View source for HIDS 171003

'''Rule ID''' 

171003

'''Message'''

Multiple rapid Exim authentication failures.

'''Description'''  

This rule detects when exim reports a number of incorrect authentication failures for the same IP.  The threshold is 5 failures in 2 seconds.

'''False Positives'''

There are no known false positive for this rule.  

'''Tuning Recommendations'''

None.

'''Similar Rules'''

[[HIDS_171003]]

[[HIDS_171004]]

[[HIDS_171006]]



'''Knowledge Base Articles'''

None.

'''Outside References'''

None.

'''Notes'''

None.