Logging to Windows Application log

[Alastair Green]

I'm not sure when this started, but 1.1.6.0 logs failed authentication attempts to the Windows Application logs.

Nice idea, but given we have lots of script-kiddies doing dictionary attacks on our servers, the Application log very quickly fills up with these messages and you can't see anything else.

Please could you give the option to turn this off?

Many thanks.

Alastair.

[ArGoSoft Products]

Hello Alastair,

As a matter of fact, I am considering to separate the logs - have different file for different services, but I have a new release almost ready, so, probably, I will be adding it to next release.

Failed authentication attempts are very common, especially with SMTP - spammers are trying to hack your passwords, but if you have auto lockout feature enabled, you should not be worried about it, because your server will handle things.

My server log is full of those, and I am logging them to Windows application logs too.

Archie

[Alastair Green]

Hi Archie,

Sorry for the late reply.

What I was asking was whether we could have the option to disable logging errors to the Windows Application Logs, as it is filling up very rapidly, and obscures more important messages.

I really don't need to know every time someone makes a failed authentication attempt, as you say they are very common, and I can see them in the mail logs if I need to.

Maybe you could make it more selective, so only certain things get logged into the Application log, but not common events like failed authentication?

Many thanks,

Alastair.

[ArGoSoft Products]

Hello Alastair,

Of course, I can make it optional.

I released the new version yesterday, did not make a post here yet though, will do after few minutes, so, it is kind of late now, but I will make logging into Windows log optional firs thing I will do next, and will email you when I have first pre-release build.

Archie

[Alastair Green]

That would be great Archie, much appreciated.

Thanks very much

Alastair.

[Archie]

Hello Alastair,

Please get the latest pre-release at https://www.argosoft.com/rootpages/Prereleases

You will see an option at Settings - Options - Advanced - Do not send authentication failures to Windows Event Log.  Check it, and you will not see messages in the event log.

Make sure to check out https://www.argosoft.com/rootpages/NewsFlash .  This version has one significant update, which may affect your firewall settings.

Archie

[Alastair Green]

That's great Archie, thanks very much.

Alastair