|
1858
|
1 ---
|
|
|
2 summary: Throttle authentication attempts with optional tarpit
|
|
|
3 ...
|
|
|
4
|
|
|
5 Introduction
|
|
|
6 ============
|
|
|
7
|
|
|
8 This module lets you put a per-IP limit on the number of failed
|
|
|
9 authentication attempts.
|
|
|
10
|
|
|
11 It features an optioanal
|
|
|
12 [tarpit](https://en.wikipedia.org/wiki/Tarpit_%28networking%29), i.e.
|
|
|
13 waiting some time before returning an "authentication failed" response.
|
|
|
14
|
|
|
15 Configuration
|
|
|
16 =============
|
|
|
17
|
|
|
18 ``` {.lua}
|
|
|
19 modules_enabled = {
|
|
|
20 -- your other modules
|
|
|
21 "limit_auth";
|
|
|
22 }
|
|
|
23
|
|
|
24 limit_auth_period = 30 -- over 30 seconds
|
|
|
25
|
|
|
26 limit_auth_max = 5 -- tolerate no more than 5 failed attempts
|
|
|
27
|
|
|
28 -- Will only work with Prosody 0.10:
|
|
|
29 limit_auth_tarpit_delay = 10 -- delay answer this long
|
|
|
30 ```
|
|
|
31
|
|
|
32 Compatibility
|
|
|
33 =============
|
|
|
34
|
|
|
35 Requires 0.9 or later. The tarpit feature requires Prosody 0.10 or
|
|
|
36 later.
|
