comparison MoinMoin/config/multiconfig.py @ 6050:274a7f675261

auth surge protection: do not activate this in builtin default config the admin has to enable it by defining surge_action_limits in the wiki config
author Thomas Waldmann <tw AT waldmann-edv DOT de>
date Fri, 06 Jun 2014 17:11:32 +0200
parents ee7209311a0e
children 5fb9d0f4af89
comparison
equal deleted inserted replaced
6049:a9567770da68 6050:274a7f675261
856 'rss_rc': (1, 60), 856 'rss_rc': (1, 60),
857 # The following actions are often used for images - to avoid pages with lots of images 857 # The following actions are often used for images - to avoid pages with lots of images
858 # (like photo galleries) triggering surge protection, we assign rather high limits: 858 # (like photo galleries) triggering surge protection, we assign rather high limits:
859 'AttachFile': (300, 30), 859 'AttachFile': (300, 30),
860 'cache': (600, 30), # cache action is very cheap/efficient 860 'cache': (600, 30), # cache action is very cheap/efficient
861 # special stuff to prevent someone trying lots of usernames / passwords to log in: 861 # special stuff to prevent someone trying lots of usernames / passwords to log in.
862 'auth-ip': (10, 3600), # same remote ip (any name) 862 # we keep this commented / disabled so that this feature does not get activated by default
863 'auth-name': (10, 3600), # same name (any remote ip) 863 # (if somebody does not override surge_action_limits with own values):
864 #'auth-ip': (10, 3600), # same remote ip (any name)
865 #'auth-name': (10, 3600), # same name (any remote ip)
864 }, 866 },
865 "Surge protection tries to deny clients causing too much load/traffic, see HelpOnConfiguration/SurgeProtection."), 867 "Surge protection tries to deny clients causing too much load/traffic, see HelpOnConfiguration/SurgeProtection."),
866 ('surge_lockout_time', 3600, "time [s] someone gets locked out when ignoring the warnings"), 868 ('surge_lockout_time', 3600, "time [s] someone gets locked out when ignoring the warnings"),
867 869
868 ('textchas', None, 870 ('textchas', None,