Pragma Systems Technical Forum

Unauthorized not existent users access attempt log

https://forums.pragmasys.com/Topic310.aspx

By fq4tqw - 9/17/2015 8:57:41 AM

Hello Forum,

I've just downloaded this app, and I love everything about it..., but!, I cant seem to find, where do I create, or how is it stored, or if needed to be configured and I missed it..., if let's say, an idiot from the internet tried accesing my server ( which he wont because I've configured Fortress preety tight ), but I wanted to see the log which stores not only all succesful attempts and all of what those users do, but I would also like to store and see for unauthorized attempts:

1) user used

2) origin of connection

I mean, the same thing I see for users but for idiots that are not authorized that are trying to gain access to my system ( user used and ip address it's suficient ).

I know that if I turn on the debug it will show me the user, a whole lot of input on that transaction and the IP from where it came from, but that thing running 24/7 for ever will kill any HDD in this world; plus that is only for debuging purposes only right?

Thanks for your time
By bethredd - 9/17/2015 9:05:22 AM

Hello,

I'm glad you are happy with the product. Your request is easily solved by turning on the "Record attempted connections to Event Log" on the InetD page of the Local Server Configuration program.

This will record an event for every connection made to the monitored ports. You can then match the connection events with the successful logon events to see if there is any unauthorized attempts to your server.
By fq4tqw - 9/17/2015 9:20:16 AM

That was preety simple ( I feel dumb! ), so, one last dumb question, how do I grant access to a user that has been locked out because of bad logging attempts.

Remote Address X.X.X.X:

   User Logon Failure

   User Name=root

   Domain=PRAGMA

   Error 1909: The referenced account is currently locked out and may not be logged on to.
By bethredd - 9/18/2015 12:45:54 AM

It was hidden a little bit. :)

The account lockout is done by the OS, so you would unlock the account under the OS User Management.