On 7/14/25 7:16 AM, Ralf Hildebrandt via Mailman-Users wrote:
* Mark Sapiro <[email protected]>:

SUBSCRIBE_FORM_MIN_TIME = seconds(number)

What's a good value? 5?


It's difficult to say. I've thought 5 was good, but I've seen a recent attack where a bot would GET the form and wait 15 seconds before posting. If you set it too high, it impacts legitimate subscribes, so if you are experiencing this kind of attack, you need to look at the web server logs to determine how long the bot is waiting and set it a bit above that.


--
Mark Sapiro <[email protected]>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan
------------------------------------------------------
Mailman-Users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/[email protected]/
   https://mail.python.org/archives/list/[email protected]/
Member address: [email protected]

Reply via email to