hmLoadTopic({
hmKeywords:"Blocking IP addresses,Dynamic Screening,Dynamic Screening Auth Failure Tracking,Dynamic Screening Blocking IP addresses,Dynamic Screening Freezing accounts,Freezing Accounts",
hmTitle:"Auth Failure Tracking",
hmDescription:"Ignore authentication attempts using identical passwords",
hmPrevLink:"dynamic-screening_options.html",
hmNextLink:"dynamic-screening_protocols.html",
hmParentLink:"security_menu.html",
hmBreadCrumbs:"<a href=\"security_menu.html\">Security Menu<\/a> &gt; Dynamic Screening",
hmTitlePath:"Security Menu > Dynamic Screening > Auth Failure Tracking",
hmHeader:"<h1 class=\"p_Heading1\" style=\"page-break-after: avoid;\"><span class=\"f_Heading1\">Auth Failure Tracking<\/span><\/h1>\n\r",
hmBody:"<p class=\"p_BodyText_Center\"><img style=\"margin:0 auto 0 auto;width:34.7500rem;height:33.3125rem;border:none\" src=\".\/images\/dynamic-screening_auth-fail-tracking.png\"\/><\/p>\n\r<p class=\"p_DialogSectionHeading\" style=\"page-break-after: avoid;\"><span class=\"f_DialogSectionHeading\">Ignore authentication attempts using identical passwords<\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">This option applies to the IP Address Blocking Options and to the Account Freezing Options below. By default, when an authentication attempt fails, subsequent authentication attempts will be ignored when using the same password. They will not count against the number of failures allowed before blocking the IP address or freezing the account. Multiple attempts using the same, incorrect password typically occur when, for example, the user\'s email password has changed or expired and their client is automatically attempting to log in using the old one.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Only for valid accounts<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Activate this option if you only wish to ignore the duplicate password authentication attempts when they are attempting to sign in to a valid account. This means that if, for example, a user updates his password in one client but another client is still running with the old password, that old client\'s sign-in attempts will still be ignored, since it will have the correct sign-in name. A bot trying random sign-in names with a similar password will not have that same benefit, and will be blocked as soon as it surpasses the auth failure threshold.<\/span><\/p>\n\r<p class=\"p_DialogSectionHeading\" style=\"page-break-after: avoid;\"><span class=\"f_DialogSectionHeading\">IP Address Blocking Options<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Block addresses after [xx] authentication failures within [xx] [Minutes | Hours | Days]<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Click this check box if you wish to block an IP address temporarily when it fails to authenticate to your server an excessive number of times in a limited time period. Specify the number of minutes, hours, or days and the number of failures allowed in that period.<\/span><\/p>\n\r<p class=\"p_ControlHeading2\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading2\">Enable IPv4 aggregation as low as x.x.x.x\/ [xx] identical bits (CIDR)<\/span><\/p>\n\r<p class=\"p_ControlIndent2\"><span class=\"f_ControlIndent2\">This option will block a range of IPv4 addresses when the authentication failures are coming from IP addresses near each other instead of from a single address.<\/span><\/p>\n\r<p class=\"p_ControlHeading2\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading2\">Enable IPv6 aggregation as low as x::::x:x\/ [xx] identical bits (CIDR)<\/span><\/p>\n\r<p class=\"p_ControlIndent2\"><span class=\"f_ControlIndent2\">This option will block a range of IPv6 addresses when the authentication failures are coming from IP addresses near each other instead of from a single address.<\/span><\/p>\n\r<p class=\"p_DialogSectionHeading\" style=\"page-break-after: avoid;\"><span class=\"f_DialogSectionHeading\">Multiple Offense Penalties<\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">This is the amount of time that an IP address or IP address range will be blocked by the Dynamic Screening system when it fails the specified number of authentication attempts. By default the amount of time that the IP address is blocked increases with each subsequent offense. That is, by default if an IP address violates the authentication failure limit, it will be blocked for one day. Then if that same IP address subsequently violates the limit again, the <\/span><span class=\"f_BodyText\" style=\"font-style: italic;\">Second offense penalty<\/span><span class=\"f_BodyText\"> will be added to the <\/span><span class=\"f_BodyText\" style=\"font-style: italic;\">Default expiration timeout<\/span><span class=\"f_BodyText\">, then the <\/span><span class=\"f_BodyText\" style=\"font-style: italic;\">Third offense penalty<\/span><span class=\"f_BodyText\"> will be added to the default timeout, and so on. The length of penalty maxes out with adding the <\/span><span class=\"f_BodyText\" style=\"font-style: italic;\">Fourth offense penalty<\/span><span class=\"f_BodyText\">.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Default expiration timeout<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">This is the amount of time an IP address or IP address range will be blocked from connecting to MDaemon if it violates the authentication failure limit specified above. The default is 1 day.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Second offense penalty<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">This is the amount of time that will be added to the <\/span><span class=\"f_ControlIndent\" style=\"font-style: italic;\">Default expiration timeout<\/span><span class=\"f_ControlIndent\"> when an IP address or IP range is blocked by Dynamic Screening a second time.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Third offense penalty<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">This is the amount of time that will be added to the <\/span><span class=\"f_ControlIndent\" style=\"font-style: italic;\">Default expiration timeout<\/span><span class=\"f_ControlIndent\"> when an IP address or IP range is blocked by Dynamic Screening a third time.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Fourth offense penalty<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">This is the amount of time that will be added to the <\/span><span class=\"f_ControlIndent\" style=\"font-style: italic;\">Default expiration timeout<\/span><span class=\"f_ControlIndent\"> when an IP address or IP range is blocked by Dynamic Screening for the fourth time or any subsequent times.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Permanent<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Click this box if you wish to permanently block the IP addresses that violate the authentication failure limit, rather than temporarily block them using the offense penalties specified above.<\/span><\/p>\n\r<p class=\"p_DialogSectionHeading\" style=\"page-break-after: avoid;\"><span class=\"f_DialogSectionHeading\">Account Freezing Options<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Freeze accounts that fail authentication [xx] times within [xx] [Minutes | Hours | Days]<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Check this box if you wish to switch an <a href=\"ae_account.html\" class=\"topiclink\">Account\'s Status<\/a> to FROZEN when it fails the specified number of authentication attempts in the designated amount of time. MDaemon will still accept incoming messages for a frozen account, but no one can sign in to the account to send or collect messages until it is &quot;thawed&quot; (i.e. the Account Status is switched back to ENABLED). This option is enabled by default.<\/span><\/p>\n\r<p class=\"p_ControlHeading2\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading2\">Frozen account timeout<\/span><\/p>\n\r<p class=\"p_ControlIndent2\"><span class=\"f_ControlIndent2\">This is the amount of time that the account will remain frozen, if you have enabled the option below to <\/span><span class=\"f_ControlIndent2\" style=\"font-style: italic;\">Automatically thaw accounts frozen by Dynamic Screening upon timeout<\/span><span class=\"f_ControlIndent2\">.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Admins may thaw accounts by replying to notification email within the timeout period<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">When an account is frozen by Dynamic Screening, by default an administrator will receive a notification email about it. The administrator can then &quot;thaw&quot; the account (i.e. switch its status back to &quot;Enabled&quot;) by simply replying to the email, if this option is enabled. The option is enabled by default, and it requires the Frozen Account Reports options on the <a href=\"dynamic-screening_notifications.html\" class=\"topiclink\">Notifications<\/a> tab to be enabled.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Automatically thaw accounts frozen by Dynamic Screening upon timeout<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Check this box if you wish to automatically thaw frozen accounts when the <\/span><span class=\"f_ControlIndent\" style=\"font-style: italic;\">Frozen account timeout<\/span><span class=\"f_ControlIndent\"> period has elapsed. This option is disabled by default.<\/span><\/p>\n\r<p class=\"p_SeeAlso\" style=\"page-break-after: avoid; border-right: none; border-bottom: none; border-left: none;\"><span class=\"f_SeeAlso\">See:<\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"dynamic-screening_options.html\" class=\"topiclink\">Options\/Customize<\/a><\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"dynamic-screening_dynamic-whitelist.html\" class=\"topiclink\">Dynamic Allow List<\/a><\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"dynamic-screening_dynamic-blacklist.html\" class=\"topiclink\">Dynamic Block List<\/a><\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"dynamic-screening_notifications.html\" class=\"topiclink\">Notifications<\/a><\/span><\/p>\n\r"
})
