GFI Forums: Kerio Connect » Security of LDAP / Directory

Home » GFI User Forums » Kerio Connect » Security of LDAP / Directory

Show: Today's Messages :: Show Polls :: Message Navigator
E-mail to friend

Security of LDAP / Directory [message #140769]

Fri, 31 August 2018 17:05

fishtech
Messages: 609
Registered: September 2010

I have some password-guessing attacks occurring across many of my 50 user accounts.

I'm not sure how the hackers are getting so many of my users' email address to pound on.

How can I be sure that my accounts and GAL are not visible to the internet from my server?

Thanks,

ft.

Report message to a moderator

Re: Security of LDAP / Directory [message #140770 is a reply to message #140769]

Fri, 31 August 2018 17:14

martin.kaufmann
Messages: 101
Registered: August 2018
Location: Germany

fishtech wrote on Fri, 31 August 2018 17:05

I'm not sure how the hackers are getting so many of my users' email address to pound on.

I am afraid I cannot help what to do, but the hackers often get their information users mail adresses from public sources or hacks at other companies.
It is a good idea to check at haveibeenpwned.com if your accounts have been pwned at big raids like Adobe and so on.

Do a domain check there and you will most probably find some leaked accounts. Confused

At least I did ... Shocked

HTH

Good Luck!

Regards,
Martin

Kerio Connect 9.3.1 p1
CentOS 7
(until May ´22)

[Updated on: Mon, 10 September 2018 14:15]

Report message to a moderator

Previous Topic:	Adaptive Firewall for Password Guessing Attacks
Next Topic:	Enable Spam Rating disabled

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

] [

]

Current Time: Sun Jun 04 07:33:15 CEST 2023

Total time taken to generate the page: 0.03299 seconds