(v13.0.9763.34157 started 2026-09-24 17:08:42 on VM2)
Measures against "Distributed Denial of Service (DDoS)" and hacking
Life time of Cross Site Request Forgery (CSRF) token.: - System-wide setting defined by the keyword TCSRF:tcsrf - tcsrf is the life time in minutes, to specify seconds: tcsrf must end with "s", e.g. TCSRF:30s - If the keyword TCSRF is not specified, the life time is 360 minutes. - If tcsrf is less than 5 seconds, no CSRF tokens will be used. - Note: -- CSRF tokens are inserted into commands and web forms to mitigate CSRF attacks. -- The actual and the previous token are accepted.
Renegotiation DoS Vulnerability (CVE-2011-1473, CVE-2011-5094): - Use TLS 1.3 (keyword TLS:TSL13) whenever possible
Define the maximum time allowed to start a TLS session. - System-wide setting defined by the keyword TTLS:ttls
Define the maximum time allowed for logon dialogues (OTP, TOTP, Fido2, OAuth 2.0, RADUIS etc.): - System-wide setting defined by the keyword TLGI:tlgi
Define the maximum idle time of a session: - Defined by the keyword TTL:ttl
Limit the maximum number of sessions allowed: - System-wide setting defined by the keyword MAXS:maxsessions - The default value of maxsessions is 500.
Limit the maximum number of sessions per source address: - System-wide setting defined by the keyword MAXSRC:maxsessions - The default value of maxsessions is 0, means no limit. - See the "Sessions per Source Address" via menu item "Status"
Limit the maximum number of new TCP sessions per minute: - System-wide setting defined by the keyword MAXTSM:maxsessions - The default value of maxsessions is 0, means no limit.
Lockout policy for failed authentications (OTP, TOTP, FIDO2 and RADIUS): - System-wide setting defined by the keyword LOUT:threshold!observation!duration
Block source addresses that caused protocol errors at specific routing entries: - Defined by the keyword SPAM:block ... valid for routing entries with -- keyword SMTP -- GatewayIP2 reverselogon -- GatewayIP2 web - See the "Spam Logfile" and the "Active Spam List" via menu item "Logfiles"
