From owner-freebsd-questions@FreeBSD.ORG Thu May 8 10:53:18 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E3375106566C for ; Thu, 8 May 2008 10:53:18 +0000 (UTC) (envelope-from juliushuang@gmail.com) Received: from rv-out-0506.google.com (rv-out-0506.google.com [209.85.198.228]) by mx1.freebsd.org (Postfix) with ESMTP id B1FCF8FC1D for ; Thu, 8 May 2008 10:53:18 +0000 (UTC) (envelope-from juliushuang@gmail.com) Received: by rv-out-0506.google.com with SMTP id b25so1218624rvf.43 for ; Thu, 08 May 2008 03:53:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:in-reply-to:references:mime-version:x-gpgmail-state:content-type:message-id:content-transfer-encoding:from:subject:date:to:x-mailer; bh=3I2caT0RPvP9AYbm5sxJsBWKwvdS4nM+Wg/oJgMVTqc=; b=hKfa8bS3CLScIuL3Zsan9c4fc5dxevODbnhTMD5X0y+Ovri2wBqVhUKualKYzQdAOQASnvIyU4eUlTe9D5OLtDn+m0X5RysZugS8oId3kgUh/FX788xniN5qK1nl/CXtZiFKnxFGxFUAss/IxoA5SCnb9o1kdUJ89didAXxuRO8= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=in-reply-to:references:mime-version:x-gpgmail-state:content-type:message-id:content-transfer-encoding:from:subject:date:to:x-mailer; b=AhyjpmkGE6rNpOl5FcgH/mZAFogQq74NpGPZKXbOh5X4/M1D2wWWAkh21OGpUpSzzF6NVgids6CV6BYjilEcR0Kf4cjn6R12Pb73mdg1pvQxtGr67/sBgPKEgwpMepNefYNqp7UuZTl20mR+eQMFUGCNeahEzMYfbgpP7Le+xsw= Received: by 10.140.171.18 with SMTP id t18mr1467284rve.22.1210243998278; Thu, 08 May 2008 03:53:18 -0700 (PDT) Received: from ?59.124.104.176? ( [59.124.104.176]) by mx.google.com with ESMTPS id g31sm4343966rvb.2.2008.05.08.03.53.16 (version=SSLv3 cipher=RC4-MD5); Thu, 08 May 2008 03:53:17 -0700 (PDT) In-Reply-To: References: Mime-Version: 1.0 (Apple Message framework v753) X-Gpgmail-State: !signed Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Message-Id: Content-Transfer-Encoding: 7bit From: Julius Huang Date: Thu, 8 May 2008 18:53:16 +0800 To: freebsd-questions@freebsd.org X-Mailer: Apple Mail (2.753) Subject: Re: [SSHd] Increasing wait time? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 May 2008 10:53:19 -0000 Hi, On May 7, 2008, at 01:11 , Gilles wrote: > Hello > > I'm a bit tired of people trying to break into SSH: > > May 6 16:59:23 freebsd sshd[24649]: Invalid user agatha from > 195.43.9.246 > May 6 16:59:26 freebsd sshd[24651]: Invalid user cristie from > 195.43.9.246 > May 6 16:59:29 freebsd sshd[24653]: Invalid user number from > 195.43.9.246 > May 6 16:59:31 freebsd sshd[24655]: Invalid user chamber from > 195.43.9.246 > etc. > > Is there a way to configure SSHd, so that the wait time between login > attempts increases after X failed tries? > Is portknocking + firewall considered? There are ways to implement it, some are not complicated. J. > Thank you. > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions- > unsubscribe@freebsd.org"