Re: Hacker trying to logon...

From: Lanwench [MVP - Exchange] (lanwench_at_heybuddy.donotsendme.unsolicitedmail.atyahoo.com)
Date: 08/11/03


Date: Sun, 10 Aug 2003 21:07:51 -0400


Get a good firewall - I like Sonicwalls. Also change names such as
administrator to something else. Use complex passwords & enforce regular pwd
changes. Apply all critical & relevant recommended patches from Windows
Update.

Mark Daly wrote:
> Some is trying to logon onto my server and some how they have
> obtained the user list. The security log doesn't give me any IP
> address information (only workstation name & the failed account
> name). First how do I block logon access for IPs other than the
> local spoofed subnet (10.0.0.x) and secondly how did dthey get the
> list?