Welcome to ProjeQtOr new Forum. We migrated old forum to the new website.
You will find all your posts here, with your usual account.
Just one point : you’ll have to reinitialize your password. Use “Lost password” feature.
Hi,
ProjeQtor beeing a web application that some of us expose to the internet. I recently got my admin account locked probably du to many wrong supplied passwords. I suggest to add some sort of "Challenge" on the login page like captcha to prevent accounts beeing locked.
Some captcha will be very anoying for most users.
Enter a captcha for every connection is not desired. Some users connect several times a day... (and we do connect dozains of times a day...)
I would advide you to protect your server with fail2ban for instance, and set limit lower than limit in projector.
This way, a hacher you be banned (his IP is banned) after (for instance) 3 attempts, while ProjeQtOr account will be locked only after 5 attempts.
So youi'll have 2 attempts to connect and reset projeqtor wrong connection count...
Thank you @babynus. I will have to figure-out how to prevent fail2ban to block the ip address of my reverse proxy ssl which projeqtor is behind it. Butn that sound good until I figure out how to do saml authentication against lemonldap-ng, which will solve all the this problems and also the problems of several/tnes/hundreds connections a day.
If you have a reverse prowy, it his his duty to block DDOS attacks
🙂 correct. Mine is just a ssl termination one, no packets mangling, no firewalling, no WAF.