Re: pf: brute-force ssh defence no longer working in OpenBSD 6.8

2021-01-10 Thread Steve Fairhead
I'd said: >> Checking the pf log, it's definitely the final (pass quick) rule which is letting them in. And yes, dumping the table does indeed show the IP address(es) in question. So the block doesn't appear to be doing anything. Am I being a dumbass? Have I missed some subtle change in pf b

Re: pf: brute-force ssh defence no longer working in OpenBSD 6.8

2021-01-10 Thread Peter Nicolai Mathias Hansteen
> 10. jan. 2021 kl. 14:47 skrev Steve Fairhead : > > Hi folks, > > I hope I'm just missing something stupid. It's been a while since I deployed > public OpenBSD servers, but I've done plenty. I always use a defence in > pf.conf against brute-force SSH attacks, which has served me well in the

pf: brute-force ssh defence no longer working in OpenBSD 6.8

2021-01-10 Thread Steve Fairhead
Hi folks, I hope I'm just missing something stupid. It's been a while since I deployed public OpenBSD servers, but I've done plenty. I always use a defence in pf.conf against brute-force SSH attacks, which has served me well in the past. On a new machine running 6.8, this no longer appears t