Mercurial > prosody-modules
view mod_limit_auth/README.markdown @ 4939:7d6ae8bb95dc
mod_delegation: use clean_xmlns to remove jabber:client namespace from node:
for the same reason as in mod_privilege, `jabber:client` namespace is removed with the
clean_xmlns method coming from there.
Furthermore, the forwarded <iq> stanza use the `jabber:client` xmlns while the stanza may
come from a component with e.g. `jabber:component:accept` xmlns, this can lead to
inconsistencies between the <iq> stanza and children (like <error> element).
author | Goffi <goffi@goffi.org> |
---|---|
date | Sat, 28 May 2022 16:42:13 +0200 |
parents | 4916c1b6517f |
children |
line wrap: on
line source
--- summary: Throttle authentication attempts with optional tarpit ... Introduction ============ This module lets you put a per-IP limit on the number of failed authentication attempts. It features an optioanal [tarpit](https://en.wikipedia.org/wiki/Tarpit_%28networking%29), i.e. waiting some time before returning an "authentication failed" response. Configuration ============= ``` {.lua} modules_enabled = { -- your other modules "limit_auth"; } limit_auth_period = 30 -- over 30 seconds limit_auth_max = 5 -- tolerate no more than 5 failed attempts -- Will only work with Prosody trunk: limit_auth_tarpit_delay = 10 -- delay answer this long ``` Compatibility ============= Requires 0.9 or later. The tarpit feature requires Prosody trunk.