Vulnerability Development mailing list archives

authentProtect v0.8 is out


From: "Bob at firstcodings" <bob () firstcodings com>
Date: Wed, 13 Mar 2002 15:20:02 +0100


 Hi members,

AuthentProtect is a small ISAPI filter that denies IIS authentication based
on given usernames. It is (for now !) mainly intended to block brute force
attack against users for which NTFS permissions cannot be revoked (mainly
administrators).

For those who are interested in, the v 0.8 of authentProtect filter is out.
URL : http://bob.firstcodings.com/programs/authentprotect/

Here is the changelog :

v0.8 beta : 2002/03/12
--> minor bug fixes
--> source code licence is now LGPL
--> logins are now limited to 256 characters (was 20 for v0.7)
--> config file : filter priority is now customizable
--> config file : filter can process SSL and/or non-SSL request
--> buffer for denied logins has grown to 64 Ko
--> separator has changed since the dollar sign '$' is a valid character in
NT user names



Have a nice day.

Bob - firstcodings.


Current thread: