| Suffer from numerous login attempts to Email server [message #154393] |
Fri, 19 May 2023 11:57  |
waltergarcia
Messages: 1
Registered: May 2023
|
|
|
|
Hi there,
We suffer from numerous login attempts to our Email server. Because they origin from a specific country we decided to block this country in kerio control. No succes. We looked into the logfiles from Kerio connect and found that the reported ip belongs to an other country. The country we want to block is Bulgaria, the reported country in connect is the US. Does anyone know how to solve this or could tell us what we did wrong. Thanks!
|
|
|
|
|
|
| Re: Suffer from numerous login attempts to Email server [message #154442 is a reply to message #154393] |
Wed, 31 May 2023 08:49  |
freakinvibe
Messages: 593
Registered: April 2004
|
|
|
|
This is more a Kerio Control issue than a Kerio Connect issue. So you might want to post the question in the Kerio Control forum.
We also get a lot of failed login attempts (I think everyone does), but Kerio Connect has certain protections, e.g. if the same IP address fails with login a certain number of times it is blocked for a while. So if your users have sufficiently secure passwords, this should not be a problem.
In the Security log, you will see
[28/May/2023 07:50:13] SMTP: AntiHammering - IP address 80.94.95.144 will be blocked for 5 minutes, too many failed logins from this IP address.
Dexion Services AG - IT Support Services in Basel, Switzerland
https://dexionag.ch
[Updated on: Wed, 31 May 2023 08:50] Report message to a moderator |
|
|
|
Members
Search
Help
Register
Login
Home
