Highlighted
New Member.
1046 views

gwia intruder detection

Having problems with accounts getting locked from the GWIA. We a running GW 14.2.2 on OES 11 sp3. I found this Perl script that I'm try to get working on our GWIA to block ip address from failed login attempts.(https://www.novell.com/communities/coolsolutions/block-gwia-intruders-firewall-lockout-users/). It acts like it works but it does not put any ip address in the SuSEfirewall2-custom file. Here is the output when I run it,
./gwia_intruderblock
SuSEfirewall2: Setting up rules from /etc/sysconfig/SuSEfirewall2 ...
SuSEfirewall2: Firewall customary rules loaded from /etc/sysconfig/scripts/SuSEfirewall2-custom
SuSEfirewall2: Warning: ip6tables does not support state matching. Extended IPv6 support disabled.
SuSEfirewall2: batch committing...
SuSEfirewall2: Firewall rules successfully set
I not sure if it is the Waring that is making it not work. Has anyone ever used this script to stop brute forcing password on the GWIA, or a better way. This GWIA is for our end uses that still use IMAP and SMTP and is on port 587, our main GWIA is not open to the world and gets in and out mail from our email scanner. Our user get lockout many time during the day and they are getting frustrated.







https://www.novell.com/communities/coolsolutions/block-gwia-intruders-firewall-lockout-users/
Labels (1)
0 Likes
2 Replies
Highlighted
Absent Member.
Absent Member.

Re: gwia intruder detection

data5248,

It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.

These forums are peer-to-peer, best effort, volunteer run and that if your issue
is urgent or not getting a response, you might try one of the following options:

- Visit https://www.microfocus.com/support-and-services and search the knowledgebase and/or check
all the other self support options and support programs available.
- Open a service request: https://www.microfocus.com/support
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.microfocus.com)
- You might consider hiring a local partner to assist you.
https://www.partnernetprogram.com/partnerfinder/find.html

Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.microfocus.com/faq.php

Sometimes this automatic posting will alert someone that can respond.

If this is a reply to a duplicate posting or otherwise posted in error, please
ignore and accept our apologies and rest assured we will issue a stern reprimand
to our posting bot.

Good luck!

Your Micro Focus Forums Team
http://forums.microfocus.com



0 Likes
Highlighted
Micro Focus Expert
Micro Focus Expert

Re: gwia intruder detection

Hi,

Sorry for the slow response 😞

I suggest that you add a comment/question on the Cool Solutions article you reference. That will ping the author and perhaps they can assist you.

Cheers,
Laura Buckley

Views/comments expressed here are entirely my own.
If you find this post helpful, please show your appreciation and click on "Like" below...
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.