Ban on hammering (filezilla server)

[anonymous]

people who try try to login to quick after each other
should be bant for a while (make an option of it). So
when someone is doing a dictionary attack or so will
fail. :)

[anonymous]

Logged In: NO

Also...
1) for a failed login, wait some time (eg 15 seconds) before

sending a fail message. Perhaps even provide an option to
increase that delay progressively for successive failures.

2) lock-out an account for 'M' minutes after 'N' failed logins.
3) For multiple simultaneous connects from a host, only

allow one connection to be in the login state at any one

time.

This will hardly affect legitimate connects (eg through a
proxy), but brute-force attacks will take too long to be
effective.

[Eirik]

More a feature request than a support request - moved.

[stefpet]

Would really like to see this implemented. I see brute-force
dictionary hacking atempts quite frequently in my log-files.

[Tim Kosse]

Implemented in 0.9.2, trying to log in too often will slow
down the client significantly. Dictionary/brute force
attacks are no longer a viable solution to attack the server.