Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Rate limiting on root #1599

Closed
cpswan opened this issue Oct 9, 2023 · 0 comments · Fixed by #1616
Closed

Rate limiting on root #1599

cpswan opened this issue Oct 9, 2023 · 0 comments · Fixed by #1616
Assignees
@gkc
Labels
enhancement New feature or request

Comments

@cpswan
Copy link
Member

cpswan commented Oct 9, 2023 •
edited
Loading

Is your feature request related to a problem? Please describe.

Pen test item 4.4.2 identified that the atDirectory can be enumerated

Describe the solution you'd like

Initially:

  1. Drop connection on an invalid atSign query

Down the line:

  1. Rate limit clients that make repeated invalid connections
  2. Tarpit clients that continue
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@gkc gkc

Labels
enhancement New feature or request
Projects
None yet
Milestone
No milestone
2 participants
@gkc @cpswan