5566faf0b48f0b77b0134f34130bdc7842c844eb |
|
20-Feb-2010 |
Timo Sirainen <tss@iki.fi> |
auth/anvil: Penalty is no longer increased if the same user+pass combination was recently used.
This should avoid penalty increasing for IPs where a user's misconfigured
client tries to keep authenticating with wrong user/pass. This check works
only for plaintext authentication.
Currently the code that keeps track of what user/passwords have been tried
is pretty simple, and hardcoded to remember max. 10 of them.
--HG--
branch : HEAD |