David, Is it possible to cause the client to wait by the server issuing a SLEEP? What if the client just disconnectes and immeadiately reconnects? Say you use a sleep of 2 seconds. If your server can accept 100 connections at once then 1 client can issue 100 login attempts and wait 2 seconds for the result and then do it all again. I don't think there is a way out of this problem. I would be interested in other answers. Regards, Andy.
David Garamond wrote: > > Is there an option for mysqld to add a sleep() call after each failed > connection request, before reporting to the client (to slow down brute > force attack)? I glanced at the manual and there doesn't seem to be one. > > If there isn't, would it be a good idea? If yes, I could probably submit > a patch. This feature should be trivial to implement, I think. > > -- > dave > > -- > MySQL General Mailing List > For list archives: http://lists.mysql.com/mysql > To unsubscribe: http://lists.mysql.com/[EMAIL PROTECTED] -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe: http://lists.mysql.com/[EMAIL PROTECTED]
