Evaluate use of PerSource*
options for sshd
#3856
Labels
secure-dev
Issues specific to SSDF/SLSA compliance work
PerSource*
options for sshd
#3856
A series of
PerSource
directives was introduced in OpenSSH 9.8 for blocking repeated connection attempts. We should evaluate these options and set them up on our machines to attempt to mitigate denial-of-service attempts on our machines where a suitable version is available.Ref: https://www.openssh.com/txt/release-9.8 and the details in https://man.openbsd.org/sshd_config (That openbsd page is linked from the official openssh site)
The text was updated successfully, but these errors were encountered: