SSH: Difference between revisions
added info on PerSourcePenalties |
|||
| Line 55: | Line 55: | ||
|name=|lang=}} | |name=|lang=}} | ||
In addition to these settings, consider enabling [[#Fail2Ban|Fail2Ban]] as a recommended baseline for security. | In addition to these settings, consider enabling [[#Fail2Ban|Fail2Ban]] as a recommended baseline for security. Alternatively, you can make use of '''PerSourcePenalties''' introduced with OpenSSH 9.8<ref>https://text.tchncs.de/senioradmin/are-you-still-banning-or-do-you-already-penalize</ref>: | ||
{{file|/etc/nixos/configuration.nix|nix| | |||
<nowiki> | |||
services.openssh = { | |||
[...] | |||
extraConfig = "MaxAuthTries 3 \n PerSourcePenalties crash:3600s authfail:3600s max:86400s"; | |||
}; | |||
</nowiki> | |||
|name=|lang=}} | |||
= SSH client configuration = | = SSH client configuration = | ||