Skip to content

Dave van den Berg

← MDaemon Idea Engine

My feedback

3 results found

  1. Dynamic Screening - Tracking the device who triggers the login failures

    9 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close
    You have left! (?) (thinking…)
    1 comment  ·  Welcome to MDaemon Technologies' Suggestion Box » MDaemon  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close
    AdminArron Caruth (VP of Product Development, Alt-N Technologies) responded

    Hello,

    Thank you for your suggestion to include client information. Can you provide additional details about what you would like to see added to the log? Which name would you like to see added to the log? Is this for a specific protocol or all protocols? Which log would you like the information added to?

    Thanks,
    Arron

    An error occurred while saving the comment
    Dave van den Berg commented  · 

    I would suggest to add the client version and used protocol

    Dave van den Berg supported this idea  · 

  2. Option to Drop Connection Immediately upon DNSBL or Blacklist IP Lookup Found

    7 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close
    You have left! (?) (thinking…)
    0 comments  ·  Welcome to MDaemon Technologies' Suggestion Box » SecurityGateway  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close
    under review  ·  AdminArron Caruth (VP of Product Development, Alt-N Technologies) responded

    Hello Arnold,

    I have verified with our developers that the tests are occurring after the RCPT command so that any domain exceptions that exist can be applied. We will consider having the tests occur earlier in the session when no domain exceptions exist for future versions of SecurityGateway.

    Thanks,

    Arron

    Dave van den Berg supported this idea  · 

  3. Location Screening applied per mailbox

    13 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close
    You have left! (?) (thinking…)
    4 comments  ·  Welcome to MDaemon Technologies' Suggestion Box » MDaemon  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close
    under review  ·  AdminArron Caruth (VP of Product Development, Alt-N Technologies) responded

    Hello Charl,

    Thank you for sharing your idea with us to implement per user location screening. There are some challenges to implementing this as it will require that we allow authentication to begin before a connection can be blocked by location screening. Some users will not like this, so we have to find a way to block connections as efficiently as possible.

    There are a couple of options available for by-passing location screening on a per user basis. You can enable options for ActiveSync so that known devices by-pass location screening checks. You can also have the IP address of knwon ActiveSync devices whitelisted, so if you have a laptop on the same wifi network that is not using ActiveSync it will be allowed to connect as well. If you are using Webmail, you can use Two Factor Authentication to bypass Location Screening.

    We will look into per user location…

    An error occurred while saving the comment
    Dave van den Berg commented  · 

    Some users have clicked on a link and then they are victim of IMAP-connections to their account. By narrowing the countries the risk of connections with (brute force) attacks can be reduced.
    Less more notices of Authentication Failures which are useful for Security reasons but ignorant for the users. I don't want to disable these notifications for my users, need them to be aware for connection attempts with their accounts.
    This is especially for IMAP, SMTP is no problem.

    Dave van den Berg supported this idea  · 

Feedback and Knowledge Base

(thinking…)