2

I am designing security policies for databases.

Is there any way to limit the number of login attempts to protect DB from brute-force attacks? For example, user have to wait for 2 minutes after 3 falure of loging.

Is there any way to set a timeout for connnection sessions? For example, kill connection session while there is no interaction for 20 minutes.

I hadn't found them by searching MongoDB documents and search engine. Please show me if anyone knows.

Improve this question
5
  • My recommendation would be to have a look at fail2ban (www.fail2ban.org) - it works great!
    – digijay
    Apr 15, 2020 at 11:48
  • @digijay If MongoDB doesn't provide configurations for these, I have to create one on the outside.
    – LiBook
    Apr 16, 2020 at 3:31
  • And you'd have the benefit of being able to secure your other services, too (e.g. ssh or web apps that require a log-in).
    – digijay
    Apr 16, 2020 at 6:11
  • @digijay Yes, you are right.
    – LiBook
    Apr 16, 2020 at 8:51
  • But I can't help you with the session timeout …
    – digijay
    Apr 16, 2020 at 10:55

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Browse other questions tagged or ask your own question.