Apply rate limiting to login pages/portals
Open
- Dominant language
- No language data
- Stars
- 10
- Forks
- 5
- PR merge metrics
- No merged PRs in 30d
Description
>Draft CIS Benchmark 1.1.9
## Description
Login pages should be rate limited to increase resiliency against brute force attempts. This is configured via the following parameters: limit\_req limit\_req\_zone Can further be combined with either the default 'limit\_req' and 'limit\_req\_zone' configurations, or have additional (further limited) values for these login portals
## Rationale
Limits the rate of attack on forms that provide system logon capabilities
## Remediation
None provided
## Audit
None provided
Contributor guide
Assessment
This issue has not been assessed yet.