- dtucker@cvs.openbsd.org 2013/02/06 00:20:42
     [servconf.c sshd_config sshd_config.5]
     Change default of MaxStartups to 10:30:100 to start doing random early
     drop at 10 connections up to 100 connections.  This will make it harder
     to DoS as CPUs have come a long way since the original value was set
     back in 2000.  Prompted by nion at debian org, ok markus@
4 files changed
tree: 54ea8f178b181dc6c45afa02f3bfd6d17afa4263
  1. contrib/
  2. openbsd-compat/
  3. regress/
  4. scard/
  5. .cvsignore
  6. aclocal.m4
  7. addrmatch.c
  8. atomicio.c
  9. atomicio.h
  10. audit-bsm.c
  11. audit-linux.c
  12. audit.c
  13. audit.h
  14. auth-bsdauth.c
  15. auth-chall.c
  16. auth-krb5.c
  17. auth-options.c
  18. auth-options.h
  19. auth-pam.c
  20. auth-pam.h
  21. auth-passwd.c
  22. auth-rh-rsa.c
  23. auth-rhosts.c
  24. auth-rsa.c
  25. auth-shadow.c
  26. auth-sia.c
  27. auth-sia.h
  28. auth-skey.c
  29. auth.c
  30. auth.h
  31. auth1.c
  32. auth2-chall.c
  33. auth2-gss.c
  34. auth2-hostbased.c
  35. auth2-jpake.c
  36. auth2-kbdint.c
  37. auth2-none.c
  38. auth2-passwd.c
  39. auth2-pubkey.c
  40. auth2.c
  41. authfd.c
  42. authfd.h
  43. authfile.c
  44. authfile.h
  45. bufaux.c
  46. bufbn.c
  47. bufec.c
  48. buffer.c
  49. buffer.h
  50. buildpkg.sh.in
  51. canohost.c
  52. canohost.h
  53. ChangeLog
  54. channels.c
  55. channels.h
  56. cipher-3des1.c
  57. cipher-aes.c
  58. cipher-bf1.c
  59. cipher-ctr.c
  60. cipher.c
  61. cipher.h
  62. cleanup.c
  63. clientloop.c
  64. clientloop.h
  65. compat.c
  66. compat.h
  67. compress.c
  68. compress.h
  69. config.guess
  70. config.sub
  71. configure.ac
  72. crc32.c
  73. crc32.h
  74. CREDITS
  75. deattack.c
  76. deattack.h
  77. defines.h
  78. dh.c
  79. dh.h
  80. dispatch.c
  81. dispatch.h
  82. dns.c
  83. dns.h
  84. entropy.c
  85. entropy.h
  86. fatal.c
  87. fixpaths
  88. fixprogs
  89. groupaccess.c
  90. groupaccess.h
  91. gss-genr.c
  92. gss-serv-krb5.c
  93. gss-serv.c
  94. hostfile.c
  95. hostfile.h
  96. includes.h
  97. INSTALL
  98. install-sh
  99. jpake.c
  100. jpake.h
  101. kex.c
  102. kex.h
  103. kexdh.c
  104. kexdhc.c
  105. kexdhs.c
  106. kexecdh.c
  107. kexecdhc.c
  108. kexecdhs.c
  109. kexgex.c
  110. kexgexc.c
  111. kexgexs.c
  112. key.c
  113. key.h
  114. krl.c
  115. krl.h
  116. LICENCE
  117. log.c
  118. log.h
  119. loginrec.c
  120. loginrec.h
  121. logintest.c
  122. mac.c
  123. mac.h
  124. Makefile.in
  125. match.c
  126. match.h
  127. md-sha256.c
  128. md5crypt.c
  129. md5crypt.h
  130. mdoc2man.awk
  131. misc.c
  132. misc.h
  133. mkinstalldirs
  134. moduli
  135. moduli.5
  136. moduli.c
  137. monitor.c
  138. monitor.h
  139. monitor_fdpass.c
  140. monitor_fdpass.h
  141. monitor_mm.c
  142. monitor_mm.h
  143. monitor_wrap.c
  144. monitor_wrap.h
  145. msg.c
  146. msg.h
  147. mux.c
  148. myproposal.h
  149. nchan.c
  150. nchan.ms
  151. nchan2.ms
  152. openssh.xml.in
  153. opensshd.init.in
  154. OVERVIEW
  155. packet.c
  156. packet.h
  157. pathnames.h
  158. pkcs11.h
  159. platform.c
  160. platform.h
  161. progressmeter.c
  162. progressmeter.h
  163. PROTOCOL
  164. PROTOCOL.agent
  165. PROTOCOL.certkeys
  166. PROTOCOL.krl
  167. PROTOCOL.mux
  168. readconf.c
  169. readconf.h
  170. README
  171. README.dns
  172. README.platform
  173. README.privsep
  174. README.tun
  175. readpass.c
  176. rijndael.c
  177. rijndael.h
  178. roaming.h
  179. roaming_client.c
  180. roaming_common.c
  181. roaming_dummy.c
  182. roaming_serv.c
  183. rsa.c
  184. rsa.h
  185. sandbox-darwin.c
  186. sandbox-null.c
  187. sandbox-rlimit.c
  188. sandbox-seccomp-filter.c
  189. sandbox-systrace.c
  190. schnorr.c
  191. schnorr.h
  192. scp.1
  193. scp.c
  194. servconf.c
  195. servconf.h
  196. serverloop.c
  197. serverloop.h
  198. session.c
  199. session.h
  200. sftp-client.c
  201. sftp-client.h
  202. sftp-common.c
  203. sftp-common.h
  204. sftp-glob.c
  205. sftp-server-main.c
  206. sftp-server.8
  207. sftp-server.c
  208. sftp.1
  209. sftp.c
  210. sftp.h
  211. ssh-add.1
  212. ssh-add.c
  213. ssh-agent.1
  214. ssh-agent.c
  215. ssh-dss.c
  216. ssh-ecdsa.c
  217. ssh-gss.h
  218. ssh-keygen.1
  219. ssh-keygen.c
  220. ssh-keyscan.1
  221. ssh-keyscan.c
  222. ssh-keysign.8
  223. ssh-keysign.c
  224. ssh-pkcs11-client.c
  225. ssh-pkcs11-helper.8
  226. ssh-pkcs11-helper.c
  227. ssh-pkcs11.c
  228. ssh-pkcs11.h
  229. ssh-rsa.c
  230. ssh-sandbox.h
  231. ssh.1
  232. ssh.c
  233. ssh.h
  234. ssh1.h
  235. ssh2.h
  236. ssh_config
  237. ssh_config.5
  238. sshconnect.c
  239. sshconnect.h
  240. sshconnect1.c
  241. sshconnect2.c
  242. sshd.8
  243. sshd.c
  244. sshd_config
  245. sshd_config.5
  246. sshlogin.c
  247. sshlogin.h
  248. sshpty.c
  249. sshpty.h
  250. sshtty.c
  251. survey.sh.in
  252. TODO
  253. ttymodes.c
  254. ttymodes.h
  255. uidswap.c
  256. uidswap.h
  257. umac.c
  258. umac.h
  259. uuencode.c
  260. uuencode.h
  261. version.h
  262. xmalloc.c
  263. xmalloc.h