MaxAUTHErrors error

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

MaxAUTHErrors error

Ivo Lončar
Hi all

 

It seems that either I am setting something wrong, or Max Number of
AUTHentication Errors (MaxAUTHErrors) is not working as I think it should.

I have set this value to 1 for testing purposes (in my case value is 5), and
I have situation where same IP/24 range does not get blocked for continuous
AUTH attempts

 

Log:

Jun-22-16 08:13:28 [Worker_1] 91.200.12.152 info: authentication - login is
used

Jun-22-16 08:13:28 [Worker_1] 91.200.12.152 [SMTP Error] 535 Authentication
failed. Restarting authentication process.

Jun-22-16 08:13:31 [Worker_1] 91.200.12.147 info: authentication - login is
used

Jun-22-16 08:13:32 [Worker_1] 91.200.12.147 [SMTP Error] 535 Authentication
failed. Restarting authentication process.

Jun-22-16 08:24:35 [Worker_1] 91.200.12.152 info: authentication - login is
used

Jun-22-16 08:24:36 [Worker_1] 91.200.12.152 [SMTP Error] 535 Authentication
failed. Too many invalid logon attempts.

Jun-22-16 08:24:39 [Worker_1] 91.200.12.147 info: authentication - login is
used

Jun-22-16 08:24:40 [Worker_1] 91.200.12.147 [SMTP Error] 535 Authentication
failed. Restarting authentication process.

 

Should I set something else so MaxAUTHErrors would block connections from IP
(IP/24) after few unsucessfull logins?

 

 

Kind regards,

Ivo


------------------------------------------------------------------------------
Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San
Francisco, CA to explore cutting-edge tech and listen to tech luminaries
present their vision of the future. This family event has something for
everyone, including kids. Get more information and register today.
http://sdm.link/attshape
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user
Reply | Threaded
Open this post in threaded view
|

Re: MaxAUTHErrors error

Thomas Eckardt/eck
If I read the GUI for 'MaxAUTHErrors'.

 ...
 ...exceeds this number of authentication errors...
 ...
Every 5 Minutes the 'AUTHError' -counter of the IP will be decreased by
one.
 ....

I'm able to calculate the following for the AUTHError counter of  '
91.200.12.0/24':


Jun-22-16 08:13:28 [Worker_1] 91.200.12.152 info: authentication - login
is
used

Jun-22-16 08:13:28 [Worker_1] 91.200.12.152 [SMTP Error] 535
Authentication
failed. Restarting authentication process.

==> counter = 1

Jun-22-16 08:13:31 [Worker_1] 91.200.12.147 info: authentication - login
is
used

Jun-22-16 08:13:32 [Worker_1] 91.200.12.147 [SMTP Error] 535
Authentication
failed. Restarting authentication process.

==> counter = 2 - blocking is enabled
==> at Jun-22-16 08:18:32 - counter = 1 -> blocking is disabled
==> at Jun-22-16 08:23:32 - counter = 0

Jun-22-16 08:24:35 [Worker_1] 91.200.12.152 info: authentication - login
is
used

Jun-22-16 08:24:36 [Worker_1] 91.200.12.152 [SMTP Error] 535
Authentication
failed. Too many invalid logon attempts.

==> counter = 1

Jun-22-16 08:24:39 [Worker_1] 91.200.12.147 info: authentication - login
is
used

Jun-22-16 08:24:40 [Worker_1] 91.200.12.147 [SMTP Error] 535
Authentication
failed. Restarting authentication process.

==> counter = 2 -> blocking is enabled
==> at Jun-22-16 08:29:40 - counter = 1 -> blocking is disabled
==> at Jun-22-16 08:34:40 - counter = 0


>Max Number of AUTHentication Errors (MaxAUTHErrors) is not working as I
think it should

Reading the GUI for 'MaxAUTHErrors' - what did you expect? How should this
feature work?

Thomas




Von:    Ivo Lončar <[hidden email]>
An:     <[hidden email]>
Datum:  22.06.2016 09:08
Betreff:        [Assp-user] MaxAUTHErrors error



Hi all

 

It seems that either I am setting something wrong, or Max Number of
AUTHentication Errors (MaxAUTHErrors) is not working as I think it should.

I have set this value to 1 for testing purposes (in my case value is 5),
and
I have situation where same IP/24 range does not get blocked for
continuous
AUTH attempts

 

Log:

Jun-22-16 08:13:28 [Worker_1] 91.200.12.152 info: authentication - login
is
used

Jun-22-16 08:13:28 [Worker_1] 91.200.12.152 [SMTP Error] 535
Authentication
failed. Restarting authentication process.

Jun-22-16 08:13:31 [Worker_1] 91.200.12.147 info: authentication - login
is
used

Jun-22-16 08:13:32 [Worker_1] 91.200.12.147 [SMTP Error] 535
Authentication
failed. Restarting authentication process.

Jun-22-16 08:24:35 [Worker_1] 91.200.12.152 info: authentication - login
is
used

Jun-22-16 08:24:36 [Worker_1] 91.200.12.152 [SMTP Error] 535
Authentication
failed. Too many invalid logon attempts.

Jun-22-16 08:24:39 [Worker_1] 91.200.12.147 info: authentication - login
is
used

Jun-22-16 08:24:40 [Worker_1] 91.200.12.147 [SMTP Error] 535
Authentication
failed. Restarting authentication process.

 

Should I set something else so MaxAUTHErrors would block connections from
IP
(IP/24) after few unsucessfull logins?

 

 

Kind regards,

Ivo

------------------------------------------------------------------------------
Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San
Francisco, CA to explore cutting-edge tech and listen to tech luminaries
present their vision of the future. This family event has something for
everyone, including kids. Get more information and register today.
http://sdm.link/attshape_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user




DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally
privileged and protected in law and are intended solely for the use of the

individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no
known virus in this email!
*******************************************************


------------------------------------------------------------------------------
Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San
Francisco, CA to explore cutting-edge tech and listen to tech luminaries
present their vision of the future. This family event has something for
everyone, including kids. Get more information and register today.
http://sdm.link/attshape
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user
Reply | Threaded
Open this post in threaded view
|

Re: MaxAUTHErrors error

Ivo Lončar
Since english is not my first language it is obvious that I did not
understand it correctly.

Thank you for your quick answer.

Regards,
Ivo

-----Original Message-----
From: Thomas Eckardt [mailto:[hidden email]]
Sent: Wednesday, June 22, 2016 10:14 AM
To: For Users of ASSP <[hidden email]>
Subject: Re: [Assp-user] MaxAUTHErrors error

If I read the GUI for 'MaxAUTHErrors'.

 ...
 ...exceeds this number of authentication errors...
 ...
Every 5 Minutes the 'AUTHError' -counter of the IP will be decreased by one.
 ....

I'm able to calculate the following for the AUTHError counter of  '
91.200.12.0/24':


Jun-22-16 08:13:28 [Worker_1] 91.200.12.152 info: authentication - login is
used

Jun-22-16 08:13:28 [Worker_1] 91.200.12.152 [SMTP Error] 535 Authentication
failed. Restarting authentication process.

==> counter = 1

Jun-22-16 08:13:31 [Worker_1] 91.200.12.147 info: authentication - login is
used

Jun-22-16 08:13:32 [Worker_1] 91.200.12.147 [SMTP Error] 535 Authentication
failed. Restarting authentication process.

==> counter = 2 - blocking is enabled
==> at Jun-22-16 08:18:32 - counter = 1 -> blocking is disabled ==> at
Jun-22-16 08:23:32 - counter = 0

Jun-22-16 08:24:35 [Worker_1] 91.200.12.152 info: authentication - login is
used

Jun-22-16 08:24:36 [Worker_1] 91.200.12.152 [SMTP Error] 535 Authentication
failed. Too many invalid logon attempts.

==> counter = 1

Jun-22-16 08:24:39 [Worker_1] 91.200.12.147 info: authentication - login is
used

Jun-22-16 08:24:40 [Worker_1] 91.200.12.147 [SMTP Error] 535 Authentication
failed. Restarting authentication process.

==> counter = 2 -> blocking is enabled
==> at Jun-22-16 08:29:40 - counter = 1 -> blocking is disabled ==> at
Jun-22-16 08:34:40 - counter = 0


>Max Number of AUTHentication Errors (MaxAUTHErrors) is not working as I
think it should

Reading the GUI for 'MaxAUTHErrors' - what did you expect? How should this
feature work?

Thomas




Von:    Ivo Lončar <[hidden email]>
An:     <[hidden email]>
Datum:  22.06.2016 09:08
Betreff:        [Assp-user] MaxAUTHErrors error



Hi all

 

It seems that either I am setting something wrong, or Max Number of
AUTHentication Errors (MaxAUTHErrors) is not working as I think it should.

I have set this value to 1 for testing purposes (in my case value is 5),
and
I have situation where same IP/24 range does not get blocked for
continuous
AUTH attempts

 

Log:

Jun-22-16 08:13:28 [Worker_1] 91.200.12.152 info: authentication - login
is
used

Jun-22-16 08:13:28 [Worker_1] 91.200.12.152 [SMTP Error] 535
Authentication
failed. Restarting authentication process.

Jun-22-16 08:13:31 [Worker_1] 91.200.12.147 info: authentication - login
is
used

Jun-22-16 08:13:32 [Worker_1] 91.200.12.147 [SMTP Error] 535
Authentication
failed. Restarting authentication process.

Jun-22-16 08:24:35 [Worker_1] 91.200.12.152 info: authentication - login
is
used

Jun-22-16 08:24:36 [Worker_1] 91.200.12.152 [SMTP Error] 535
Authentication
failed. Too many invalid logon attempts.

Jun-22-16 08:24:39 [Worker_1] 91.200.12.147 info: authentication - login
is
used

Jun-22-16 08:24:40 [Worker_1] 91.200.12.147 [SMTP Error] 535
Authentication
failed. Restarting authentication process.

 

Should I set something else so MaxAUTHErrors would block connections from
IP
(IP/24) after few unsucessfull logins?

 

 

Kind regards,

Ivo

----------------------------------------------------------------------------
--
Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San
Francisco, CA to explore cutting-edge tech and listen to tech luminaries
present their vision of the future. This family event has something for
everyone, including kids. Get more information and register today.
http://sdm.link/attshape_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user




DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally
privileged and protected in law and are intended solely for the use of the

individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no
known virus in this email!
*******************************************************



------------------------------------------------------------------------------
Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San
Francisco, CA to explore cutting-edge tech and listen to tech luminaries
present their vision of the future. This family event has something for
everyone, including kids. Get more information and register today.
http://sdm.link/attshape
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user