hmLoadTopic({
hmKeywords:"动态屏蔽,动态屏蔽 高级日志选项,动态屏蔽 自定义,动态屏蔽 选项",
hmTitle:"选项\/定制",
hmDescription:"使用动态屏蔽，MDaemon 可以追踪入站连接的行为来识别可疑的活动并作出相应的响应。您可以阻止 IP 地址 (或地址范围)进行连接，如果这些地址达到指定的验证失败次数。您也可以在账户太快达到验证失败次数时冻结账户。此外，IP 地址的阻止和账户的冻结都不是永久性质的。连接的 IP...",
hmPrevLink:"security--site_policy.html",
hmNextLink:"dynamic-screening_auth-failure-tracking.html",
hmParentLink:"security_menu.html",
hmBreadCrumbs:"<a href=\"security_menu.html\">安全菜单<\/a> &gt; 动态屏蔽",
hmTitlePath:"安全菜单 > 动态屏蔽 > 选项\/定制",
hmHeader:"<h1 class=\"p_Heading1\" style=\"page-break-after: avoid;\"><span class=\"f_Heading1\">选项\/定制<\/span><\/h1>\n\r",
hmBody:"<p class=\"p_BodyText_Center\"><img style=\"margin:0 auto 0 auto;width:34.7500rem;height:33.3125rem;border:none\" src=\".\/images\/dynamic-screening_options.png\"\/><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">使用动态屏蔽，MDaemon 可以追踪入站连接的行为来识别可疑的活动并作出相应的响应。您可以<a href=\"dynamic-screening_auth-failure-tracking.html\" class=\"topiclink\">阻止 IP 地址<\/a> (或地址范围)进行连接，如果这些地址达到指定的验证失败次数。您也可以在账户太快达到验证失败次数时<a href=\"dynamic-screening_auth-failure-tracking.html\" class=\"topiclink\">冻结账户<\/a>。此外，IP 地址的阻止和账户的冻结都不是永久性质的。连接的 IP 地址将被阻止达到指定的分钟数，小时数或天数，冻结的账户可以在指定的时间段后自动“解冻”，或由管理员手动解冻。<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">启用动态屏蔽服务<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">选中此框来启用“动态屏蔽”服务。您还可以在 MDaemon 主用户界面内导航窗格中的“服务器”部分下启用\/禁用该服务。<\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_DialogSectionHeading\">系统选项<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">启用验证失败跟踪<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">启用此项时，“动态屏蔽”服务将为在<a href=\"dynamic-screening_protocols.html\" class=\"topiclink\">协议<\/a>选项卡上指定的协议跟踪验证失败，并执行<a href=\"dynamic-screening_auth-failure-tracking.html\" class=\"topiclink\">验证失败跟踪<\/a>选项卡上的选项确定的操作。默认情况下启用此项。<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">启用动态屏蔽阻止列表<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">此项启用“动态屏蔽”服务<\/span><span class=\"f_ControlIndent\">用来阻止 IP 地址和 IP 范围的功能。您可以从<\/span><span class=\"f_ControlIndent\"><a href=\"dynamic-screening_dynamic-blacklist.html\" class=\"topiclink\">动态阻止列表<\/a>选项卡管理阻止列表。默认情况下，阻止列表选项处于启用状态。<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">启用动态屏蔽允许列表<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">此项启用“动态屏蔽”服务的<\/span><span class=\"f_ControlIndent\"> <a href=\"dynamic-screening_dynamic-whitelist.html\" class=\"topiclink\">动态允许列表<\/a>功能，您可以使用它<\/span><span class=\"f_ControlIndent\">来豁免 IP 地址和范围，以将它们从“动态屏蔽”中排除。<\/span><span class=\"f_ControlIndent\">默认情况下启用允许列表。<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">阻止登录策略违规<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">默认情况下，MDaemon 要求账户在登录时，使用其完整的电子邮件地址，而不仅是其地址的邮箱部分（例如他们必须使用“<\/span><span class=\"f_PlainText\">user1@example.com<\/span><span class=\"f_ControlIndent\">”而不仅是“<\/span><span class=\"f_PlainText\">user1<\/span><span class=\"f_ControlIndent\">”）。 这由“<\/span><span class=\"f_ControlIndent\" style=\"font-style: italic;\">服务器需要完整的邮件地址进行验证<\/span><span class=\"f_ControlIndent\">”这个选项控制，它位于<a href=\"preferences_system.html\" class=\"topiclink\">系统<\/a>页面。在启用该项时，如果您希望阻止不使用完整的邮件地址尝试登录的任何 IP 地址，您也可以启用“<\/span><span class=\"f_ControlIndent\" style=\"font-style: italic;\">阻止登录策略违规<\/span><span class=\"f_ControlIndent\">这个选项。默认情况下，禁用该选项。<\/span><\/p>\n\r<p class=\"p_DialogSectionHeading\" style=\"page-break-after: avoid;\"><span class=\"f_DialogSectionHeading\">高级日志选项<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">在开机时记录验证失败数据<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">此项帮助用户在开机时将当前由“动态屏蔽”保存的所有<a href=\"dynamic-screening_auth-failure-tracking.html\" class=\"topiclink\">验证失败数据<\/a>写入日志文件。默认情况下，禁用该选项。<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">开机时记录阻止列表数据<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">此项帮助用户在开机时将当前由“动态屏蔽”保存的所有<a href=\"dynamic-screening_dynamic-blacklist.html\" class=\"topiclink\">动态阻止列表<\/a>数据写入日志文件。默认情况下，禁用该选项。<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">开机时记录允许列表数据<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">此项帮助用户在开机时将当前由“动态屏蔽”保存的所有<a href=\"dynamic-screening_dynamic-whitelist.html\" class=\"topiclink\">动态允许列表<\/a>数据写入日志文件。默认情况下，禁用该选项。<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">在可用时记录位置数据<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">如果您希望记录每个连接的位置数据（如果可用），请选中此框。<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">使用 ISO-3166 代码来记录位置<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">如果您希望在记录位置时使用 ISO-3166 双字母的国家\/地区代码，而不是使用名称，请选中此框。<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">记录所有允许列表匹配项<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">每次入站连接来自<a href=\"dynamic-screening_dynamic-whitelist.html\" class=\"topiclink\">动态允许列表<\/a>上的地址时，此项会将条目添加到“动态屏蔽”日志中。<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">记录所有阻止列表匹配项<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">每次入站连接来自<a href=\"dynamic-screening_dynamic-blacklist.html\" class=\"topiclink\">动态阻止列表<\/a>上的地址时，此项会将条目添加到“动态屏蔽”日志中。<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">记录所有可信 IP 列表点击<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">每次入站连接来自<a href=\"security--trusted_ips.html\" class=\"topiclink\">可信 IP<\/a>地址时，此项会将条目添加到“动态屏蔽”日志中。<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">记录所有位置屏蔽点击<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">每次入站连接由于<a href=\"screening_location-screening.html\" class=\"topiclink\">位置屏蔽<\/a>被拒绝时，此项会将条目添加到“动态屏蔽”日志中。<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">记录所有失败验证<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">每次入站连接验证失败时，此项会将条目添加到“动态屏蔽”日志中。<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">记录所有成功验证<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">如果您希望记录每个成功的入站验证尝试，请启用此选项。默认情况下，禁用该选项。<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">记录所有允许的连接<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">如果您希望为每个通过动态屏蔽的连接创建日志条目并允许继续处理，请启用此选项。默认情况下，禁用该选项。<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">记录所有被拒的连接<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">每次“动态屏蔽”拒绝入站连接时，此项都会向日志添加条目。<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">在检测到变更时记录配置<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">当从外部来源检测到变更时（例如手动编辑 INI文件），此项会将条目添加到所有动态屏蔽配置的日志中。以信息级别记录常规变更<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">[每天 | 每小时 | 每分钟] 记录摘要一次<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">每天、每小时或每分钟向动态屏蔽日志添加动态屏蔽统计信息的摘要。默认情况下每小时记录摘要一次。<\/span><\/p>\n\r<p class=\"p_DialogSectionHeading\" style=\"page-break-after: avoid;\"><span class=\"f_DialogSectionHeading\">屏蔽数据重置选项<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">重置所有验证失败数据<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">如果您希望清除所有动态屏蔽验证数据，请点击此复选框。然后您必须点击“<\/span><span class=\"f_ControlIndent\" style=\"font-weight: bold;\">应用<\/span><span class=\"f_ControlIndent\">”或“<\/span><span class=\"f_ControlIndent\" style=\"font-weight: bold;\">确定<\/span><span class=\"f_ControlIndent\">”来使重置生效。<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">重置所有阻止列表数据<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">如果您希望清除所有“动态屏蔽阻止列表”数据，请点击此复选框。然后您必须点击“<\/span><span class=\"f_ControlIndent\" style=\"font-weight: bold;\">应用<\/span><span class=\"f_ControlIndent\">”或“<\/span><span class=\"f_ControlIndent\" style=\"font-weight: bold;\">确定<\/span><span class=\"f_ControlIndent\">”来使重置生效。<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">重置所有允许列表数据<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">如果您希望清除所有“动态屏蔽允许列表”数据，请点击此复选框。然后您必须点击“<\/span><span class=\"f_ControlIndent\" style=\"font-weight: bold;\">应用<\/span><span class=\"f_ControlIndent\">”或“<\/span><span class=\"f_ControlIndent\" style=\"font-weight: bold;\">确定<\/span><span class=\"f_ControlIndent\">”来使重置生效。<\/span><\/p>\n\r<p class=\"p_DialogSectionHeading\" style=\"page-break-after: avoid;\"><span class=\"f_DialogSectionHeading\">启用高级用户界面功能<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">选中此框，然后关闭\/重新打开 MDaemon 的配置界面来添加几个高级的动态屏蔽功能。已将“<a href=\"dynamic-screening_domain-nat-exemptions.html\" class=\"topiclink\">动态 NAT 豁免<\/a>”屏幕添加到“动态屏蔽”对话框，您可以从中<\/span><span class=\"f_BodyText\">指定特定的 IP 地址\/域组合，以便在使用这个 IP 地址的有效用户无法通过密码验证时，将上述组合从“动态屏蔽”阻止中免除。在工具栏的“动态屏蔽”部分中还添加了几个“动态屏蔽”快捷方式，并且在主界面的“服务器”部分下的“动态屏蔽”快捷菜单中添加了一个选项，允许您暂停而不是禁用“动态屏蔽”服务，从而防止客户端在管理其设置时访问服务。<\/span><\/p>\n\r<p class=\"p_SeeAlso\" style=\"page-break-after: avoid; border-right: none; border-bottom: none; border-left: none;\"><span class=\"f_SeeAlso\">还请参阅：<\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"dynamic-screening_auth-failure-tracking.html\" class=\"topiclink\">验证失败跟踪<\/a><\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"dynamic-screening_dynamic-whitelist.html\" class=\"topiclink\">动态允许列表<\/a><\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"dynamic-screening_dynamic-blacklist.html\" class=\"topiclink\">动态阻止列表<\/a><\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"dynamic-screening_domain-nat-exemptions.html\" class=\"topiclink\">域 NAT 豁免<\/a><\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"dynamic-screening_protocols.html\" class=\"topiclink\">协议<\/a><\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"screening_location-screening.html\" class=\"topiclink\">位置屏蔽<\/a><\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"security--smtp_screen.html\" class=\"topiclink\">SMTP 屏蔽<\/a><\/span><\/p>\n\r"
})
