diff options
| author | Damien Miller <djm@mindrot.org> | 2013-02-12 11:02:08 +1100 |
|---|---|---|
| committer | Damien Miller <djm@mindrot.org> | 2013-02-12 11:02:08 +1100 |
| commit | 1f583df8c3a7a3731a18b17e14c9ec09f31905ba (patch) | |
| tree | 54ea8f178b181dc6c45afa02f3bfd6d17afa4263 /sshd_config | |
| parent | 0cd2f8e5f8276e178d696f3495ca2a9a691dccf5 (diff) | |
- dtucker@cvs.openbsd.org 2013/02/06 00:20:42
[servconf.c sshd_config sshd_config.5]
Change default of MaxStartups to 10:30:100 to start doing random early
drop at 10 connections up to 100 connections. This will make it harder
to DoS as CPUs have come a long way since the original value was set
back in 2000. Prompted by nion at debian org, ok markus@
Diffstat (limited to 'sshd_config')
| -rw-r--r-- | sshd_config | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/sshd_config b/sshd_config index 3d35bef02..9cd2fddce 100644 --- a/sshd_config +++ b/sshd_config | |||
| @@ -1,4 +1,4 @@ | |||
| 1 | # $OpenBSD: sshd_config,v 1.88 2012/10/30 21:29:55 djm Exp $ | 1 | # $OpenBSD: sshd_config,v 1.89 2013/02/06 00:20:42 dtucker Exp $ |
| 2 | 2 | ||
| 3 | # This is the sshd server system-wide configuration file. See | 3 | # This is the sshd server system-wide configuration file. See |
| 4 | # sshd_config(5) for more information. | 4 | # sshd_config(5) for more information. |
| @@ -109,7 +109,7 @@ UsePrivilegeSeparation sandbox # Default for new installations. | |||
| 109 | #ClientAliveCountMax 3 | 109 | #ClientAliveCountMax 3 |
| 110 | #UseDNS yes | 110 | #UseDNS yes |
| 111 | #PidFile /var/run/sshd.pid | 111 | #PidFile /var/run/sshd.pid |
| 112 | #MaxStartups 10 | 112 | #MaxStartups 10:30:100 |
| 113 | #PermitTunnel no | 113 | #PermitTunnel no |
| 114 | #ChrootDirectory none | 114 | #ChrootDirectory none |
| 115 | #VersionAddendum none | 115 | #VersionAddendum none |