Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » security log
  •  
jiunnyik

Messages: 33
Karma: 0
Send a private message to this user
Hi,

As I know, when user enter wrong password, it will log into security log.

So, is there anyway/possibility user can prevent it log into security log when they enter wrong password ? From web, pop, smtp, etc ...

Thank you.
  •  
Pavel Dobry (Kerio)

Messages: 5245
Karma: 251
Send a private message to this user
It is always logged in security log.
  •  
jiunnyik

Messages: 33
Karma: 0
Send a private message to this user
I have one user account being hacked. It was logged in through web. But there is no log show password guessing or wrong password being enter. According to the user, she did not provide her password to anyone.
  •  
Bud Durland

Messages: 387
Karma: 42
Send a private message to this user
jiunnyik wrote on Mon, 05 October 2015 17:48
I have one user account being hacked. It was logged in through web. But there is no log show password guessing or wrong password being enter. According to the user, she did not provide her password to anyone.


I would think you would want failed password attempts to be in the security log. Most will be one-time things, as folks occasionally mis-type their password in web mail. When you see several such, that is a call to action for the administrator.

If all the attempts are coming from thew same IP address, the first line of defense is to block that IP address, preferably at the firewall. If things get real bad, you can try renaming the user. There's a couple ways to do that, and I have done it for people who get married, divorced, etc. What I usually do is:


1) shutdown the server
2) edit the Users.cfg file and change the user's name. For example 'JDoe' becomes 'JaneDoe'
3) In the mail store folder, find the 'JDoe' folder, rename it to 'JaneDoe'
4) Restart the server
5) confirm you can login as 'JaneDoe<_at_>YourDomain.com'
5a) if this is an OutLook user, you will want to empty the KOFF cache before starting OutLook
6) Create an alias to send incoming mail addressed to 'jdoe' to 'JaneDoe'.
  •  
jiunnyik

Messages: 33
Karma: 0
Send a private message to this user
Previous Topic: Cannot accept tasks on mobile phones
Next Topic: 0x80040119:MAPI_E_EXTENDED_ERROR
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Sun Aug 20 23:11:09 CEST 2017

Total time taken to generate the page: 0.00432 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.