From 8035da6f1968a0a4f6f3d49ddc9a8d6bdb8585de Mon Sep 17 00:00:00 2001 From: Matthias Lucas Jaros Date: Wed, 1 Jul 2026 12:16:24 +0200 Subject: Updated penalties. Especially bots are annoying me and my logs lately --- src/ssh.conf | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) (limited to 'src') diff --git a/src/ssh.conf b/src/ssh.conf index eff0985..cb8d0cd 100644 --- a/src/ssh.conf +++ b/src/ssh.conf @@ -39,7 +39,12 @@ MaxAuthTries 3 # penalties # we are quite harsh here because bots usually annoy for multiple # days with many requests, so let them accumulate it up to a day -PerSourcePenalties max:1d crash:1d grace-exceeded:30s noauth:10s authfail:10s +# crash: someone trying to break ssh +# invaliduser: likely a bot +# grace-exceeded: also a bot +# noauth: can be a scanner +# authfail: might be user in case of wrong configuration +PerSourcePenalties max:1d crash:1d invaliduser:60s grace-exceeded:30s noauth:10s authfail:10s # Point keys to shared data dir to avoid regenerating them each time HostKey /var/ssh/etc/ssh/ssh_host_rsa_key -- cgit v1.3.1