Date: Tue, 06 May 2008 21:16:19 -0700 From: Norbert Papke <fbsd-ml@scrapper.ca> To: freebsd-questions@freebsd.org Subject: Re: [SSHd] Increasing wait time? Message-ID: <200805062116.19999.fbsd-ml@scrapper.ca> In-Reply-To: <q7412457qoumm8v8dbth10fug2ctbrlfp0@4ax.com> References: <q7412457qoumm8v8dbth10fug2ctbrlfp0@4ax.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On May 6, 2008, Gilles wrote: > Is there a way to configure SSHd, so that the wait time between login > attempts increases after X failed tries? I run sshd via inetd rather than as a stand-alone daemon. inetd provides optional rate limiting functionality. For instance. putting ssh stream tcp nowait/20/4/10 root /usr/sbin/sshd sshd -i into /etc/inetd.conf set a limit of * 20 overall ssh connections * 4 connection attempts per minute * at most 10 connections from a single IP This works very well on a personal server, not sure how it scales up. Cheers, -- Norbert.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200805062116.19999.fbsd-ml>