Since english is not my first language it is obvious that I did not understand it correctly.
Thank you for your quick answer. Regards, Ivo -----Original Message----- From: Thomas Eckardt [mailto:[email protected]] Sent: Wednesday, June 22, 2016 10:14 AM To: For Users of ASSP <[email protected]> Subject: Re: [Assp-user] MaxAUTHErrors error If I read the GUI for 'MaxAUTHErrors'. ... ...exceeds this number of authentication errors... ... Every 5 Minutes the 'AUTHError' -counter of the IP will be decreased by one. .... I'm able to calculate the following for the AUTHError counter of ' 91.200.12.0/24': Jun-22-16 08:13:28 [Worker_1] 91.200.12.152 info: authentication - login is used Jun-22-16 08:13:28 [Worker_1] 91.200.12.152 [SMTP Error] 535 Authentication failed. Restarting authentication process. ==> counter = 1 Jun-22-16 08:13:31 [Worker_1] 91.200.12.147 info: authentication - login is used Jun-22-16 08:13:32 [Worker_1] 91.200.12.147 [SMTP Error] 535 Authentication failed. Restarting authentication process. ==> counter = 2 - blocking is enabled ==> at Jun-22-16 08:18:32 - counter = 1 -> blocking is disabled ==> at Jun-22-16 08:23:32 - counter = 0 Jun-22-16 08:24:35 [Worker_1] 91.200.12.152 info: authentication - login is used Jun-22-16 08:24:36 [Worker_1] 91.200.12.152 [SMTP Error] 535 Authentication failed. Too many invalid logon attempts. ==> counter = 1 Jun-22-16 08:24:39 [Worker_1] 91.200.12.147 info: authentication - login is used Jun-22-16 08:24:40 [Worker_1] 91.200.12.147 [SMTP Error] 535 Authentication failed. Restarting authentication process. ==> counter = 2 -> blocking is enabled ==> at Jun-22-16 08:29:40 - counter = 1 -> blocking is disabled ==> at Jun-22-16 08:34:40 - counter = 0 >Max Number of AUTHentication Errors (MaxAUTHErrors) is not working as I think it should Reading the GUI for 'MaxAUTHErrors' - what did you expect? How should this feature work? Thomas Von: Ivo Lončar <[email protected]> An: <[email protected]> Datum: 22.06.2016 09:08 Betreff: [Assp-user] MaxAUTHErrors error Hi all It seems that either I am setting something wrong, or Max Number of AUTHentication Errors (MaxAUTHErrors) is not working as I think it should. I have set this value to 1 for testing purposes (in my case value is 5), and I have situation where same IP/24 range does not get blocked for continuous AUTH attempts Log: Jun-22-16 08:13:28 [Worker_1] 91.200.12.152 info: authentication - login is used Jun-22-16 08:13:28 [Worker_1] 91.200.12.152 [SMTP Error] 535 Authentication failed. Restarting authentication process. Jun-22-16 08:13:31 [Worker_1] 91.200.12.147 info: authentication - login is used Jun-22-16 08:13:32 [Worker_1] 91.200.12.147 [SMTP Error] 535 Authentication failed. Restarting authentication process. Jun-22-16 08:24:35 [Worker_1] 91.200.12.152 info: authentication - login is used Jun-22-16 08:24:36 [Worker_1] 91.200.12.152 [SMTP Error] 535 Authentication failed. Too many invalid logon attempts. Jun-22-16 08:24:39 [Worker_1] 91.200.12.147 info: authentication - login is used Jun-22-16 08:24:40 [Worker_1] 91.200.12.147 [SMTP Error] 535 Authentication failed. Restarting authentication process. Should I set something else so MaxAUTHErrors would block connections from IP (IP/24) after few unsucessfull logins? Kind regards, Ivo ---------------------------------------------------------------------------- -- Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San Francisco, CA to explore cutting-edge tech and listen to tech luminaries present their vision of the future. This family event has something for everyone, including kids. Get more information and register today. http://sdm.link/attshape_______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user DISCLAIMER: ******************************************************* This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the individual to whom it is addressed. This email was multiple times scanned for viruses. There should be no known virus in this email! ******************************************************* ------------------------------------------------------------------------------ Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San Francisco, CA to explore cutting-edge tech and listen to tech luminaries present their vision of the future. This family event has something for everyone, including kids. Get more information and register today. http://sdm.link/attshape _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
