locked mailbox

Discussion forum for Enterprise Edition.
Post Reply
siteffect
Posts: 17
Joined: Mon Feb 13, 2017 11:18 am

locked mailbox

Post by siteffect »

Hi all, we are continiously having locked mailboxes due to intrusion attempts.
Is there any quick way to see why a mailbox has been locked ? i know it's due to 3 failed login attemps, but can I easily find what IP actually locked the mailbox ?
I looked through the pop / smtp / imap log files, but this is not easy. Any tool available or maybe a suggestion for future versions to have a button next to the unlock mailbox button to see why it was locked (with details of failed attempts) ?
thanks

rfwilliams777
Posts: 1370
Joined: Thu Nov 11, 2004 5:26 pm
Location: Kingsville, Texas

Re: locked mailbox

Post by rfwilliams777 »

If you can track down the IP address or better yet a group of the same IP addresses, you can set up a windows firewall to block a whole class C or even higher. However, please note that if you attempt to block valid IP addresses of servers or people who use your services (for example your server is in the US, you send/receive often in the US, your users are in the US, and the hackers are in the US) then you may do a false block.
Robert Williams, Owner
www.WilliamsWebSolutions.com
#1 in MailEnable Business-Class Email Hosting - Switch to Williams Web Solutions and we will migrate your accounts to us for FREE!
We can be hired to help you with your Mail Enable server, too!

cfdynamics
Posts: 154
Joined: Mon May 24, 2010 2:27 pm

Re: locked mailbox

Post by cfdynamics »

We like to use the other abuse prevention option. It blocks the IP being used for a temporary amount of time instead of locking the mailbox. this makes it so the actual owner of the mailbox does not get blocked.
Kent Runyan
CFDynamics.com
Providing World Class Hosting Solutions for over two decades.

siteffect
Posts: 17
Joined: Mon Feb 13, 2017 11:18 am

Re: locked mailbox

Post by siteffect »

can you tell me how & where you change that option ?

MailEnable-Ian
Site Admin
Posts: 9738
Joined: Mon Mar 22, 2004 4:44 am
Location: Melbourne, Victoria, Australia

Re: locked mailbox

Post by MailEnable-Ian »

Hi,
can you tell me how & where you change that option ?
http://www.mailenable.com/documentation ... icies.html - Abuse detection and prevention option
Regards,

Ian Margarone
MailEnable Support

siteffect
Posts: 17
Joined: Mon Feb 13, 2017 11:18 am

Re: locked mailbox

Post by siteffect »

is there any way we can see Who actually locked a mailbox ? Which IP, Which Login, What time ?
Thanks, this would be a big help

siteffect
Posts: 17
Joined: Mon Feb 13, 2017 11:18 am

Re: locked mailbox

Post by siteffect »

we found that this line is entered in the NAME.sys file under postoffices Auth-Failure-Count:
is there any way this can also be written in a separate file under the logging directory ?
In this case we can easily detect what mailboxes are locked at any given moment and found potential hack attempts much quicker.

Herman_verschooten
Posts: 9
Joined: Wed Feb 06, 2008 2:59 pm

Re: locked mailbox

Post by Herman_verschooten »

We too have the same issue.
It is terribly difficult, almost impossible to find why the mailbox is locked.

Please MailEnable supply us with a centralised security-log.

Something like:

Code: Select all

Date Time |  IP  | Service  |  Postoffice  |  Mailbox
That would really be helpful.

Herman

schmidtc63
Posts: 10
Joined: Thu Feb 08, 2018 10:38 pm

Re: locked mailbox

Post by schmidtc63 »

Please fix this. When a mailbox is locked, please provide the information that locked it: which service/services, time, ip address, etc.

Really.

Post Reply