michalmuskala / michalmuskala/plug_attack
Using fail2ban for failed login attempts only
Nobody has claimed this yet.
- Dominant language
- Elixir
- Stars
- 455
- Forks
- 23
- PR merge metrics
- No merged PRs in 30d
Description
I have read over the source and a couple of example articles about how to use this library, but I think my use case may fall a bit outside of those examples. I would like to use it to apply fail2ban to usernames and IPs, but only for failed login attempts. This means that the check and track actions would need to happen in separate locations.
I believe I could write my own rule module that allows me to track and check separately, but I figured I would ask in case there's a more straightforward approach.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing the source and example articles referenced in the issue, then trace how the library's rule modules handle checking and tracking. Done means determining and documenting whether failed-login-only handling for usernames and IPs is supported, or defining the required feature if it is not.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- elixir
- Domain
- backend, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100