diff options
| author | Damien Miller <djm@cvs.openbsd.org> | 2024-06-06 20:20:43 +0000 |
|---|---|---|
| committer | Damien Miller <djm@cvs.openbsd.org> | 2024-06-06 20:20:43 +0000 |
| commit | a8afca2e0a620e19e80cde00d6588dbfa3b2e5be (patch) | |
| tree | ead6b3d7261784c0bf0e1ba0c6d4981f4937a8af /usr.bin/ssh | |
| parent | b7bdfc4f4b1a0400c479cf16cf0059b3aa8159a6 (diff) | |
mention that PerSourcePenalties don't affect concurrent in-progress
connections.
Diffstat (limited to 'usr.bin/ssh')
| -rw-r--r-- | usr.bin/ssh/sshd_config.5 | 7 |
1 files changed, 4 insertions, 3 deletions
diff --git a/usr.bin/ssh/sshd_config.5 b/usr.bin/ssh/sshd_config.5 index 430de76071a..7c1cb57012d 100644 --- a/usr.bin/ssh/sshd_config.5 +++ b/usr.bin/ssh/sshd_config.5 @@ -33,7 +33,7 @@ .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" -.\" $OpenBSD: sshd_config.5,v 1.356 2024/06/06 17:15:25 djm Exp $ +.\" $OpenBSD: sshd_config.5,v 1.357 2024/06/06 20:20:42 djm Exp $ .Dd $Mdocdate: June 6 2024 $ .Dt SSHD_CONFIG 5 .Os @@ -1565,8 +1565,9 @@ If a penalty is enforced against a client then its source address and any others in the .Cm PerSourceNetBlockSize will be refused connection for a period. -Multiple penalties from the same source from concurrent connections will -accumulate up to a maximum. +A penalty doesn't affect concurrent connections in progress, but multiple +penalties from the same source from concurrent connections will accumulate +up to a maximum. Conversely, penalties are not applied until a minimum threshold time has been accumulated. Penalties are off by default but may be enabled using default settings using the |