In the past, defending servers from password attacks originating through or from proxy servers has been problematic.

For proxy servers using single addresses the problem is incorrect identification of that address as uniquely connected with an attack. Such an interpretation leads to incorrectly locking out legitimate users who happen to be attempting to connect through the same proxy server ...

Passwords cannot be recovered because of the impossibility of reversing the stored cryptographic MD5 hash.

If a user forgets his password, he will have to be assigned a random password which he can then change to one of his own choosing ...