43 lines
1.7 KiB
Diff
43 lines
1.7 KiB
Diff
diff -up openssh-5.8p2/servconf.c.max-startups openssh-5.8p2/servconf.c
|
|
--- openssh-5.8p2/servconf.c.max-startups 2013-02-08 16:54:23.003052391 +0100
|
|
+++ openssh-5.8p2/servconf.c 2013-02-08 16:54:23.021052316 +0100
|
|
@@ -262,11 +262,11 @@ fill_default_server_options(ServerOption
|
|
if (options->gateway_ports == -1)
|
|
options->gateway_ports = 0;
|
|
if (options->max_startups == -1)
|
|
- options->max_startups = 10;
|
|
+ options->max_startups = 100;
|
|
if (options->max_startups_rate == -1)
|
|
- options->max_startups_rate = 100; /* 100% */
|
|
+ options->max_startups_rate = 30; /* 30% */
|
|
if (options->max_startups_begin == -1)
|
|
- options->max_startups_begin = options->max_startups;
|
|
+ options->max_startups_begin = 10;
|
|
if (options->max_authtries == -1)
|
|
options->max_authtries = DEFAULT_AUTH_FAIL_MAX;
|
|
if (options->max_sessions == -1)
|
|
diff -up openssh-5.8p2/sshd_config.5.max-startups openssh-5.8p2/sshd_config.5
|
|
--- openssh-5.8p2/sshd_config.5.max-startups 2013-02-08 16:54:23.004052387 +0100
|
|
+++ openssh-5.8p2/sshd_config.5 2013-02-08 16:54:23.021052316 +0100
|
|
@@ -778,7 +778,7 @@ SSH daemon.
|
|
Additional connections will be dropped until authentication succeeds or the
|
|
.Cm LoginGraceTime
|
|
expires for a connection.
|
|
-The default is 10.
|
|
+The default is 10:30:100.
|
|
.Pp
|
|
Alternatively, random early drop can be enabled by specifying
|
|
the three colon separated values
|
|
diff -up openssh-5.8p2/sshd_config.max-startups openssh-5.8p2/sshd_config
|
|
--- openssh-5.8p2/sshd_config.max-startups 2013-02-08 16:54:23.017052333 +0100
|
|
+++ openssh-5.8p2/sshd_config 2013-02-08 16:54:23.021052316 +0100
|
|
@@ -122,7 +122,7 @@ X11Forwarding yes
|
|
#ShowPatchLevel no
|
|
#UseDNS yes
|
|
#PidFile /var/run/sshd.pid
|
|
-#MaxStartups 10
|
|
+#MaxStartups 10:30:100
|
|
#PermitTunnel no
|
|
#ChrootDirectory none
|
|
|