mariposacoop/mess — Issue #339: Actions to take if the wrong IS4C secret is used repeatedly
Author: tmmagee
Created: 2011-10-11 17:53:26+00:00
State: open

I have noticed that if a machine attempts to access MESS using the wrong IS4C secret repeatedly, MESS simply sends back a message that the wrong IS4C secret is being used.

I have some suggestions for other actions MESS might want to take:

1) For security reasons, after a certain number of failed attempts MESS might want to block the IP address that is attempting to access MESS

2) Similarly, after a certain number of attempts I think the IP address should be logged and perhaps an email should be sent to an administrator to notify them of the issue. Right now if a lane has the wrong IS4C secret the problem is not discovered until a cashier notices that the lane is not being properly updated.