Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 10 Nov 2015 12:11:09 +0100
From:      =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= <des@des.no>
To:        Willem Jan Withagen <wjw@digiware.nl>
Cc:        freebsd-security@freebsd.org,  freebsd-current@freebsd.org
Subject:   Re: OpenSSH HPN
Message-ID:  <86611a9kj6.fsf@desk.des.no>
In-Reply-To: <5641D00E.501@digiware.nl> (Willem Jan Withagen's message of "Tue, 10 Nov 2015 12:07:58 %2B0100")
References:  <86io5a9ome.fsf@desk.des.no> <5641BFC4.7050208@digiware.nl> <86a8qm9l9b.fsf@desk.des.no> <5641D00E.501@digiware.nl>

next in thread | previous in thread | raw e-mail | index | archive | help
Willem Jan Withagen <wjw@digiware.nl> writes:
> Digging in my logfiles .... , and its things like:
>  sshd[84942]: Disconnecting: Too many authentication failures [preauth]
>
> So errors/warnings without IP-nr.
>
> And I think I fixed it on one server to also write:
> error: maximum authentication attempts exceeded for root from
> 173.254.203.88 port 1042 ssh2 [preauth]

fail2ban should catch both of these since sshd will print a message for
each failed authentication attempt before it prints a message about
reaching the limit.

> Are they still willing to accept changes to the old version that is
> currently in base?

No, why would they do that?

DES
--=20
Dag-Erling Sm=C3=B8rgrav - des@des.no



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?86611a9kj6.fsf>