Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » Account lockout
  •  
Mike

Messages: 3
Karma: 0
Send a private message to this user
I noticed that "Account lockout" in "Advanced Options" only works with WEBMail and not POP3 account.

Can you include the option in next version of the server to block an IP address of users who faild to login X times, not just the account (and not block local IPs too).

You can then set:
Lock IP after failed logins: 3
Lock account after failed logins: 7
So you can still login if two users try to guess yur password.
  •  
Mike

Messages: 3
Karma: 0
Send a private message to this user
And maby an option to set connection timeout for all services (SMTP, POP3, WEBMAIL, ...) would be nice.

  •  
jshaw541

Messages: 462
Karma: 0
Send a private message to this user
I believe that KMS does block failed POP3 login attempts. About a year ago, we had that enabled for a short amount of time, but had to turn it off, because whenever a POP3 client tried to negotiate the authentication type (PLAIN, NTLM, MD5, etc), it would result in a bunch of login failures. The user didn't notice anything, because Eudora was just trying to find the most secure auth method, but it caused people's accounts to be locked out every day.

Kerio MailServer 6.7.1 w/AD
Windows Server 2003 SP 1
Dell PowerEdge 2850 (Dual Xeon 3.2ghz and 2 GB RAM)
~1300 users
~1000+ concurrent IMAPS connections
iPhone users
Outlook 2007 KOFF users
Apple iCal 10.5/10.6 users
Previous Topic: Upcoming Features - Dissapeared
Next Topic: Problems sending to specific mailserver
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Thu Nov 23 06:45:28 CET 2017

Total time taken to generate the page: 0.00369 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.