Homeland protection don't work for web access

Get help with troubleshooting issues
Post Reply
SaleCar
Posts: 42
Joined: Mon Sep 29, 2014 8:10 am

Homeland protection don't work for web access

Post by SaleCar » Tue Jul 28, 2020 2:30 pm

Hello,

We have a problem with Russian hackers who attacks TSPlus web server on port 80 and slow down RDP service. Other client cannot connect because of that. In homeland protection, Russia is not on the allowed list but it still passing. How to solve that?

log.jpg
log2.jpg

nbatocanin
Posts: 23
Joined: Sun May 10, 2015 2:53 pm

Re: Homeland protection don't work for web access

Post by nbatocanin » Tue Aug 04, 2020 4:39 pm

Is there a chance to solve this problem?
The attack was repeated several days and will probably happen again. We have blocked the IP addresses from which they attacked, but they are constantly changing. I think this is a bug in RDS Knight.

- We set Homeland protection and this is ok for RDP connections
- RDS Knight is set to watch html server, (settings -> Homeland -> Waathched Process: HTML5service.exe)
- but this is NOT work. The web attacker reach our server and tries a large number of user / pass combinations. Each of these attempts internally creates a rdp connection to 127.0.0.1, which completely blocks the server so other users cannot log in.

We use old RDS Knight, maybe this has been fixed in newer versions?

Post Reply