Re: [Sshguard-users] protecting a server with password authentication disabled

[Kevin Z. <kev...@gm...>]

On 04/19/2016 19:18, Henri Shustak wrote:
>> What version of SSHGuard are you using?
> 
> SSHGuard version : 1.6.1 : OK, not the latest but it is fairly recent
> right?

Oops, this is embarassing. This issue was fixed right after the 1.6.3
release. So it hasn't been released yet.

> Note : This is SSHGuard was installed via brew on a Mac OS X system.
> I have confirmed that if password authentication enabled and you do
> not connect with a key and instead try to use a password, then it
> SSHGuard works great!
> 
>> What pre-auth disconnect message showed up in the logs?
> 
> Connection closed by 123.255.41.127 [preauth]

The development version in Git recognizes this attack. Next release is
planned for early May, but in the meantime I can provide a patch against
1.6.3.

Best,
Kevin

-- 
Kevin Zheng
kev...@gm... | ke...@be... | PGP: 0xC22E1090