Re: [galaxy-dev] security: brute force login

2016-01-04 Thread Martin Čech
Amogelang: Needless to say that you probably want to protect on your webserver side (nginx is expected in the example by Dannon) as opposed to the Galaxy application side. If you are really serious about this you should probably ask in a different place than here e.g. at

Re: [galaxy-dev] security: brute force login

2016-01-04 Thread Dannon Baker
Hi Amogelang, I'd recommend using a general purpose tool like fail2ban for this. Here's a quick getting started guide that might help if you're using nginx: https://www.digitalocean.com/community/tutorials/how-to-protect-an-nginx-server-with-fail2ban-on-ubuntu-14-04 -Dannon On Mon, Jan 4, 2016

Re: [galaxy-dev] security: brute force login

2016-01-04 Thread Eric Rasche
If you're using apache, mod_evasive is quite popular for this purpose. On 01/04/2016 01:27 PM, Martin Čech wrote: > Amogelang: > > Needless to say that you probably want to protect on your webserver > side (nginx is expected in the example by Dannon) as opposed to the > Galaxy application side. >