Exchange attack about

1

Hello, we are using exchange 2019 cu14 but
It does not prevent crowdsec exchange smtp receive attacks, especially after cu14 has passed.

Has there been a change regarding this? We have installed crowdsec v1.6.1 now, but the situation is the same.

Error logs are as follows and account accounts are locked due to these attacks.

event id: 1035
Inbound authentication failed with error LogonDenied for Receive connector Client Frontend.

Can I ask for your support and information?

2

Hello there

It is important to confirm if microsoft and crowdsec have issued any updates and fixes lately that may resolve technical problems and holes in security.
Also, you may be able to reduce these risks by going over the setup of your receive connectors and making sure they follow set safety rules.