Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 06 May 2008 21:16:19 -0700
From:      Norbert Papke <fbsd-ml@scrapper.ca>
To:        freebsd-questions@freebsd.org
Subject:   Re: [SSHd] Increasing wait time?
Message-ID:  <200805062116.19999.fbsd-ml@scrapper.ca>
In-Reply-To: <q7412457qoumm8v8dbth10fug2ctbrlfp0@4ax.com>
References:  <q7412457qoumm8v8dbth10fug2ctbrlfp0@4ax.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On May 6, 2008, Gilles wrote:
> Is there a way to configure SSHd, so that the wait time between login
> attempts increases after X failed tries?

I run sshd via inetd rather than as a stand-alone daemon.  inetd provides 
optional rate limiting functionality.  For instance. putting

   ssh stream  tcp  nowait/20/4/10  root  /usr/sbin/sshd  sshd -i

into /etc/inetd.conf set a limit of

* 20 overall ssh connections
* 4 connection attempts per minute
* at most 10 connections from a single IP

This works very well on a personal server, not sure how it scales up.

Cheers,

-- Norbert.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200805062116.19999.fbsd-ml>