Bob,

"Too many security failures" indicates that the IP address from which you
are connecting has been making lots of connections to the VNC Server that
didn't end up being successfully authenticated.

This is a security feature designed to prevent dictionary attacks on
servers, by preventing machines from making large numbers of connections to
a server over a short period of time.

The message is triggered by 5 failed authentication attempts, at which point
a 10 second lockout is applied before the next attempt is permitted.  The
next failed attempt causes the timeout to be doubled.

Given that (I assume) you are seeing this message in spite of supplying
correct credentials each time you try to log in, and that once you see the
message you never again get the chance to enter a password, it sounds like
something is connecting to the server from the same IP address as your
viewer machine and is not authenticating, hence causing the failures.

VNC 4.0 was less secure in this respect, by default, hence the different
behaviour.

Cheers,

Wez @ RealVNC Ltd.


> -----Original Message-----
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On Behalf Of Bob Hartung
> Sent: 21 March 2005 16:55
> To: vnc-list@realvnc.com
> Subject: "Too Many Security Failures" with v4.1
> 
> I use RealVNC for remote administration on roughly 100 pcs. I have 
> mainly v3.3.7 running but I have started using v4.0.
> 
> I've downloaded RealVNC v 4.1 Free Ed. and installed it on a 
> Win2000 (sp 
> 5) server to test it. Initially everything worked fine but then I 
> started getting the error message "Too many sercurity 
> failures. Do you 
> wish to attempt to reconnect to 172.16.1.20?  Yes/No". I 
> found that it 
> never works to answer yes, regardless of how long you wait for the 
> security block to time-out. The only thing that does work is 
> killing the 
> VNC service and then restarting it.
> 
> I finally removed v4.1 and re-installed v4.0 and the problem stopped 
> entirely.
> 
> I didn't see any mention of this in the v4.1 Known Bugs page 
> at RealVNC. 
> Has anyone else seen this?
> 
> 
> -- 
> ============================
> 
> Bob Hartung, Dir of I.T.
> c\o Wisco Industries, Inc.
> P. O. Box 10
> 736 Janesville St.
> Oregon, WI  53575
> 
> Phone: (608) 835-3106 x215
>   Fax: (608) 835-9644
> 
> email: bhartung(at)wiscoind.com
> _______________________________________________
> VNC-List mailing list
> VNC-List@realvnc.com
> To remove yourself from the list visit:
> http://www.realvnc.com/mailman/listinfo/vnc-list
_______________________________________________
VNC-List mailing list
VNC-List@realvnc.com
To remove yourself from the list visit:
http://www.realvnc.com/mailman/listinfo/vnc-list

Reply via email to