Overview

While working with a shared IP address group through MyKerio Cloud portal, the IP list suddenly disappeared. The list was containing suspicious IP addresses in order to block network intruders.

This article provides information on how to restore the shared definitions IP list from the existing Kerio Control backup.

Solution

1. Download the latest backup available from MyKerio backups. Usually, it's configuration backup from yesterday.
   
   
   
2. Extract the .tar.gz archive and open winroute.cfg file.
   
3. Find the necessary IP address group. It is located under
   <list name="IpAccessList" identityCounter="X">
4. Find all the shared definition list items. They have SharedId variable set to a custom number (not equal to 0).
   
5. Replace all SharedId values with 0 (zeros). You can use Regex search/replace using 3rd-party tools, such as Notepad++ or VS code.
   (?<=<variable name="SharedId">)(.*)(?=</variable>)
6. Copy all the necessary list items to a separate file, i.e. IPGroup.txt.
   
7. Access your Kerio Control via SSH.
8. Make the system writeable by executing the following command:
   mount -o rw,remount /
9. Open winroute.cfg file using Nano editor.
   nano /var/winroute/winroute.cfg
10. Locate IpAccessList and paste the content of the IPGroup.txt in this table.
    

    Note: consider creating a separate test IP address group in Webadmin beforehand, so it will not cause a discrepancy.

11. Save the file changes: CTRL+X and Yes to write the changes.
12. Restart your firewall:
    /etc/boxinit.d/60winroute restart
    

Testing

Review the IP group list and confirm that it is now in your Kerio Control Firewall.

Proceed to import the IP address group back to MyKerio.