Password protection + Monitoring solution? - GoFuckYourself.com

the indigo · 04-06-2004, 04:17 PM

Since the search option doesn't work...

Does anyone knows an All Around Solution for Password Protection and Download Monitoring/Threshold like Pennywize BUT server-side?

Pennywize detects half the subnets and is slow on attacks... I need something like Password Sentry with a Download Monitoring feature.

thx

PxG · 04-06-2004, 04:27 PM

try www.proxypass.com

TheSaint · 04-06-2004, 04:38 PM

I've said this before but the best solution is to do nothing, usually.

I get 2-3 attacks a day sometimes of up to a million password attempts. As long as you enforce random passwords they all fail.

Its actually cheaper in cpu and I/O cycles for most sites to do nothing. The products that try to block proxy attacks usually use more bandwith than just ignoring the problem, and they introduce the real possibility of blocking a legitimate customer.

Volantt · 04-06-2004, 04:46 PM

Raptor uses an Apache Module to force a dynamic login instead of the basic username/password pairing. All the bandwidth and username logging is handled server side. Hit me up on ICQ, I will give you more details.

http://www.raptorprotection.com/demo

ICQ: 2393986

V

the indigo · 04-06-2004, 06:24 PM

Quote:

Originally posted by PxG
try www.proxypass.com

proxypass is not 100% server side and needs to give more details (how much bandwitdh each account used, etc.)

the indigo · 04-06-2004, 06:26 PM

Quote:

Originally posted by TheSaint
I've said this before but the best solution is to do nothing, usually.

I get 2-3 attacks a day sometimes of up to a million password attempts. As long as you enforce random passwords they all fail.

Its actually cheaper in cpu and I/O cycles for most sites to do nothing. The products that try to block proxy attacks usually use more bandwith than just ignoring the problem, and they introduce the real possibility of blocking a legitimate customer.

You are right on enforcing random passwords... problem right currently is that we already have many members with simple passwords.

icedemon · 04-06-2004, 06:51 PM

I've always like iProtect.
http://www.digital-concepts.net/cgi-iprotect.html

04-06-2004, 04:17 PM	#1
the indigo Confirmed User Industry Role: Join Date: Sep 2001 Location: North America Posts: 2,016	Password protection + Monitoring solution? Since the search option doesn't work... Does anyone knows an All Around Solution for Password Protection and Download Monitoring/Threshold like Pennywize BUT server-side? Pennywize detects half the subnets and is slow on attacks... I need something like Password Sentry with a Download Monitoring feature. thx

04-06-2004, 04:38 PM	#3
TheSaint Confirmed User Join Date: Jun 2003 Location: Everywhere at once Posts: 991	I've said this before but the best solution is to do nothing, usually. I get 2-3 attacks a day sometimes of up to a million password attempts. As long as you enforce random passwords they all fail. Its actually cheaper in cpu and I/O cycles for most sites to do nothing. The products that try to block proxy attacks usually use more bandwith than just ignoring the problem, and they introduce the real possibility of blocking a legitimate customer. __________________ I have no signature

04-06-2004, 04:46 PM	#4
Volantt Confirmed User Join Date: Nov 2003 Location: Penguin vs Devil Posts: 745	Raptor uses an Apache Module to force a dynamic login instead of the basic username/password pairing. All the bandwidth and username logging is handled server side. Hit me up on ICQ, I will give you more details. http://www.raptorprotection.com/demo ICQ: 2393986 V __________________ "Only the dead have seen the end of war." - Plato "In the abscence of orders, go find something and kill it." - Erwin Rommel "A man's worth is no greater then the worth of his ambitions." - Marcus Aurelius

04-06-2004, 06:51 PM	#7
icedemon Confirmed User Join Date: Jun 2003 Location: Lutz, FL Posts: 1,022	I've always like iProtect. http://www.digital-concepts.net/cgi-iprotect.html __________________ Clips4Sale.com

04-06-2004, 04:27 PM	#2
PxG Confirmed User Join Date: Feb 2002 Posts: 105	try www.proxypass.com