CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2024/09/14 19:18:26
Modified files:
usr.bin/ssh : auth.c servconf.c servconf.h sshd_config.5
Log message:
add a "Match invalid-user" predicate to sshd_config Match options.
This allows writing Match conditions that trigger for invalid username.
E.g.
PerSourcePenalties refuseconnection:90s
Match invalid-user
RefuseConnection yes
Will effectively penalise bots try to guess passwords for bogus accounts,
at the cost of implicitly revealing which accounts are invalid.
feedback markus@
