diff options
| author | Damien Miller <djm@mindrot.org> | 2013-02-12 01:02:08 +0100 |
|---|---|---|
| committer | Damien Miller <djm@mindrot.org> | 2013-02-12 01:02:08 +0100 |
| commit | 1f583df8c3a7a3731a18b17e14c9ec09f31905ba (patch) | |
| tree | 54ea8f178b181dc6c45afa02f3bfd6d17afa4263 /servconf.c | |
| parent | - djm@cvs.openbsd.org 2013/01/27 10:06:12 (diff) | |
| download | openssh-1f583df8c3a7a3731a18b17e14c9ec09f31905ba.tar.xz openssh-1f583df8c3a7a3731a18b17e14c9ec09f31905ba.zip | |
- dtucker@cvs.openbsd.org 2013/02/06 00:20:42
[servconf.c sshd_config sshd_config.5]
Change default of MaxStartups to 10:30:100 to start doing random early
drop at 10 connections up to 100 connections. This will make it harder
to DoS as CPUs have come a long way since the original value was set
back in 2000. Prompted by nion at debian org, ok markus@
Diffstat (limited to 'servconf.c')
| -rw-r--r-- | servconf.c | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/servconf.c b/servconf.c index 21b371c84..b2a60fd6c 100644 --- a/servconf.c +++ b/servconf.c @@ -1,5 +1,5 @@ -/* $OpenBSD: servconf.c,v 1.233 2012/12/02 20:46:11 djm Exp $ */ +/* $OpenBSD: servconf.c,v 1.234 2013/02/06 00:20:42 dtucker Exp $ */ /* * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland * All rights reserved @@ -256,11 +256,11 @@ fill_default_server_options(ServerOptions *options) if (options->gateway_ports == -1) options->gateway_ports = 0; if (options->max_startups == -1) - options->max_startups = 10; + options->max_startups = 100; if (options->max_startups_rate == -1) - options->max_startups_rate = 100; /* 100% */ + options->max_startups_rate = 30; /* 30% */ if (options->max_startups_begin == -1) - options->max_startups_begin = options->max_startups; + options->max_startups_begin = 10; if (options->max_authtries == -1) options->max_authtries = DEFAULT_AUTH_FAIL_MAX; if (options->max_sessions == -1) |