![](https://seccdn.libravatar.org/avatar/e6bc4b5458f9686f6bb7cf02bdd6e1da.jpg?s=120&d=mm&r=g)
Is it possible to limit the number of login attempts allowed with authnz_external in apache2 i.e. after 3rd failed attempt to deny currently it just pops up forever, which of course leaves it easily accessible by brute force attacks. Current .htaccess file: <IfModule !authnz_external_module> Require all denied </IfModule> <IfModule authnz_external_module> <IfModule !authz_unixgroup_module> Require all denied </IfModule> </IfModule> <IfModule authnz_external_module> <IfModule authz_unixgroup_module> AuthType Basic AuthName "Login" AuthBasicProvider external AuthExternal pwauth GroupExternal unixgroup <RequireAll> Require valid-user Require unix-group users </RequireAll> </IfModule> </IfModule> -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org