mod_register_limits
This module enforces limits on account creation, such as rate limits and restrictions to certain sets of IP addresses.
Details
This functionality was previously part of mod_register where it only applied to in-band registration, but now it applies to registration via methods provided by 3rd-party modules such as web forms.
Configuration
| Option | Default | Notes |
|---|---|---|
| registration_blacklist | { } | List of IP addresses to deny registration |
| registration_whitelist | { } | List of IP addresses to allow registration (bypassing all throttling and limits) |
| whitelist_registration_only | false | Whether to only allow IPs in registration_whitelist to register |
| min_seconds_between_registrations | nil | The number of seconds a client at a particular IP address must wait before it can register another account |
| registration_throttle_max | nil | Defaults to 1 if min_seconds_between_registrations is set, otherwise unset. |
| registration_throttle_period | nil | Defaults to the same value as min_seconds_between_registrations. |
| registration_throttle_cache_size | 100 | How many IP addresses to keep track of for throttling. |
| blacklist_on_registration_throttle_overload | false | Determines behavior if the above cache overflows. If true and the IP is still over the limit, add it to the registration blacklist. |
Example
modules_enabled = {
"register";
"register_limits";
}
registration_whitelist = { "127.0.0.1", "::1" }
registration_blacklist = { "192.0.2.0" }
min_seconds_between_registrations = 60