preventing bot spamming

[rduToNature]

Hi,

According to the official documentation there should be an ip based bot prevention design, but i just tried to simulate bot attack with puppeteer on the production site and I can sends hundreds of e-mail without being stopped. is the rate limit being set to high or do I have to enable this measure?

[xr0master]

Hi, the limit rate is 1 request per second.

[rduToNature]

Thanks, is there anyway I can change it? Make it something like 5 request per hour per ip.

[xr0master]

Unfortunately, we do not have such a feature yet. We are thinking in the future to add the ability to set up a rate limit for each template, but this will not be done soon.

[hardik-rajpal]

This seems like a core issue with a service whose main purpose is to facilitate client-side requests to trigger emails. The only reason it's not permitted by the usual architecture is the potential DoS attacks.

[xr0master]

This seems like a core issue with a service whose main purpose is to facilitate client-side requests to trigger emails. The only reason it's not permitted by the usual architecture is the potential DoS attacks.

How many times have you been attacked already?

[hardik-rajpal]

I haven't been attacked so far. The only reason I can't use this is because the website I'm designing is for a cybersecurity firm. I can't risk using this for fear of the headlines an attack would make. I love the package otherwise.