Hi all, we are continiously having locked mailboxes due to intrusion attempts.
Is there any quick way to see why a mailbox has been locked ? i know it's due to 3 failed login attemps, but can I easily find what IP actually locked the mailbox ?
I looked through the pop / smtp / imap log files, but this is not easy. Any tool available or maybe a suggestion for future versions to have a button next to the unlock mailbox button to see why it was locked (with details of failed attempts) ?
thanks
locked mailbox
-
- Posts: 1370
- Joined: Thu Nov 11, 2004 5:26 pm
- Location: Kingsville, Texas
Re: locked mailbox
If you can track down the IP address or better yet a group of the same IP addresses, you can set up a windows firewall to block a whole class C or even higher. However, please note that if you attempt to block valid IP addresses of servers or people who use your services (for example your server is in the US, you send/receive often in the US, your users are in the US, and the hackers are in the US) then you may do a false block.
Robert Williams, Owner
www.WilliamsWebSolutions.com
#1 in MailEnable Business-Class Email Hosting - Switch to Williams Web Solutions and we will migrate your accounts to us for FREE!
We can be hired to help you with your Mail Enable server, too!
www.WilliamsWebSolutions.com
#1 in MailEnable Business-Class Email Hosting - Switch to Williams Web Solutions and we will migrate your accounts to us for FREE!
We can be hired to help you with your Mail Enable server, too!
-
- Posts: 154
- Joined: Mon May 24, 2010 2:27 pm
Re: locked mailbox
We like to use the other abuse prevention option. It blocks the IP being used for a temporary amount of time instead of locking the mailbox. this makes it so the actual owner of the mailbox does not get blocked.
Kent Runyan
CFDynamics.com
Providing World Class Hosting Solutions for over two decades.
CFDynamics.com
Providing World Class Hosting Solutions for over two decades.
Re: locked mailbox
can you tell me how & where you change that option ?
-
- Site Admin
- Posts: 9738
- Joined: Mon Mar 22, 2004 4:44 am
- Location: Melbourne, Victoria, Australia
Re: locked mailbox
Hi,
http://www.mailenable.com/documentation ... icies.html - Abuse detection and prevention optioncan you tell me how & where you change that option ?
Regards,
Ian Margarone
MailEnable Support
Ian Margarone
MailEnable Support
Re: locked mailbox
is there any way we can see Who actually locked a mailbox ? Which IP, Which Login, What time ?
Thanks, this would be a big help
Thanks, this would be a big help
Re: locked mailbox
we found that this line is entered in the NAME.sys file under postoffices Auth-Failure-Count:
is there any way this can also be written in a separate file under the logging directory ?
In this case we can easily detect what mailboxes are locked at any given moment and found potential hack attempts much quicker.
is there any way this can also be written in a separate file under the logging directory ?
In this case we can easily detect what mailboxes are locked at any given moment and found potential hack attempts much quicker.
-
- Posts: 9
- Joined: Wed Feb 06, 2008 2:59 pm
Re: locked mailbox
We too have the same issue.
It is terribly difficult, almost impossible to find why the mailbox is locked.
Please MailEnable supply us with a centralised security-log.
Something like:
That would really be helpful.
Herman
It is terribly difficult, almost impossible to find why the mailbox is locked.
Please MailEnable supply us with a centralised security-log.
Something like:
Code: Select all
Date Time | IP | Service | Postoffice | Mailbox
Herman
-
- Posts: 10
- Joined: Thu Feb 08, 2018 10:38 pm
Re: locked mailbox
Please fix this. When a mailbox is locked, please provide the information that locked it: which service/services, time, ip address, etc.
Really.
Really.