DX_Auth -> Login Attempt Tracking

[eluser]workshed[/eluser]
Hi-

We have a web app using dx_auth to manage the authentication. Currently, it's set up to track login attempts and after three unsuccessful tries, it displays a CAPTCHA. The issue we're seeing is, most of our app's users are behind a firewall and under NAT. As such, they are all seen as coming from the same IP. So when one person fails three logins, suddenly everyone behind the firewall gets the CAPTCHA.

I looked through the code and forums and didn't see anything addressing this situation. Has anyone else run into this? Any suggestions? I can see why the login attempts are banned by IP, but am wondering if there any easy way to remedy this.

Thanks!

-Bret

[eluser]ElToro[/eluser]
Calculation IP is not so efficient as some botnet could get around that easily.
Why not try to change it so that it tries to counts how many time certain username has failed login?