I am designing security policies for databases.

Is there any way to limit the number of login attempts to protect DB from brute-force attacks? For example, user have to wait for 2 minutes after 3 falure of loging.

Is there any way to set a timeout for connnection sessions? For example, kill connection session while there is no interaction for 20 minutes.

I hadn't found them by searching MongoDB documents and search engine. Please show me if anyone knows.

  • My recommendation would be to have a look at fail2ban (www.fail2ban.org) - it works great! – digijay Apr 15 at 11:48
  • @digijay If MongoDB doesn't provide configurations for these, I have to create one on the outside. – LiBook Apr 16 at 3:31
  • And you'd have the benefit of being able to secure your other services, too (e.g. ssh or web apps that require a log-in). – digijay Apr 16 at 6:11
  • @digijay Yes, you are right. – LiBook Apr 16 at 8:51
  • But I can't help you with the session timeout … – digijay Apr 16 at 10:55

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.