3 ms·
I'd add setting these too: LoginGraceTime 30 MaxAuthTries 3 Also consider using AllowUsers to govern from where a valid connection can originate if you kn
by jebblue 13y ago
I'd add setting these too:
LoginGraceTime 30
MaxAuthTries 3
Also consider using AllowUsers to govern from where a valid connection can originate if you know that in advance.
- rschmitty 13y agoI change my login grace time to 3 seconds, you either have the key or you don't :) No password entering
- jebblue 13y agoHmm, good point, with keys, 30 is a bit long these days.
- wiml 13y agoNice idea until you're logging in from a slow/overloaded connection, or your ssh host is being flooded with traffic, or has a runaway process that's causing it to thrash, or lots of other reasons you might want to use ssh. I can't think of a scenario where a really short login grace time would protect you from an attacker, either. What's the motivation?