Unable to view Real IP when an attack was receveid

General discussion about Zimbra Desktop.
Trinite
Posts: 1
Joined: Wed Jan 13, 2016 10:13 am

Unable to view Real IP when an attack was receveid

Postby Trinite » Wed Jan 13, 2016 10:22 am

Hello there!


I'm having an issue with several locks in accounts for access attempts. In the logs, I can see several attempts, authentication failures, but only appears the local IP address, making it difficult to trace the Real IP.


In the logs appears the Real IP, only when the access attempt was through WEB or POP3 Interfaces. When the attempt to authenticate is done through SMTP Protocol, real IP doesn't appears.


I've did all the troubleshootings related to this issue descripted above, however I couldn't make Zimbra log The real IP in the attempts to authenticate using SMTP.


I have installed Zimbra Collaboration Open Source V.8.6.0 with the last Patch installed.


Regards,


Marco Lima



jkhondhu@zimbra.com
Zimbra Alumni
Zimbra Alumni
Posts: 4
Joined: Fri Jul 18, 2014 4:45 am

Unable to view Real IP when an attack was receveid

Postby jkhondhu@zimbra.com » Wed Jan 13, 2016 2:15 pm

https://bugzilla.zimbra.com/show_bug.cgi?id=103290 - improved source port logging in zimbra ( not just to aid Fail2Ban )

Return to “General Questions”

Who is online

Users browsing this forum: No registered users and 5 guests