Am 18.10.23 um 20:37 schrieb Robinson, Herbie:
If one does add such a plugin, it should be in a place where it can delay for an exponentially increasing time (or return a delay time to SSH). You don’t want to just reject the login, because they might keep hammering you.
The patch I proposed just invokes an external program on every failed login attempt detected. I does not implement any policy. And if the offending host is blocked, by modifying firewall rules or similar, there could be no hammering.
_______________________________________________ openssh-unix-dev mailing list openssh-unix-dev@xxxxxxxxxxx https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev
