Re: [galaxy-dev] security: brute force login

2016-01-04 Thread Eric Rasche
If you're using apache, mod_evasive is quite popular for this purpose. On 01/04/2016 01:27 PM, Martin Čech wrote: > Amogelang: > > Needless to say that you probably want to protect on your webserver > side (nginx is expected in the example by Dannon) as opposed to the > Galaxy application side. >

Re: [galaxy-dev] security: brute force login

2016-01-04 Thread Martin Čech
Amogelang: Needless to say that you probably want to protect on your webserver side (nginx is expected in the example by Dannon) as opposed to the Galaxy application side. If you are really serious about this you should probably ask in a different place than here e.g. at http://security.stackexch

Re: [galaxy-dev] security: brute force login

2016-01-04 Thread Dannon Baker
Hi Amogelang, I'd recommend using a general purpose tool like fail2ban for this. Here's a quick getting started guide that might help if you're using nginx: https://www.digitalocean.com/community/tutorials/how-to-protect-an-nginx-server-with-fail2ban-on-ubuntu-14-04 -Dannon On Mon, Jan 4, 2016

[galaxy-dev] security: brute force login

2016-01-04 Thread Raphenya, Amogelang
Hi All, How can I prevent brute force login attack on the login page? ___ Please keep all replies on the list by using "reply all" in your mail client. To manage your subscriptions to this and other Galaxy lists, please u