Vulnerability Development mailing list archives
authentProtect v0.8 is out
From: "Bob at firstcodings" <bob () firstcodings com>
Date: Wed, 13 Mar 2002 15:20:02 +0100
Hi members, AuthentProtect is a small ISAPI filter that denies IIS authentication based on given usernames. It is (for now !) mainly intended to block brute force attack against users for which NTFS permissions cannot be revoked (mainly administrators). For those who are interested in, the v 0.8 of authentProtect filter is out. URL : http://bob.firstcodings.com/programs/authentprotect/ Here is the changelog : v0.8 beta : 2002/03/12 --> minor bug fixes --> source code licence is now LGPL --> logins are now limited to 256 characters (was 20 for v0.7) --> config file : filter priority is now customizable --> config file : filter can process SSL and/or non-SSL request --> buffer for denied logins has grown to 64 Ko --> separator has changed since the dollar sign '$' is a valid character in NT user names Have a nice day. Bob - firstcodings.
Current thread:
- authentProtect v0.8 is out Bob at firstcodings (Mar 13)