hmLoadTopic({
hmKeywords:"Dynamic Screening,Dynamic Screening Advanced logging options,Dynamic Screening Customizing,Dynamic Screening Options",
hmTitle:"Options\/Customize",
hmDescription:"Using Dynamic Screening, MDaemon can track the behavior of incoming connections to identify suspicious activity and then respond accordingly. You can block an IP address (or...",
hmPrevLink:"security--site_policy.html",
hmNextLink:"dynamic-screening_auth-failure-tracking.html",
hmParentLink:"security_menu.html",
hmBreadCrumbs:"<a href=\"security_menu.html\">Security Menu<\/a> &gt; Dynamic Screening",
hmTitlePath:"Security Menu > Dynamic Screening > Options\/Customize",
hmHeader:"<h1 class=\"p_Heading1\" style=\"page-break-after: avoid;\"><span class=\"f_Heading1\">Options\/Customize<\/span><\/h1>\n\r",
hmBody:"<p class=\"p_BodyText_Center\"><img style=\"margin:0 auto 0 auto;width:34.7500rem;height:33.3125rem;border:none\" src=\".\/images\/dynamic-screening_options.png\"\/><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">Using Dynamic Screening, MDaemon can track the behavior of incoming connections to identify suspicious activity and then respond accordingly. You can <a href=\"dynamic-screening_auth-failure-tracking.html\" class=\"topiclink\">block an IP address<\/a> (or range of addresses) from connecting when it fails authentication a specified number times within a specified amount of time. You can also <a href=\"dynamic-screening_auth-failure-tracking.html\" class=\"topiclink\">freeze the accounts<\/a> attempting to authenticate when they fail too many times too quickly. Also, when an IP address is blocked or an account is frozen, it is not permanent. The connecting IP address will be blocked for the number of minutes, hours, or days that you specify, and frozen accounts can be &quot;thawed&quot; automatically after a specified amount of time, or manually by the admin.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Enable the Dynamic Screening service<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Check this box to enable the Dynamic Screening service. You can also enable\/disable the service under the Servers section in the navigation pane of MDaemon\'s main user interface. <\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_DialogSectionHeading\">System Options<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Enable Authentication Failure Tracking<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">When this option is enabled, the Dynamic Screening service will track authentication failures for the protocols designated on the <a href=\"dynamic-screening_protocols.html\" class=\"topiclink\">Protocols<\/a> tab and perform actions determined by the options on the <a href=\"dynamic-screening_auth-failure-tracking.html\" class=\"topiclink\">Auth Failure Tracking<\/a> tab. This option is enabled by default.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Enable Dynamic Screening Block List<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">This option turns on the Dynamic Screening service\'s ability to<\/span><span class=\"f_ControlIndent\"> block IP addresses and ranges. You can manage the<\/span><span class=\"f_ControlIndent\"> block list from the <a href=\"dynamic-screening_dynamic-blacklist.html\" class=\"topiclink\">Dynamic Block List<\/a> tab. The block list option is on by default.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Enable Dynamic Screening Allow List<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">This option turns on the Dynamic Screening service\'s<\/span><span class=\"f_ControlIndent\"> <a href=\"dynamic-screening_dynamic-whitelist.html\" class=\"topiclink\">Dynamic Allow List<\/a> feature, which you can use<\/span><span class=\"f_ControlIndent\"> to exempt IP addresses and ranges, to exclude them from Dynamic Screening. The<\/span><span class=\"f_ControlIndent\"> allow list is on by default.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Block Logon Policy Violations<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">By default MDaemon requires accounts to use their full email address when logging in instead of just the mailbox portion of their address (e.g. they must use &quot;<\/span><span class=\"f_PlainText\">user1@example.com<\/span><span class=\"f_ControlIndent\">&quot; instead of just &quot;<\/span><span class=\"f_PlainText\">user1<\/span><span class=\"f_ControlIndent\">&quot;). This is controlled by the &quot;<\/span><span class=\"f_ControlIndent\" style=\"font-style: italic;\">Servers require full email address for authentication<\/span><span class=\"f_ControlIndent\">&quot; option on the <a href=\"preferences_system.html\" class=\"topiclink\">Systems<\/a> page. When that option is on, you can also turn on this <\/span><span class=\"f_ControlIndent\" style=\"font-style: italic;\">Block Logon Policy Violations<\/span><span class=\"f_ControlIndent\"> option if you wish to block any IP address that attempts to logon without using the full email address. This option is off by default.<\/span><\/p>\n\r<p class=\"p_DialogSectionHeading\" style=\"page-break-after: avoid;\"><span class=\"f_DialogSectionHeading\">Advanced Logging Options<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Log Auth Failure data at startup<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">This option enables the writing of all <a href=\"dynamic-screening_auth-failure-tracking.html\" class=\"topiclink\">authentication failure data<\/a> that is currently stored by Dynamic Screening to the log file at startup. This is disabled by default.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Log Block List data at startup<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Enables the writing of all <a href=\"dynamic-screening_dynamic-blacklist.html\" class=\"topiclink\">Dynamic Block List<\/a> data that is currently stored to the log file at startup. This is disabled by default.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Log Allow List data at startup<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Enables the writing of all <a href=\"dynamic-screening_dynamic-whitelist.html\" class=\"topiclink\">Dynamic Allow List<\/a> data that is currently stored to the log file at startup. This is disabled by default.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Log Location data when available<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Check this box if you wish to log each connection\'s location data, if it\'s available.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Log Locations using ISO-3166 Codes<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Check this box if you wish to use ISO-3166 two-letter country codes when logging locations, instead using names.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Log all Allow List hits<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">This option adds an entry to the Dynamic Screening log each time an inbound connection is from an address that is on the <a href=\"dynamic-screening_dynamic-whitelist.html\" class=\"topiclink\">Dynamic Allow List<\/a>.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Log all Block List hits<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">This option adds an entry to the Dynamic Screening log each time an inbound connection is from an address that is on the <a href=\"dynamic-screening_dynamic-blacklist.html\" class=\"topiclink\">Dynamic Block List<\/a>.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Log all trusted IP list hits<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">This option adds an entry to the Dynamic Screening log each time an inbound connection is from a <a href=\"security--trusted_ips.html\" class=\"topiclink\">Trusted IP<\/a> address.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Log all Location Screen hits<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">This option adds an entry to the Dynamic Screening log each time an inbound connection is refused due to <a href=\"screening_location-screening.html\" class=\"topiclink\">Location Screening<\/a>.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Log all failed authentications<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">This option adds an entry to the Dynamic Screening log each time an inbound connection fails authentication.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Log all successful authentications<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Enable this option if you wish to log every incoming authentication attempt that succeeds. This is disabled by default.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Log all connections allowed<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Enable this option if you wish to create a log entry for every connection that passes Dynamic Screening and is allowed to proceed. This is disabled by default.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Log all connections refused<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">This option adds an entry to the log every time an incoming connection is refused by Dynamic Screening.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Log configuration when changes detected<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">This option adds entries to the log for all Dynamic Screening configurations when changes are detected from external sources (such as manually editing the INI file). Normal changes are logged at the Info level.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Log summary once [Daily | Hourly | Per minute]<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Adds to the Dynamic Screening log a summary of Dynamic Screening stats once every day, hour, or minute. By default the summary is logged hourly.<\/span><\/p>\n\r<p class=\"p_DialogSectionHeading\" style=\"page-break-after: avoid;\"><span class=\"f_DialogSectionHeading\">Screening Data Reset Options<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Reset all Auth Failure data<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Click this checkbox if you wish to clear all Dynamic Screening authentication data. You must then click <\/span><span class=\"f_ControlIndent\" style=\"font-weight: bold;\">Apply<\/span><span class=\"f_ControlIndent\"> or <\/span><span class=\"f_ControlIndent\" style=\"font-weight: bold;\">OK<\/span><span class=\"f_ControlIndent\"> for the reset to occur.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Reset all Block List data<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Click this checkbox if you wish to clear all Dynamic Screening Block List data. You must then click <\/span><span class=\"f_ControlIndent\" style=\"font-weight: bold;\">Apply<\/span><span class=\"f_ControlIndent\"> or <\/span><span class=\"f_ControlIndent\" style=\"font-weight: bold;\">OK<\/span><span class=\"f_ControlIndent\"> for the reset to occur.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Reset all Allow List data<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Click this checkbox if you wish to clear all Dynamic Screening Allow List data. You must then click <\/span><span class=\"f_ControlIndent\" style=\"font-weight: bold;\">Apply<\/span><span class=\"f_ControlIndent\"> or <\/span><span class=\"f_ControlIndent\" style=\"font-weight: bold;\">OK<\/span><span class=\"f_ControlIndent\"> for the reset to occur.<\/span><\/p>\n\r<p class=\"p_DialogSectionHeading\" style=\"page-break-after: avoid;\"><span class=\"f_DialogSectionHeading\">Enable Advanced User Interface features<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Check this box and then close\/reopen the MDaemon configuration interface to add several advanced Dynamic Screening features. A <a href=\"dynamic-screening_domain-nat-exemptions.html\" class=\"topiclink\">Domain NAT Exemptions<\/a> screen is added to the Dynamic Screening dialog, from which you can <\/span><span class=\"f_BodyText\">designate specific IP address\/domain combinations to exempt from Dynamic Screening blocking when valid users at that IP address fail password authentication. There are also several Dynamic Screening shortcuts added to the toolbar\'s Dynamic Screening section, and an option is added to the Dynamic Screening shortcut menu under the Servers section of the main interface that allows you to pause rather than disable the Dynamic Screening service, preventing clients from accessing the service while you manage its settings.<\/span><\/p>\n\r<p class=\"p_SeeAlso\" style=\"page-break-after: avoid; border-right: none; border-bottom: none; border-left: none;\"><span class=\"f_SeeAlso\">See:<\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"dynamic-screening_auth-failure-tracking.html\" class=\"topiclink\">Auth Failure Tracking<\/a><\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"dynamic-screening_dynamic-whitelist.html\" class=\"topiclink\">Dynamic Allow List<\/a><\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"dynamic-screening_dynamic-blacklist.html\" class=\"topiclink\">Dynamic Block List<\/a><\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"dynamic-screening_domain-nat-exemptions.html\" class=\"topiclink\">Domain NAT Exemptions<\/a><\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"dynamic-screening_protocols.html\" class=\"topiclink\">Protocols<\/a><\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"screening_location-screening.html\" class=\"topiclink\">Location Screening<\/a><\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"security--smtp_screen.html\" class=\"topiclink\">SMTP Screen<\/a><\/span><\/p>\n\r"
})
