Difference between revisions of "HIDS 38001"
From Atomicorp Wiki
m |
m |
||
| Line 28: | Line 28: | ||
None. | None. | ||
| − | |||
Latest revision as of 15:34, 6 March 2017
Rule ID
38001
Message
Plesk saslauthd Failed mail authenticatication attempt
Description
This rule detects when Plesk's sassauthd daemon records a single authentication failure.
Note: ASL does not cause this event to occur, it simply reports when this event occurs.
False Positives
There are no known false positive for this rule.
Disabling this rule will not prevent Plesk from rejecting the users mail connections. It will simply prevent ASL from reporting or tracking these failed authentication attempts. Disabling this rule will also prevent ASL from responding to brute force attacks against the mail server.
Tuning Recommendations
None.
Similar Rules
None.
Knowledge Base Articles
None.
Outside References
None.
Notes
None.
