How can we improve Kerio Connect?

add parameters for "Login guessing protection"

I I have lot's of smtp and pop login attacks of robots on my server.

I would like to automatically blacklist IP who do this attack but I can't.

The robot do that (for exemple) :
He try to log in with a list of random users name just one time :
admin@mydomain.fr...failed
root@mydomain.fr...failed
webmaster@mydomain.fr...failed
and do this for arround 50 users.
After, it starts again from the beginning
admin@mydomain.fr...failed
root@mydomain.fr...failed
webmaster@mydomain.fr...failed

The IP of robot is the same but because the time between 2 attempts is long, the "Login guessing protection" security doesn't blacklist IP of this attack.

You could add parameters for this section with delay, number of attemps, blocking time, etc...to improve this section.

Thanks,
Regards,
Marc.

29 votes
Vote
Sign in
Signed in as (Sign out)
You have left! (?) (thinking…)
Admin shared this idea  ·   ·  Flag idea as inappropriate…  ·  Admin →

3 comments

Sign in
Signed in as (Sign out)
Submitting...

Feedback and Knowledge Base