[ 
https://issues.apache.org/jira/browse/FTPSERVER-99?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Niklas Gustavsson closed FTPSERVER-99.
--------------------------------------

    Resolution: Fixed

Implemented and set to a default of 500 ms. 

commit -m "Adding a setting to disconnect a user after a certain amount of 
failure login attempts (FTPSERVER-94). Also added a configurable delay after a 
failed login to make brute force attacks harder (FTPSERVER-99)." 
C:/home/niklas/workspaces/apache/ftpserver/ftplet-api/src/java/org/apache/ftpserver/ftplet/FtpSession.java
 
C:/home/niklas/workspaces/apache/ftpserver/core/src/java/org/apache/ftpserver/command/PASS.java
 
C:/home/niklas/workspaces/apache/ftpserver/core/src/java/org/apache/ftpserver/ftplet/IsolatingFtpSession.java
 
C:/home/niklas/workspaces/apache/ftpserver/core/src/java/org/apache/ftpserver/FtpSessionImpl.java
 
C:/home/niklas/workspaces/apache/ftpserver/core/src/java/org/apache/ftpserver/listener/ConnectionManager.java
 
C:/home/niklas/workspaces/apache/ftpserver/core/src/java/org/apache/ftpserver/listener/ConnectionManagerImpl.java
 
C:/home/niklas/workspaces/apache/ftpserver/distribution/res/conf/ftpd.properties
 C:/home/niklas/workspaces/apache/ftpserver/distribution/res/conf/ftpd.xml
    Sending        
C:/home/niklas/workspaces/apache/ftpserver/core/src/java/org/apache/ftpserver/command/PASS.java
    Sending        
C:/home/niklas/workspaces/apache/ftpserver/core/src/java/org/apache/ftpserver/ftplet/IsolatingFtpSession.java
    Sending        
C:/home/niklas/workspaces/apache/ftpserver/core/src/java/org/apache/ftpserver/FtpSessionImpl.java
    Sending        
C:/home/niklas/workspaces/apache/ftpserver/core/src/java/org/apache/ftpserver/listener/ConnectionManager.java
    Sending        
C:/home/niklas/workspaces/apache/ftpserver/core/src/java/org/apache/ftpserver/listener/ConnectionManagerImpl.java
    Sending        
C:/home/niklas/workspaces/apache/ftpserver/distribution/res/conf/ftpd.properties
    Sending        
C:/home/niklas/workspaces/apache/ftpserver/distribution/res/conf/ftpd.xml
    Sending        
C:/home/niklas/workspaces/apache/ftpserver/ftplet-api/src/java/org/apache/ftpserver/ftplet/FtpSession.java
    Transmitting file data ...
    Committed revision 550034.

> Configurable delay after a failed login attempt
> -----------------------------------------------
>
>                 Key: FTPSERVER-99
>                 URL: https://issues.apache.org/jira/browse/FTPSERVER-99
>             Project: FtpServer
>          Issue Type: Improvement
>    Affects Versions: 1.0-M1
>            Reporter: Niklas Gustavsson
>            Assignee: Niklas Gustavsson
>             Fix For: 1.0-M2
>
>
> After a failed login attempt, the server should delay the session for a short 
> while to make brute force attacks harder. 

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to