sshlockout(8) will now lock out based on number of attempts, just so that you don’t have huge logs of stubborn but stupid SSH brute force attacks.
A running description of activity related to DragonFly BSD.
A running description of activity related to DragonFly BSD.
sshlockout(8) will now lock out based on number of attempts, just so that you don’t have huge logs of stubborn but stupid SSH brute force attacks.
pass in on $net_if inet proto tcp from to $ext_addr port ssh synproxy state ( max 2, source-track rule, max-src-nodes 2, max-src-conn 2, max-src-conn-rate 2/600 )
Interesting conversation over that HN about how FreeBSD releases software and how it’s broken
https://news.ycombinator.com/item?id=14853466
Writer by the founder of rsync.net. A huge FreeBSD shop.