commit b6aa4f4ad40cae925256b5ae351f0696d8aaa8af parent 59f2a9dacabc007227caf40dbb299b3ec9497840 Author: Matthias Jaros <jaros@mailbox.org> Date: Wed, 1 Jul 2026 12:16:24 +0200 Updated penalties. Especially bots are annoying me and my logs lately Diffstat:
| M | src/ssh.conf | | | 7 | ++++++- |
1 file changed, 6 insertions(+), 1 deletion(-)
diff --git a/src/ssh.conf b/src/ssh.conf @@ -39,7 +39,12 @@ MaxAuthTries 3 # penalties # we are quite harsh here because bots usually annoy for multiple # days with many requests, so let them accumulate it up to a day -PerSourcePenalties max:1d crash:1d grace-exceeded:30s noauth:10s authfail:10s +# crash: someone trying to break ssh +# invaliduser: likely a bot +# grace-exceeded: also a bot +# noauth: can be a scanner +# authfail: might be user in case of wrong configuration +PerSourcePenalties max:1d crash:1d invaliduser:60s grace-exceeded:30s noauth:10s authfail:10s # Point keys to shared data dir to avoid regenerating them each time HostKey /var/ssh/etc/ssh/ssh_host_rsa_key