[FUGSPBR] Configuracao do SSH

[Ahmed Al Suflair]

--- Edison <eds_perdido em yahoo.com.br> wrote:

> Ando verificando que as tentativas de invasao por
> ssh esta aumentando muito,
> tem alguma forma de configurar o ssh para bloquear
> um ip depois de 3
> tentativas sem sucesso? tentei ler os manuais do
> free e nao achei nada
> apenas o LoginGraceTime, alguem pode me ajudar?
> 
Conhece este aqui ?

MaxStartups
             Specifies the maximum number of
concurrent unauthenticated connections to the sshd
daemon.  Additional connections will be dropped until
authentication succeeds or the LoginGraceTimeexpires
for a connection.  The default is 10.
Alternatively, random early drop can be enabled by
specifying the three colon separated values
``start:rate:full'' (e.g., "10:30:60").  sshd will
refuse connection attempts with a probability of
``rate/100'' (30%) if there are currently ``start''
(10) unauthenticated connections.  The probability
increases linearly and all connection attempts are
refused if the number of unauthenticated connections
reaches ``full'' (60).

a linha de exemplo no sshd_config e' esta:

# After 10 unauthenticated connections, refuse 30% of
the new ones, and
# refuse any more than 60 total.
MaxStartups 10:30:60



> Tks
> 
> Edison
> 
> 
>
_______________________________________________________________
> Para enviar um novo email para a lista:
> fugspbr em fugspbr.org
> Sair da Lista: http://lists.fugspbr.org/listinfo.cgi
> Historico:
> http://www4.fugspbr.org/lista/html/FUG-BR/
> 



		
_______________________________
Do you Yahoo!?
Declare Yourself - Register online to vote today!
http://vote.yahoo.com
_______________________________________________________________
Para enviar um novo email para a lista: fugspbr em fugspbr.org
Sair da Lista: http://lists.fugspbr.org/listinfo.cgi
Historico: http://www4.fugspbr.org/lista/html/FUG-BR/