{"action":"created","issue":{"url":"https://api.github.com/repos/mail-in-a-box/mailinabox/issues/478","labels_url":"https://api.github.com/repos/mail-in-a-box/mailinabox/issues/478/labels{/name}","comments_url":"https://api.github.com/repos/mail-in-a-box/mailinabox/issues/478/comments","events_url":"https://api.github.com/repos/mail-in-a-box/mailinabox/issues/478/events","html_url":"https://github.com/mail-in-a-box/mailinabox/pull/478","id":92671564,"number":478,"title":"Added more bantime and lowered max retry attempts","user":{"login":"kri3v","id":9116460,"avatar_url":"https://avatars.githubusercontent.com/u/9116460?v=3","gravatar_id":"","url":"https://api.github.com/users/kri3v","html_url":"https://github.com/kri3v","followers_url":"https://api.github.com/users/kri3v/followers","following_url":"https://api.github.com/users/kri3v/following{/other_user}","gists_url":"https://api.github.com/users/kri3v/gists{/gist_id}","starred_url":"https://api.github.com/users/kri3v/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kri3v/subscriptions","organizations_url":"https://api.github.com/users/kri3v/orgs","repos_url":"https://api.github.com/users/kri3v/repos","events_url":"https://api.github.com/users/kri3v/events{/privacy}","received_events_url":"https://api.github.com/users/kri3v/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":12,"created_at":"2015-07-02T15:56:20Z","updated_at":"2015-09-05T13:26:30Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/mail-in-a-box/mailinabox/pulls/478","html_url":"https://github.com/mail-in-a-box/mailinabox/pull/478","diff_url":"https://github.com/mail-in-a-box/mailinabox/pull/478.diff","patch_url":"https://github.com/mail-in-a-box/mailinabox/pull/478.patch"},"body":"Ban time was too low for preventing ssh brute force attacks, this change also allows to keep the auth.log more clean and avoid wasting cpu and i/o on this. \r\n\r\nBots eventually will flag your IP as secure and move along."},"comment":{"url":"https://api.github.com/repos/mail-in-a-box/mailinabox/issues/comments/137955864","html_url":"https://github.com/mail-in-a-box/mailinabox/pull/478#issuecomment-137955864","issue_url":"https://api.github.com/repos/mail-in-a-box/mailinabox/issues/478","id":137955864,"user":{"login":"JoshData","id":445875,"avatar_url":"https://avatars.githubusercontent.com/u/445875?v=3","gravatar_id":"","url":"https://api.github.com/users/JoshData","html_url":"https://github.com/JoshData","followers_url":"https://api.github.com/users/JoshData/followers","following_url":"https://api.github.com/users/JoshData/following{/other_user}","gists_url":"https://api.github.com/users/JoshData/gists{/gist_id}","starred_url":"https://api.github.com/users/JoshData/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/JoshData/subscriptions","organizations_url":"https://api.github.com/users/JoshData/orgs","repos_url":"https://api.github.com/users/JoshData/repos","events_url":"https://api.github.com/users/JoshData/events{/privacy}","received_events_url":"https://api.github.com/users/JoshData/received_events","type":"User","site_admin":false},"created_at":"2015-09-05T13:26:30Z","updated_at":"2015-09-05T13:26:30Z","body":"Oh I was just looking at this PR which was written when there were defaults there. Gotcha. So we have:\r\n\r\n... | currently | with this PR | when PR was written\r\n--- | ----------- | --------------- | --------------\r\nfailed logins | 6 | 7 | 20\r\nwithin | 10 min | 2 minutes | 30 seconds\r\nbanned for | 10 min | 1 hour | 10 minutes\r\n\r\nSo with this PR, we're allowing one more failed login attempt but tightening the window that it must occur in from 10 minutes to 2 minutes. Then we ban longer (10 minutes to 1 hour).\r\n\r\nI'm going to merge this because it sounds fine, although at this point the original intention of the PR isn't quite captured by the change since the defaults have shifted."}}