Hi all, we are continiously having locked mailboxes due to intrusion attempts.
Is there any quick way to see why a mailbox has been locked ? i know it's due to 3 failed login attemps, but can I easily find what IP actually locked the mailbox ?
I looked through the pop / smtp / imap log files, but this is not easy. Any tool available or maybe a suggestion for future versions to have a button next to the unlock mailbox button to see why it was locked (with details of failed attempts) ?
thanks
locked mailbox
-
- Posts: 1254
- Joined: Thu Nov 11, 2004 5:26 pm
- Location: Kingsville, Texas
Re: locked mailbox
If you can track down the IP address or better yet a group of the same IP addresses, you can set up a windows firewall to block a whole class C or even higher. However, please note that if you attempt to block valid IP addresses of servers or people who use your services (for example your server is in the US, you send/receive often in the US, your users are in the US, and the hackers are in the US) then you may do a false block.
Robert Williams, Owner
www.WWSHosting.net
#1 in MailEnable Business-Class Email Hosting - Switch to Williams Web Solutions and get your first 2 months FREE!
We can be hired to help you with your Mail Enable server, too!
www.WWSHosting.net
#1 in MailEnable Business-Class Email Hosting - Switch to Williams Web Solutions and get your first 2 months FREE!
We can be hired to help you with your Mail Enable server, too!
-
- Posts: 97
- Joined: Mon May 24, 2010 2:27 pm
Re: locked mailbox
We like to use the other abuse prevention option. It blocks the IP being used for a temporary amount of time instead of locking the mailbox. this makes it so the actual owner of the mailbox does not get blocked.
Re: locked mailbox
can you tell me how & where you change that option ?
-
- Site Admin
- Posts: 8623
- Joined: Mon Mar 22, 2004 4:44 am
- Location: Melbourne, Victoria, Australia
Re: locked mailbox
Hi,
http://www.mailenable.com/documentation/9.0/Enterprise/Localhost_-_Policies.html - Abuse detection and prevention option
can you tell me how & where you change that option ?
http://www.mailenable.com/documentation/9.0/Enterprise/Localhost_-_Policies.html - Abuse detection and prevention option
Regards,
Ian Margarone
MailEnable Support
Ian Margarone
MailEnable Support
Re: locked mailbox
is there any way we can see Who actually locked a mailbox ? Which IP, Which Login, What time ?
Thanks, this would be a big help
Thanks, this would be a big help
Re: locked mailbox
we found that this line is entered in the NAME.sys file under postoffices Auth-Failure-Count:
is there any way this can also be written in a separate file under the logging directory ?
In this case we can easily detect what mailboxes are locked at any given moment and found potential hack attempts much quicker.
is there any way this can also be written in a separate file under the logging directory ?
In this case we can easily detect what mailboxes are locked at any given moment and found potential hack attempts much quicker.
Who is online
Users browsing this forum: No registered users and 12 guests