9pfs/solanum-vs-hackint-and-charybdis
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge pull request #222 from Xenthys/release/4+sasl

Browse source 
SASL: rate-limit after the 2nd failed attempt (m_sasl.c)
This commit is contained in:
Aaron Jones 2016-10-02 09:50:57 +00:00 committed by GitHub
commit c4a51af37c
1 changed files with 6 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
modules/m_sasl.c
View file

@ -250,8 +250,12 @@ me_sasl(struct MsgBuf *msgbuf_p, struct Client *client_p, struct Client *source_
{ {
if(*target_p->name) if(*target_p->name)
{ {
target_p->localClient->sasl_failures++; /* Allow 2 tries before rate-limiting as some clients try EXTERNAL
target_p->localClient->sasl_next_retry = rb_current_time() + (1 << MIN(target_p->localClient->sasl_failures + 5, 13)); * then PLAIN right after it if the auth failed, causing the client to be
* rate-limited immediately and not being able to login with SASL.
*/
if (target_p->localClient->sasl_failures++ > 0)
target_p->localClient->sasl_next_retry = rb_current_time() + (1 << MIN(target_p->localClient->sasl_failures + 5, 13));
} }
else if(throttle_add((struct sockaddr*)&target_p->localClient->ip)) else if(throttle_add((struct sockaddr*)&target_p->localClient->ip))
{ {