Block IP addresses suspicious of password guessing attacks
If you find out that anyone attempts to guess password to any account (presumption based on several unsuccessful authentication attempts), you can enable this option to block their IP address.
Warning
Each blocking action applies to a particular service only. This implies that if for example a POP3 attack is detected, the user still can login via Webmail.
IP address is blocked when the count of ten unsuccessful login attempts is reached within one minute. After five minutes without an attack attempt, the service is unblocked automatically for the IP address.
Never block this IP address group
It is possible to set trustworthy IP address groups (e.g. local addresses) and leave them out of the blocking rule.
Block user accounts probably targeted by password guessing
The option described above blocks only the affected IP address for a particular service. However, the same account may be attacked by using another service.
You can use this option to block the user account if attacked.
Warning
The account is blocked when the count of ten unsuccessful login attempts is reached within one minute. The account gets unblocked automatically after five minutes without an attack attempt or this can be done manually by clicking on Unlock All Accounts Now.作者: ckzx 时间: 2012-3-15 08:08
我的邮件经常有这种攻击。不过升级邮件服务器太麻烦了。我还在用的老版本。 一般我手动用防火墙封了拉倒。作者: dennishan 时间: 2012-3-28 21:13
TDK的帖要顶一下的，很久没来，Kerio版块人气不错啊作者: tdk 时间: 2012-4-14 20:59
