Redlion G3 web server security

[stuman]

Is there a way to force a minimum time between login attempts on a redlion g3, specifically the web server and remote access?

I would like to minimise the potential for a password attack/brute force attack, to crack the security on my application.

Any other suggestions are more than welcome.

Thanks
Stu

 

[Joe_WaZoo]

I don't know the answer to that question, but I have seen customer's logs that have tallied hours of hacker automated attemps to get in only to be denied.

Joe_WaZoo

 

[MikeGranby]

Is there a way to force a minimum time between login attempts on a redlion g3, specifically the web server and remote access?

Nope. Not a bad idea, though. What sort of delay are you looking for? A short one or one that increases with each attempt could be added without any need for configuration; a longer fixed one would need to be optional.

 

[504bloke]

Nope. Not a bad idea, though. What sort of delay are you looking for? A short one or one that increases with each attempt could be added without any need for configuration; a longer fixed one would need to be optional.

An adjustabe one ? Tag related ?

 

[stuman]

Nope. Not a bad idea, though. What sort of delay are you looking for? A short one or one that increases with each attempt could be added without any need for configuration; a longer fixed one would need to be optional.

Say a 5 second delay that increases with each unsuccessful login attempt. When you say without the need for a configuration, do you mean that this functionalty could be included in the next release of Crimson2? because that would be fantastic!!

Thanks
Stu

 

[MikeGranby]

I need to think through the DoS implications, but that ought to be do-able...

 

[Mike Dyble]

Would this change also apply to DSP, we have ours on a 'closed' network at the moment, but as we develop the application and add more we may end up having them connected to our existing network infrastructure, in which case security will be an issue, and I would like something similar.

 

[MikeGranby]

The DSP and the G3 have the same codebase, so, yes, it would apply.