Re: protect from brute force attacks on login

2009-02-09 Thread Russell Keith-Magee
On Mon, Feb 9, 2009 at 6:21 PM, Markos Gogoulos wrote: > Hi all, > > I'm using django-registration to handle logins, registrations etc. It is > very handy and easy to set up, but allows unlimited login attempts, and thus > people can brute-force any django-application! > > So far I've been using

protect from brute force attacks on login

2009-02-09 Thread Markos Gogoulos
Hi all, I'm using django-registration to handle logins, registrations etc. It is very handy and easy to set up, but allows unlimited login attempts, and thus people can brute-force any django-application! So far I've been using fail2ban to ban users that brute force passwords. I would be interest