Menu

#26 allow smaller THRESHOLD for uploading

open
nobody
None
5
2008-07-15
2008-07-15
Anonymous
No

Please introduce new variable:

UPLOAD_DENY_THRESHOLD

which can be smaller than DENY_THRESHOLD_* values, so central server will allow for detecting cordinated ssh atacks.

So with

UPLOAD_DENY_THRESHOLD=1

even single invalid login will be sent to central database. If central database will recive i.e. X=5 such uploads it will be added for downloading by other peoples which setup theirs DOWNLOAD_THREASHOLD above X.

Discussion

  • Nobody/Anonymous

    Logged In: NO

    Oh, forgot to login, it was me Witold Baryluk, baryluk // smp.if.uj.edu.pl

     
  • Nobody/Anonymous

    Logged In: NO

    Mayby also add UPLOAD_DENY_DELAY or UPLOAD_DENY_REVOKE for delaying or canceling uploading (in second case server will provide big random number which will authenticate this and will be stored locally by denyhosts) which was triggered by this mechanism.

     
  • Nobody/Anonymous

    Logged In: NO

    Revoking will be triggered i.e. when second try will be sucessfull.

     

Log in to post a comment.

MongoDB Logo MongoDB