[Operators] Potential distributed attack

[Evgeniy Khramtsov]

On 14.04.2012 01:02, Christian wrote:
> Hi,
>
> to protect me against such mass registrations I did set the number of 
> seconds a client at a particular
> IP address must wait before it can register another account to 300 
> seconds.
>
> This could be a problem with shared IPs. But 5 minutes should be no 
> problem I think.
>

Doesn't work. Registration scripts traverse huge list of servers, so the 
full cycle takes an hour or so to bypass such a restriction.

-- 
Regards,
Evgeniy Khramtsov, ProcessOne.
xmpp:xram at jabber.ru.