From owner-freebsd-questions@FreeBSD.ORG Tue Apr 5 18:25:17 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id EF35716A4CE for ; Tue, 5 Apr 2005 18:25:17 +0000 (GMT) Received: from mail24.sea5.speakeasy.net (mail24.sea5.speakeasy.net [69.17.117.26]) by mx1.FreeBSD.org (Postfix) with ESMTP id A6F4143D60 for ; Tue, 5 Apr 2005 18:25:17 +0000 (GMT) (envelope-from freebsd-questions-local@be-well.ilk.org) Received: (qmail 32179 invoked from network); 5 Apr 2005 18:25:17 -0000 Received: from dsl092-078-145.bos1.dsl.speakeasy.net (HELO be-well.ilk.org) ([66.92.78.145]) (envelope-sender ) by mail24.sea5.speakeasy.net (qmail-ldap-1.03) with SMTP for ; 5 Apr 2005 18:25:17 -0000 Received: by be-well.ilk.org (Postfix, from userid 1147) id 3B9232F; Tue, 5 Apr 2005 14:25:16 -0400 (EDT) Sender: lowell@be-well.ilk.org To: Alex Kapranoff References: <20050405122317.GA22484@capella.park.rambler.ru> From: Lowell Gilbert Date: 05 Apr 2005 14:25:16 -0400 In-Reply-To: <20050405122317.GA22484@capella.park.rambler.ru> Message-ID: <44fyy5w06r.fsf@be-well.ilk.org> Lines: 12 User-Agent: Gnus/5.09 (Gnus v5.9.0) Emacs/21.3 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii cc: questions@freebsd.org Subject: Re: Is sshd limiting the rate of successful connections? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Apr 2005 18:25:18 -0000 Alex Kapranoff writes: > It seems that a recent 5-STABLE limits the rate of successful incoming > logins. Is it true? We failed to find the relevant code neither in > openssh nor in openpam. The symptoms are that after a big number of > quick successful logins sshd starts to delay or block login attempts > for as long as 10 seconds. Does someone know anyhting about such > behaviour or is this some obscure configuration problem (read: pilot > error)? You might be hitting the "MaxStartups" limit, but that only applies to connections that haven't yet authenticated.