security problem

zastilla · Joined: 12 Sep 2008 Posts: 2

about brute force, dictionary and crack login password...
can i block automatically an acount that someone is trying to crack it using brute force or dictionary?

for example in 5 o 10 attempts

regards.

alan · **Forum facilitator** Joined: 26 Sep 2003 Posts: 4435

Sorry, FirstSpot currently doesn't have this feature. We will consider this in future version.
_________________
~ Patronsoft Limited ~

ryanslimmon · Joined: 24 Jun 2009 Posts: 23 Location: Calgary, AB

Is there a log that show the failed login attempts?

alan · **Forum facilitator** Joined: 26 Sep 2003 Posts: 4435

Currently, you will see the below text in firstspot_gw_srv_[timestamp].log when there is a login failure:

** AuthLoginODBC: Authenticate Failed[sample]
** RetVal[0]

BTW, how do you want this to work? Should FirstSpot block the username, or the client MAC address?
_________________
~ Patronsoft Limited ~

alan · **Forum facilitator** Joined: 26 Sep 2003 Posts: 4435

Actually, there must be some confusions in our side. This feature is actually available already in FirstSpot.

Just go to Configuration Manager -> Authentication Server -> Maximum number of failed login attempts allowed, and then set the maximum number of attempts.
_________________
~ Patronsoft Limited ~