On 2017-04-09 00:38, Cédric Krier wrote:
> Hi,
> 
> The Tryton server receives very often brute force attack on ssh. To
> limit the effectiveness of such attack, I have setup a rule that prevent
> one IP address to make more then 5 new connections on 120 seconds.
> This means that if you do an 'hg npull' over ssh, you will be banned for
> 120 seconds. To avoid such case you must create first a master
> connection using: 'ssh -M -N hg.tryton.org'

Another way is to add the option 'ControlMaster auto' for hg.tryton.org
host in you ssh_config [1].

[1] http://man.openbsd.org/ssh_config#ControlMaster
-- 
Cédric Krier - B2CK SPRL
Email/Jabber: cedric.kr...@b2ck.com
Tel: +32 472 54 46 59
Website: http://www.b2ck.com/

-- 
You received this message because you are subscribed to the Google Groups 
"tryton-dev" group.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/tryton-dev/20170414071611.GE36251%40tetsuo.

Reply via email to