---

summary: Throttle authentication attempts with optional tarpit

...

Introduction

============

This module lets you put a per-IP limit on the number of failed

authentication attempts.

It features an optioanal

[tarpit](https://en.wikipedia.org/wiki/Tarpit_%28networking%29), i.e.

waiting some time before returning an "authentication failed" response.

Configuration

=============

``` {.lua}

modules_enabled = {

  -- your other modules

  "limit_auth";

}

limit_auth_period = 30 -- over 30 seconds

limit_auth_max = 5 -- tolerate no more than 5 failed attempts

 -- Will only work with Prosody trunk:

limit_auth_tarpit_delay = 10 -- delay answer this long

```

Compatibility

=============

Requires 0.9 or later. The tarpit feature requires Prosody trunk.