ssl0.ovh.net

[innovaesoftware]

We detect that malwarebytes Endpoint Protection is blocking access to ssl0.ovh.net (IP 213.186.33.20) by modifying the result of the DNS query to 127.42.0.x

This is happening on 2 machines where EP is installed. The domain name is used as SMTP server, so email is not working.

I've tried adding an exclusion for ssl0.ovh.net in the cloud console with no luck. Please help. Thanks in advance. 

[MysteryFCM]

We're not blocking the hostname or it' IP. Can you post your protection log please?

[innovaesoftware]

57 minutes ago, MysteryFCM said:

We're not blocking the hostname or it' IP. Can you post your protection log please?

I'm sorry, I just realized this is the section for Malwarebytes for home. I am using Endpoint Protection, is it the same? In case, can you please move to the correct section? Anyway, my issue persists. How can I collect the protection log? Thanks again.

[MysteryFCM]

I'll point one of the support folks here (I'm not familiar with Endpoint Protection).

Sorry for the delay.

[KDawg]

Mystery is correct here we would definitely want the a capture or log of the detection if one is available. If this is not generating a detection it may be interference in the DNS by the web protection module.

Can we temporarily disable the Web Protection layer in the Settings > Policy for the the affected endpoint, and see if this issue persists?

Many Thanks