RE: Anti brute force tool

["Hunt, Jim" <Jim.Hunt () nwsc k12 in us>]

I would think something as simple as a number of invalid logon attempts
being monitored and defined would be sufficient to trigger after a
certain number in a predetermined amount of time.

At my last job, I used a commercial product to notify me of every bad
logon attempt for the admin accounts and for any 3 bad attempts in 10
minutes.  I caught a student red handed trying to brute force an admin
account in a classroom. :)  

http://www.tntsoftware.com/

Jim Hunt
Northwestern School Corporation
Technology Department

Network Monitoring Tools & Tutorials
http://www.netmon.org


-----Original Message-----
From: Blade Runner [mailto:blade () seven com br] 
Sent: Thursday, April 10, 2003 1:51 PM
To: security-basics () securityfocus com
Subject: Anti brute force tool

Hi list, is there any effective tool that detects ( or warns the
administrator )  brute forces attempts in a POP/SMTP server?

Maybe a reliable scrit that reads /var/log/syslog or other logs files...


Sorry about my poor English.


Thanks in advance.




-- 
Blade Runner - Squirrel Mail
Linux Powered
ICQ 40959703
http://www.emuladores.com.br



-------------------------------------------------------------------
Is SPAM over-loading your e-mail server, disk space or bandwidth?
SurfControl E-Mail Filter is flexible, intelligent and policy-driven
protection.
http://www.securityfocus.com/SurfControl-security-basics2
Download your free fully functional trial, complete with 30-days of free
technical support.
Stop SPAM before it stops you.
-------------------------------------------------------------------


-------------------------------------------------------------------
Is SPAM over-loading your e-mail server, disk space or bandwidth?
SurfControl E-Mail Filter is flexible, intelligent and policy-driven
protection.
http://www.securityfocus.com/SurfControl-security-basics2
Download your free fully functional trial, complete with 30-days of free technical support.
Stop SPAM before it stops you.
-------------------------------------------------------------------