| security log [message #124746] |
Mon, 05 October 2015 02:39  |
jiunnyik
Messages: 43
Registered: December 2013
|
|
|
|
Hi,
As I know, when user enter wrong password, it will log into security log.
So, is there anyway/possibility user can prevent it log into security log when they enter wrong password ? From web, pop, smtp, etc ...
Thank you.
|
|
|
|
|
|
| Re: security log [message #124779 is a reply to message #124762] |
Mon, 05 October 2015 23:48  |
jiunnyik
Messages: 43
Registered: December 2013
|
|
|
|
|
I have one user account being hacked. It was logged in through web. But there is no log show password guessing or wrong password being enter. According to the user, she did not provide her password to anyone.
|
|
|
|
| Re: security log [message #124792 is a reply to message #124779] |
Tue, 06 October 2015 19:13 |
Bud Durland
Messages: 586
Registered: December 2013
Location: Plattsburgh, NY
|
|
|
|
jiunnyik wrote on Mon, 05 October 2015 17:48I have one user account being hacked. It was logged in through web. But there is no log show password guessing or wrong password being enter. According to the user, she did not provide her password to anyone.
I would think you would want failed password attempts to be in the security log. Most will be one-time things, as folks occasionally mis-type their password in web mail. When you see several such, that is a call to action for the administrator.
If all the attempts are coming from thew same IP address, the first line of defense is to block that IP address, preferably at the firewall. If things get real bad, you can try renaming the user. There's a couple ways to do that, and I have done it for people who get married, divorced, etc. What I usually do is:
1) shutdown the server
2) edit the Users.cfg file and change the user's name. For example 'JDoe' becomes 'JaneDoe'
3) In the mail store folder, find the 'JDoe' folder, rename it to 'JaneDoe'
4) Restart the server
5) confirm you can login as 'JaneDoe<_at_>YourDomain.com'
5a) if this is an OutLook user, you will want to empty the KOFF cache before starting OutLook
6) Create an alias to send incoming mail addressed to 'jdoe' to 'JaneDoe'.
|
|
|
|
|
|
Members
Search
Help
Register
Login
Home
