Question : domain controller attempted hack after router rollout

We just had a Cisco tech rollout a 1721 router.  Since then we are having hack attempts that I can trace back to Austria. They are using valid domain accounts (I have a three try and you're out policy) and my  accounts keep getting locked out.  Any ideas? (I have created a local ip policy to block the offenders, but obviously this would be a never ending game).

Answer : domain controller attempted hack after router rollout

Yes, buy and install a firewall or configure ACL's on your router. There is no reason anyone on the internet should be able to access your server to authenticate via kerberos or any other standard authentication method.

- SaP -