Re: shutting down dictionary attacks

From: Josh Grosse (josh_at_jggimi.homeip.net)
Date: 07/05/05

  • Next message: Josh Grosse: "Re: shutting down dictionary attacks" 
    Date: Tue, 5 Jul 2005 08:48:45 -0400
To: secureshell@securityfocus.com

    On Tue, Jul 05, 2005 at 02:56:25AM -0000, LD wrote:
    > The only problem with setting the max to 1 is that if you're running an
    > SSH key agent, your SSH program may attempt key authentication. Each key
    > in the ring counts as 1 authentication try, so this could possibly cut you
    > off if you use keys. Just a warning ;) Easily fixed.

    Thanks for the warning.

    I am running with key authentication (RSA), but not with forwarding agents --
    only X11 is tunnelled. So MaxAuthTries 1 works fine with OpenSSH or Putty
    clients.

  • Next message: Josh Grosse: "Re: shutting down dictionary attacks"