search

pivasoftware / easycwmp

EasyCwmp:
http://www.easycwmp.org/
GNU General Public License v2.0
73 stars 59 forks source link

Log when authorization of acs failed #25

Closed okraits closed 8 years ago

okraits commented 8 years ago

If authorization fails because of invalid credentials, this should appear in the log. Otherwise brute-force attacks can happen unnoticed.

pivasoftware commented 8 years ago

Thank you for your suggestion!

Could you please change the message "authorization of acs failed\n" by the following message: "Connection Request authorization failed\n"

pivasoftware commented 8 years ago

By the way, According to the standard , you have to protect your CPE agianst the massive Connection requests. You can add a rule in your firewall to have a limit connection request in a given interval. For example you can limit your system to 30 Connection request / 1min

okraits commented 8 years ago

Sure, i'll create a new pull request. Thank you for the advice!