Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 6 May 2008 23:53:57 +0200
From:      cpghost <cpghost@cordula.ws>
To:        Gilles <gilles.ganault@free.fr>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: [SSHd] Increasing wait time?
Message-ID:  <20080506235357.0616fd9c@epia-2.farid-hajji.net>
In-Reply-To: <q7412457qoumm8v8dbth10fug2ctbrlfp0@4ax.com>
References:  <q7412457qoumm8v8dbth10fug2ctbrlfp0@4ax.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 06 May 2008 19:11:45 +0200
Gilles <gilles.ganault@free.fr> wrote:

> Is there a way to configure SSHd, so that the wait time between login
> attempts increases after X failed tries?

It shouldn't be too hard to patch

  /usr/src/crypto/openssh/sshd.c:server_accept_loop()

by adding code for per-IP truncated binary exponential backoff
algorithm just before forking a child once a connection is
accept(2)ed. It's strange that it hasn't already been done,
being such an obvious and useful addition. ;)

> Thank you.

-- 
Cordula's Web. http://www.cordula.ws/



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20080506235357.0616fd9c>