in reply to Re: Re: Password hacker killer
in thread Password hacker killer

Yes, thanks for pointing that out. It would therefore be logical to block the IP instead of the user for the same time period, or better yet block the combination of user/IP.

--
Allolex

Replies are listed 'Best First'.
Re: Re: Re: Re: Password hacker killer
by waswas-fng (Curate) on Sep 08, 2003 at 18:48 UTC
    this does not work, most of the automated cracking tools will use huge proxy lists to change the source IP of the attack after X attempts. You chase your own tail by limiting the user/ip block.

    -Waswas
[reply]

In Section Seekers of Perl Wisdom