2
too many login failures
Problem reported by Richard Frank - 1/15/2015 at 4:25 AM
Resolved
I tested what happends when I enter a wrong password n-times
after a while the message appears .. too many login failures.. retry later
 
but.. then I want to log in via the webmail on an other account with correct password, but I am not allowed to log in on an other account.
 
And I can't find the settings for this behaviour in de admin panel @  Abuse detection. 
 
 

3 Replies

Reply to Thread
0
Employee Replied
Employee Post
When trying to login via the web interface and getting blocked due to wrong username/password SmarterMail will block the IP address and not the account.  That is why you were not able to login to a different account.  The settings for this is handle in the webconfig file under the MRS folder.  The lines you will need to change if you are planning on modifying this are below.
 
    <add key="Login.BruteForceDetection.TriesBeforeBlock" value="10" />
    <add key="Login.BruteForceDetection.BlockTime" value="5" />
0
Kunal Mayekar Replied
    <add key="Login.BruteForceDetection.TriesBeforeBlock" value="10" />
    <add key="Login.BruteForceDetection.BlockTime" value="5" /> 

What is the unit of the above value entered for block time and tries before block? Hope the block time is in Mins and tries before block is no. of tries before block. 
I am asking because I am new in this case and want to make a few changes.
1
Andrea Free Replied
Employee Post
Hello Kunal,

Those are the correct units. Please note, however, that this response is fairly old. In newer versions of SmarterMail, the IDS Rules for brute force are configurable within the webmail interface. You don't have to modify the webconfig file in order to adjust those rules. You should log in as the System Administrator, go to Settings > Security > IDS Rules. Learn more about the IDS Rules that are available here: 
Andrea Free SmarterTools Inc. 877-357-6278 www.smartertools.com

Reply to Thread