On Wed, 2002-02-20 at 04:19, Mihai RUSU wrote: > On 19 Feb 2002, Florin Andrei wrote: > > > Intirzierea cu care raspunde in caz de insucces nu e suficienta? Daca o > > Exact.
hehe > foloseau ei pop/imap pentru asta: pentru ca courier-imap-ul face pauza de > 5 secunde dupa un auth wrong so bye bye brute force attack. ProFTPD-ul in > schimb raspunde ASAP .... Nu prea am avut timp ieri ca faceam pauza, cred > ca ma ocup azi de asta :) Poate imi amintesc gresit, dar intirzierea aia nu e data din PAM? Parca asa tin minte cind am umblat ultima oara prin sshd, ca de fapt PAM raspunde cu intirziere. Asadar, daca folosesti PAM s-ar putea sa obtii chestia asta by default. Daca nu folosesti PAM, atunci trebuie s-o faci tu. -- Florin Andrei "The smart way to keep people passive and obedient is to strictly limit the spectrum of acceptable opinion, but allow very lively debate within that spectrum." - Noam Chomsky --- Send e-mail to '[EMAIL PROTECTED]' with 'unsubscribe rlug' to unsubscribe from this list.
