Submit a ticketCall us

AnnouncementsFace your biggest database issues head-on

Our new eCourse helps you navigate SQL Server performance blocks by teaching you how to recognize and deal with the three DBA Disruptors: Performance Hog, Blame Shifter, and Query Blocker. Register today to learn how to defend your environment and fend off menacing disruptions.

Register for your free eCourse.

Home > Success Center > Serv-U Managed File Transfer & Serv-U FTP Server > Serv-U - Knowledgebase Articles > Automatically disconnect the session after 3 failed login attempts

Automatically disconnect the session after 3 failed login attempts

Table of contents
Created by Dhalia Turiaga, last modified by MindTouch on Jun 23, 2016

Views: 1,204 Votes: 1 Revisions: 5

Overview

In order to protect the user from brute force attack, Serv-U is design to automatically disconnect the session after 3 failed login attempts. 

Environment

Serv-U version 12.x ++ with below supported operating system: 

  • Windows Vista/7/8, Server 2008/2012 - C:\ProgramData\RhinoSoft\Serv-U (Folder is Hidden in Windows by default)
  • Windows 2000/XP, Server 2000/2003 - C:\Program Files\RhinoSoft\Serv-U
  • Linux - /usr/local/Serv-U

Detail

Serv-U is supposed to disconnect a session that fails to successfully authenticate after 3 failed attempts. This is to prevent hackers from using the same session to bypass anti-hammer settings that make brute force password guessing unfeasible. Forcing a disconnect subjects them to antihammer settings when a new connection is established. Slowing down their authentication attempts to defeat them as well since it makes brute force unfeasible as well.

Please see the Protect against brute force attacks article for more information.

 

Last modified

Tags

Classifications

Public