Who triggered IDS Block?
Question asked by Jay Dubb - 7/9/2020 at 1:54 PM
Common problem is a single user behind a NAT'ed IP in an office environment doing something wrong, and getting the IP banned-- which inadvertently blocks everyone in the office.  Usually it's just something stupid, like an old password in Outlook, or similar.

I'm not finding any IDS related logs to show specifically what user account triggered an IDS block.  Being able to look up the banned IP, and see specifically which user triggered it, would REALLY help in tracking down the (usually oblivious) offender.  Especially when there are 50+ users behind the IP, and nobody has a clue.

I know this was requested in the past, but don't know if it ever happened, and maybe I'm just missing it.  

2 Replies

Reply to Thread
Sébastien Riccio Replied

I opened a ticket around the end of april about the exact same issue and support told me they will be ading something like a dedicated IDS log to better track this.

Last answer to the ticket was:

" I've received word this has been officially added to development's list. As such, I'll go ahead and close out this ticket today for the time being. Once we receive confirmation this has been resolved I will reopen the ticket to provide you the build number you can find the fix in."

I guess they have a lot to do but hope this will come anytime soon.

Kind regards.

Sébastien Riccio
System & Network Admin

Tim Uzzanti Replied
Employee Post Marked As Answer
We have been extremely busy as you can see with our releases.  At the same time, we have a handful of developers sick with Covid.  We have been working from home for months but Arizona has become a hot spot and even those that have been cautious have picked up the virus from simple errands etc.  This particular task is in our future features and is planned for an upcoming release.
Tim Uzzanti
SmarterTools Inc.
(877) 357-6278

Reply to Thread