lub
/
mailu
1
0
Fork 0
Code Issues Pull Requests Packages Releases Wiki Activity

Make AUTH_RATELIMIT_IP 60/hour as discussed

Browse Source
master
Florent Daigniere 3 years ago
parent cab0ce2017
commit 64bc7972cc
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File

2
core/admin/mailu/configuration.py
Unescape Escape View File

@ -36,7 +36,7 @@ DEFAULT_CONFIG = {
'TLS_FLAVOR': 'cert', 'TLS_FLAVOR': 'cert',
'INBOUND_TLS_ENFORCE': False, 'INBOUND_TLS_ENFORCE': False,
'DEFER_ON_TLS_ERROR': True, 'DEFER_ON_TLS_ERROR': True,
'AUTH_RATELIMIT_IP': '10/hour', 'AUTH_RATELIMIT_IP': '60/hour',
'AUTH_RATELIMIT_IP_V4_MASK': 24, 'AUTH_RATELIMIT_IP_V4_MASK': 24,
'AUTH_RATELIMIT_IP_V6_MASK': 56, 'AUTH_RATELIMIT_IP_V6_MASK': 56,
'AUTH_RATELIMIT_USER': '100/day', 'AUTH_RATELIMIT_USER': '100/day',

2
docs/configuration.rst
Unescape Escape View File

@ -39,7 +39,7 @@ address.
The ``WILDCARD_SENDERS`` setting is a comma delimited list of user email addresses that are allowed to send emails from any existing address (spoofing the sender). The ``WILDCARD_SENDERS`` setting is a comma delimited list of user email addresses that are allowed to send emails from any existing address (spoofing the sender).
The ``AUTH_RATELIMIT_IP`` (default: 10/hour) holds a security setting for fighting The ``AUTH_RATELIMIT_IP`` (default: 60/hour) holds a security setting for fighting
attackers that waste server ressources by trying to guess user passwords (typically attackers that waste server ressources by trying to guess user passwords (typically
using a password spraying attack). The value defines the limit of authentication using a password spraying attack). The value defines the limit of authentication
attempts that will be processed on non-existing accounts for a specific IP subnet attempts that will be processed on non-existing accounts for a specific IP subnet

Write Preview
Loading…
Cancel
Save