevent Admins from adding any more duplicates… but it does not sanitize the existing lists, so you will still have to “clean” your lists manually before you can see them again. Continue reading

Syncplify.me Server! v4.1.4 released

We have just released version 4.1.4 of our Syncplify.me Server! software. This version features the following improvements:

  • Improved: added the possibility to use IP ranges (ex: 10.1.1.17-10.1.1.34) in blacklist, whitelist, and safelist
  • Fixed: white-list and safe-list now automatically handle duplicates gracefully

Warning: upgrading to this version from any version prior to 4.0.34 will invalidate your license, so please if you are a customer – before you upgrade – contact us to request a license reset.

Note: if after the update you notice any unexpected behavior in the web interface, just hit Ctrl-F5 in your browser; that will force the browser to reload the page as well as all back-end scripts and update the ones that may have been cached from previous versions of the software.

As usual you can download this new release from our website.

Syncplify.me Server! v4: black-list, white-list… and safe-list

Syncplify.me Server! version: 4.0.0+

Up to version 3.x, Syncplify.me Server! featured a black-list and a white-list. The black-list is where all “bad guys” would end up if they tried attacking the server (DoS, DDoS, password harvesting, …) while the white-list was used for a much more restrictive purpose. In fact – when enabled – the white-list would allow clients to connect only if their IP address was in the white-list. Enabling the white-list, practically, means permanently black-listing anyone who is not on in the white-list.

Although the black/white concept was good enough for most installations, we figured that we could make it even more flexible. That’s why in version 4.0, Syncplify.me Server! introduces a third list, called safe-list. Here’s how the 3 lists work:

  • BlackList: any IP address (e.g.: 192.168.1.35) or network (e.g.: 10.23.5.0/255.255.255.0) listed in the black-list will be rejected
  • WhiteList: if this list is not empty, then only the IP addresses and networks in this list will be allowed to connect, and anyone else’s connection attempt will be rejected (also, it is important to understand that whitelisting an IP address does not prevent it from being blacklisted, see the safe-list here below for that)
  • SafeList: IP addresses and networks listed in the safe-list will never be blacklisted, even if they perform actions that may be interpreted as attacks, for example if they connect and disconnect without attempting authentication (typical behavior of a load balancer)

A clever use of the 3 above lists guarantees enough flexibility to satisfy a much wider variety of situations than any previous version of Syncplify.me Server!