diff options
| -rw-r--r-- | src/ssh.conf | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/src/ssh.conf b/src/ssh.conf index eff0985..cb8d0cd 100644 --- a/src/ssh.conf +++ b/src/ssh.conf @@ -39,7 +39,12 @@ MaxAuthTries 3 # penalties # we are quite harsh here because bots usually annoy for multiple # days with many requests, so let them accumulate it up to a day -PerSourcePenalties max:1d crash:1d grace-exceeded:30s noauth:10s authfail:10s +# crash: someone trying to break ssh +# invaliduser: likely a bot +# grace-exceeded: also a bot +# noauth: can be a scanner +# authfail: might be user in case of wrong configuration +PerSourcePenalties max:1d crash:1d invaliduser:60s grace-exceeded:30s noauth:10s authfail:10s # Point keys to shared data dir to avoid regenerating them each time HostKey /var/ssh/etc/ssh/ssh_host_rsa_key |