Tweet
Open-Xchange releases OX Abuse Shield v2.2.0
Open-Xchange is pleased to announce the release of OX Abuse Shield v2.2.0.
OX Abuse Shield provides abuse-prevention for Web Applications (including Webmail), POP, and IMAP. It is integrated with both OX App Suite and Dovecot Pro to prevent login and authentication abuse as well as protecting against brute-force attacks.
The goal of OX Abuse Shield is to detect brute forcing of passwords across many servers, services and instances, as well as enforce policy for authentication and authorization. In order to support the real world, brute force detection policy can be tailored to deal with "bulk, but legitimate" users of your service, as well as botnet-wide slow-scans of passwords.
The new OX Abuse Shield v2.2.0 provides the following main improvements:
Open-Xchange now provides more detailed overviews, data sheet and product guide, relating to new product releases. These can be found at
A more detailed overview of the main functions and technical descriptions of OX Abuse Shield can be found at the OX Whitepaper under:
Shipped packages and versions
For further details about OX Abuse Shield installation and configuration, mandatory and optional packages, policies, please refer to the documentation provided: https://oxpedia.org/wiki/index.php?t...X_Abuse_Shield
Open-Xchange is pleased to announce the release of OX Abuse Shield v2.2.0.
OX Abuse Shield provides abuse-prevention for Web Applications (including Webmail), POP, and IMAP. It is integrated with both OX App Suite and Dovecot Pro to prevent login and authentication abuse as well as protecting against brute-force attacks.
The goal of OX Abuse Shield is to detect brute forcing of passwords across many servers, services and instances, as well as enforce policy for authentication and authorization. In order to support the real world, brute force detection policy can be tailored to deal with "bulk, but legitimate" users of your service, as well as botnet-wide slow-scans of passwords.
The new OX Abuse Shield v2.2.0 provides the following main improvements:
- Lookup individual GeoIP2 values
Previously the GeoIP2 support was limited to retrieving City and County DB information, with a fixed set of fields returned. However this meant that other DBs (e.g. ISPs, Anonymizers etc.) could not be queried, as well as additional fields in City or Country DBs. Now there are four new Lua functions to query arbitrary fields in the Maxmind DBs - New Kibana Reports and Dashboard
New Kibana Reports and Dashboard have been added to the kibana_saved_objects.json file. These reports are based on "allow" webhooks sent to elasticsearch. - Built-in Whitelists
In addition to the built-in blacklists there are now built-in whitelists. Entries can be added and deleted from the built-in whitelists using either the REST API or using Lua commands. - Hooks to create Custom Policies and Fields
New functions to register custom policies, like create a new statsDB field which can be used to track new statistics, create a new policy that uses a threshold based on a specific statsDB field and create a completely custom policy using a Lua function.
Open-Xchange now provides more detailed overviews, data sheet and product guide, relating to new product releases. These can be found at
A more detailed overview of the main functions and technical descriptions of OX Abuse Shield can be found at the OX Whitepaper under:
Shipped packages and versions
- OX Abuse Shield v2.2.0-rev1
- OX Abuse Shield: http://software.open-xchange.com/pro...2019-11-07.pdf
For further details about OX Abuse Shield installation and configuration, mandatory and optional packages, policies, please refer to the documentation provided: https://oxpedia.org/wiki/index.php?t...X_Abuse_Shield