Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » My coworkers can't login from out side the office.
  •  
tuyphong1982

Messages: 15

Karma: 0
Send a private message to this user
Please help me how to resolve this problem. My coworkers said that they can't login to the Web mail even Microsoft Outlook also. Please read my Security log for more understand:

[19/Feb/2009 14:52:37] Failed POP3 login from 203.210.208.208
[19/Feb/2009 14:52:42] SMTP Spam attack detected from 118.69.204.140, client closed connection before SMTP greeting
[19/Feb/2009 15:02:37] Failed POP3 login from 203.210.208.208
[19/Feb/2009 15:02:38] SMTP Spam attack detected from 118.69.204.140, client closed connection before SMTP greeting
[19/Feb/2009 15:03:38] SMTP Spam attack detected from 118.69.204.140, client closed connection before SMTP greeting
[19/Feb/2009 15:03:41] Failed POP3 login from adsl-dynamic-pool-xxx.hcm.fpt.vn

  •  
TorW

Messages: 769
Karma: 9
Send a private message to this user
Check your warning.log too. It will list the user and IP failing login. Did they remember to use their domain name in the user name? If they belong to a different domain than what is set up as default on KMS, they won't be able to log in (provided you have more than one domain on KMS).
  •  
tuyphong1982

Messages: 15

Karma: 0
Send a private message to this user
Thanks for your kindly support. I tried to read the warning.log, but I can't understand what is the problem. This is my warning.log, please take a look, thanks a lots.

[21/Feb/2009 23:54:47] DNS failure while trying to find address 186.151.113.203.list.dsbl.org in blacklist Distributed Sender Blackhole List - trusted
[22/Feb/2009 00:08:25] User linh.td performed NTLM authentication in NT domain TVM, this domain is not valid
[22/Feb/2009 00:13:41] User linh.td performed NTLM authentication in NT domain TVM, this domain is not valid
[22/Feb/2009 00:18:59] User linh.td performed NTLM authentication in NT domain TVM, this domain is not valid
[22/Feb/2009 00:38:56] HTTP/WebMail: User hong.ct<_a.t_>abc.com doesn't exist. Attempt from IP address 118.68.62.88
[22/Feb/2009 00:39:12] HTTP/WebMail: User hong.ct<_a.t_>abc.com doesn't exist. Attempt from IP address 118.68.62.88
[22/Feb/2009 00:39:35] HTTP/WebMail: User thanhhong.ch<_a.t_>abc.com doesn't exist. Attempt from IP address 118.68.62.88
[22/Feb/2009 15:45:50] User ngockhanh.dh performed NTLM authentication in NT domain TVM, this domain is not valid
[22/Feb/2009 20:29:51] HTTP/WebMail: User minkhuong.kt<_a.t_>abc.com doesn't exist. Attempt from IP address 210.245.110.153
[22/Feb/2009 23:00:01] User linh.td performed NTLM authentication in NT domain TVM, this domain is not valid
[22/Feb/2009 23:06:28] HTTP/WebMail: Invalid password for user thuytien.tt<_a.t_>abc.com. Attempt from IP address 222.253.60.165
[23/Feb/2009 00:53:08] User linh.td performed NTLM authentication in NT domain TVM, this domain is not valid
[23/Feb/2009 00:54:13] User linh.td performed NTLM authentication in NT domain TVM, this domain is not valid
[23/Feb/2009 08:45:12] POP3: Invalid password for user phuong.lq<_a.t_>abc.com. Attempt from IP address 192.168.10.156
[23/Feb/2009 08:52:33] HTTP/WebMail: User longhoa<_a.t_>abc.com doesn't exist. Attempt from IP address 192.168.10.119
[23/Feb/2009 08:52:39] HTTP/WebMail: User longhoa<_a.t_>abc.com doesn't exist. Attempt from IP address 192.168.10.119
[23/Feb/2009 08:58:18] DNS failure while trying to find address 41.22.245.210.list.dsbl.org in blacklist Distributed Sender Blackhole List - trusted
  •  
TorW

Messages: 769
Karma: 9
Send a private message to this user
Are you using internal accounts on KMS, or do you have AD integrated users? Are you using Kerberos authentication? Is KMS running on Linux or Windows? The whole thing is a bit confusing since some users are unknown and some simply have the wrong passwords.

A couple of minor things: don't use a real domain (abc.com) when obscuring your own domain. Always use example.com if you must hide your real domain.

The blocklist list.dsbl.org is dead and should be removed from your setup (http://www.dsbl.org/).
Previous Topic: System mail on linux
Next Topic: SQL Syntax for MailingList?
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Sun Oct 22 13:48:48 CEST 2017

Total time taken to generate the page: 0.00451 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.