[Req] Two-Factor Authentication + Recaptcha For VestaCP
Posted: Tue Sep 11, 2018 8:05 pm
Well it's been a long time since people are using VestaCP more and more but when we search on internet people are afraid to use it sometimes just because lack of security on control panel login. I know we can use VestaCP fail2ban and ngx_http_limit_req_module to secure some stuff but that is not the proper solution for brute-forcing because if someone is attacking my server they might be using tons of proxies and when ngx_http_limit_req_module hits the limits mentioned in configurations users will start seeing 503 Error but what is server operator is away for a while or is on vacations? using ngx_http_limit_req_module and fail2ban will be a temporary solution and need someone to monitor the server and keep changing the limit in config file so websites can stay up all the time. Well i hope you guys will understand there are many possibilities. I am also not saying that Two-Factor or Captcha is the final solution to stop these attacks but at least it makes it much more harder for hackers/attackers to get in to admin panel.
I have seen feature adding submissions on bug reporting system but they have been left dead and never heard of these solution to be coming out. This is 2018 and We are still waiting for one of the best free vps control panel creators to add these both in vestacp so we can recommend this to others even if they have any concern about security they do not get a chance to deny the respect for this control panel.
I have seen feature adding submissions on bug reporting system but they have been left dead and never heard of these solution to be coming out. This is 2018 and We are still waiting for one of the best free vps control panel creators to add these both in vestacp so we can recommend this to others even if they have any concern about security they do not get a chance to deny the respect for this control panel.