Re: [Sshguard-users] Risk of DoS attacks?

[Mij <mi...@ss...>]

> I am wondering about the potential of DoS attacks on sshguard protected
> servers. For example, if an attacker is sitting behind a NAT gateway, an
> attack would block everybody behind that gateway, wouldn't it?

If Mallory sits behind a NAT that Alice uses, then Alice will be blocked too.

This is unavoidable, and this makes sense: the NAT provider is responsible
for all of users behind it.

Unless Mallory keeps attacking, SSHGuard's touchiness guarantees that early
and sparse attacks will affect the address(es) for very limited time.
Repeated attacks will last more, but the network operator is expected to become
aware of that by then.


> P.S.: Thanks to the sshguard team for making sshguard available!

cheers
michele