> It's  easy  to track down the users who are locked out, but it's not
> easy finding out who's doing it-- the web messaging log doesn't seem
> to  include  any  details about login failures.

Not  literally,  no,  but you can determine abnormal login behavior if
you  see  multiple  hits  on  login.cgi  from  the  same  IP  in rapid
succession.  You  would  need  some  kind of RegEx to see this kind of
"stateful" stuff.

--Sandy


------------------------------------
Sanford Whiteman, Chief Technologist
Broadleaf Systems, a division of
Cypress Integrated Systems, Inc.
e-mail: [EMAIL PROTECTED]

SpamAssassin plugs into Declude!
  http://www.mailmage.com/products/software/freeutils/SPAMC32/download/release/

Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases!
  
http://www.mailmage.com/products/software/freeutils/exchange2aliases/download/release/
  http://www.mailmage.com/products/software/freeutils/ldap2aliases/download/release/


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to