If I read the GUI for 'MaxAUTHErrors'.

 ...
 ...exceeds this number of authentication errors...
 ...
Every 5 Minutes the 'AUTHError' -counter of the IP will be decreased by 
one.
 ....

I'm able to calculate the following for the AUTHError counter of  '
91.200.12.0/24':


Jun-22-16 08:13:28 [Worker_1] 91.200.12.152 info: authentication - login 
is
used

Jun-22-16 08:13:28 [Worker_1] 91.200.12.152 [SMTP Error] 535 
Authentication
failed. Restarting authentication process.

==> counter = 1

Jun-22-16 08:13:31 [Worker_1] 91.200.12.147 info: authentication - login 
is
used

Jun-22-16 08:13:32 [Worker_1] 91.200.12.147 [SMTP Error] 535 
Authentication
failed. Restarting authentication process.

==> counter = 2 - blocking is enabled
==> at Jun-22-16 08:18:32 - counter = 1 -> blocking is disabled
==> at Jun-22-16 08:23:32 - counter = 0

Jun-22-16 08:24:35 [Worker_1] 91.200.12.152 info: authentication - login 
is
used

Jun-22-16 08:24:36 [Worker_1] 91.200.12.152 [SMTP Error] 535 
Authentication
failed. Too many invalid logon attempts.

==> counter = 1

Jun-22-16 08:24:39 [Worker_1] 91.200.12.147 info: authentication - login 
is
used

Jun-22-16 08:24:40 [Worker_1] 91.200.12.147 [SMTP Error] 535 
Authentication
failed. Restarting authentication process.

==> counter = 2 -> blocking is enabled
==> at Jun-22-16 08:29:40 - counter = 1 -> blocking is disabled
==> at Jun-22-16 08:34:40 - counter = 0


>Max Number of AUTHentication Errors (MaxAUTHErrors) is not working as I 
think it should

Reading the GUI for 'MaxAUTHErrors' - what did you expect? How should this 
feature work?

Thomas




Von:    Ivo Lončar <ivo.lon...@masterit.rs>
An:     <assp-user@lists.sourceforge.net>
Datum:  22.06.2016 09:08
Betreff:        [Assp-user] MaxAUTHErrors error



Hi all

 

It seems that either I am setting something wrong, or Max Number of
AUTHentication Errors (MaxAUTHErrors) is not working as I think it should.

I have set this value to 1 for testing purposes (in my case value is 5), 
and
I have situation where same IP/24 range does not get blocked for 
continuous
AUTH attempts

 

Log:

Jun-22-16 08:13:28 [Worker_1] 91.200.12.152 info: authentication - login 
is
used

Jun-22-16 08:13:28 [Worker_1] 91.200.12.152 [SMTP Error] 535 
Authentication
failed. Restarting authentication process.

Jun-22-16 08:13:31 [Worker_1] 91.200.12.147 info: authentication - login 
is
used

Jun-22-16 08:13:32 [Worker_1] 91.200.12.147 [SMTP Error] 535 
Authentication
failed. Restarting authentication process.

Jun-22-16 08:24:35 [Worker_1] 91.200.12.152 info: authentication - login 
is
used

Jun-22-16 08:24:36 [Worker_1] 91.200.12.152 [SMTP Error] 535 
Authentication
failed. Too many invalid logon attempts.

Jun-22-16 08:24:39 [Worker_1] 91.200.12.147 info: authentication - login 
is
used

Jun-22-16 08:24:40 [Worker_1] 91.200.12.147 [SMTP Error] 535 
Authentication
failed. Restarting authentication process.

 

Should I set something else so MaxAUTHErrors would block connections from 
IP
(IP/24) after few unsucessfull logins?

 

 

Kind regards,

Ivo

------------------------------------------------------------------------------
Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San
Francisco, CA to explore cutting-edge tech and listen to tech luminaries
present their vision of the future. This family event has something for
everyone, including kids. Get more information and register today.
http://sdm.link/attshape_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user




DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally 
privileged and protected in law and are intended solely for the use of the 

individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no 
known virus in this email!
*******************************************************

------------------------------------------------------------------------------
Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San
Francisco, CA to explore cutting-edge tech and listen to tech luminaries
present their vision of the future. This family event has something for
everyone, including kids. Get more information and register today.
http://sdm.link/attshape
_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to