Re: too many login attempts from Internet
From: Dave (noone_at_nowhere.com)
Date: 04/08/04
- Next message: Carlo: "CPU occupation!!!!"
- Previous message: David Craig: "RE: LOGON TO WINDOWS 2000 PASSWORDS"
- In reply to: Enrique Garcia: "Re: too many login attempts from Internet"
- Next in thread: Steven L Umbach: "Re: too many login attempts from Internet"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 8 Apr 2004 06:39:50 -0400
but do they require login from the internet or just from your lan? if they
have to come in via the internet you should look into a vpn solution and
close the holes in your firewall. it is easy with netbios exposed to the
internet to get a listing of accounts on a machine then start an attack to
guess passwords. eventually someone will get in and compromise your
network, the best you can do is to require strong passwords and change them
often, and be sure to enable lockouts after just a couple failed login
attempts to help slow down the password guessers.
"Enrique Garcia" <egarcianospam@laredo.edu> wrote in message
news:unt8VgNHEHA.2472@TK2MSFTNGP10.phx.gbl...
> We have 600 employees, and they require loggin for a variety of
> applications, from online tutorials, web services, printing, terminal
> services, http file downloads, etc.
>
> The accounts that are getting the failed loggin attempts are usually the
> built in accounts, even if we change the name of the account it continues
to
> happen. Somehow they are able to acquire valid account names.
>
> thanks for you info,
> Enrique
>
>
> "Dave" <noone@nowhere.com> wrote in message
> news:uvhl14MHEHA.1608@TK2MSFTNGP11.phx.gbl...
> > you have users that are trying to login to user accounts on your server
> from
> > the internet?? is this for normal file and print sharing for your
> > organization or are these failed logins to a web service?
> >
> >
> >
> >
> > "Enrique Garcia" <egarcianospam@laredo.edu> wrote in message
> > news:eSGPL0MHEHA.3700@TK2MSFTNGP09.phx.gbl...
> > > How do you fix/configure the firewall to descriminate from what
appears
> to
> > > be normal loggin attempts without blocking real attemtps?
> > >
> > >
> > > "Dave" <noone@nowhere.com> wrote in message
> > > news:umUZbmMHEHA.1192@TK2MSFTNGP11.phx.gbl...
> > > > fix your firewall, its either not working or is configured
improperly.
> > > >
> > > > "Enrique Garcia" <egarcianospam@laredo.edu> wrote in message
> > > > news:#XWZ6gMHEHA.2668@TK2MSFTNGP10.phx.gbl...
> > > > > I turned on auditing to monitor login attempts on Windows 2000
> Server,
> > > and
> > > > I
> > > > > found out that I'm getting a continuous stream of failed login
> > attempts
> > > > > using different user accounts from the Internet. We have a
firewall,
> > but
> > > > the
> > > > > login attempts are going right through. Without disconnecting the
> > server
> > > > > from the Internet, is there any way I could stop this?
> > > > > Any help would be appreciated.
> > > > > Thanks,
> > > > > Enrique
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>
- Next message: Carlo: "CPU occupation!!!!"
- Previous message: David Craig: "RE: LOGON TO WINDOWS 2000 PASSWORDS"
- In reply to: Enrique Garcia: "Re: too many login attempts from Internet"
- Next in thread: Steven L Umbach: "Re: too many login attempts from Internet"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
