- dtucker@cvs.openbsd.org 2013/02/06 00:20:42
     [servconf.c sshd_config sshd_config.5]
     Change default of MaxStartups to 10:30:100 to start doing random early
     drop at 10 connections up to 100 connections.  This will make it harder
     to DoS as CPUs have come a long way since the original value was set
     back in 2000.  Prompted by nion at debian org, ok markus@
4 files changed
tree: 54ea8f178b181dc6c45afa02f3bfd6d17afa4263
  1. .cvsignore
  2. CREDITS
  3. ChangeLog
  4. INSTALL
  5. LICENCE
  6. Makefile.in
  7. OVERVIEW
  8. PROTOCOL
  9. PROTOCOL.agent
  10. PROTOCOL.certkeys
  11. PROTOCOL.krl
  12. PROTOCOL.mux
  13. README
  14. README.dns
  15. README.platform
  16. README.privsep
  17. README.tun
  18. TODO
  19. aclocal.m4
  20. addrmatch.c
  21. atomicio.c
  22. atomicio.h
  23. audit-bsm.c
  24. audit-linux.c
  25. audit.c
  26. audit.h
  27. auth-bsdauth.c
  28. auth-chall.c
  29. auth-krb5.c
  30. auth-options.c
  31. auth-options.h
  32. auth-pam.c
  33. auth-pam.h
  34. auth-passwd.c
  35. auth-rh-rsa.c
  36. auth-rhosts.c
  37. auth-rsa.c
  38. auth-shadow.c
  39. auth-sia.c
  40. auth-sia.h
  41. auth-skey.c
  42. auth.c
  43. auth.h
  44. auth1.c
  45. auth2-chall.c
  46. auth2-gss.c
  47. auth2-hostbased.c
  48. auth2-jpake.c
  49. auth2-kbdint.c
  50. auth2-none.c
  51. auth2-passwd.c
  52. auth2-pubkey.c
  53. auth2.c
  54. authfd.c
  55. authfd.h
  56. authfile.c
  57. authfile.h
  58. bufaux.c
  59. bufbn.c
  60. bufec.c
  61. buffer.c
  62. buffer.h
  63. buildpkg.sh.in
  64. canohost.c
  65. canohost.h
  66. channels.c
  67. channels.h
  68. cipher-3des1.c
  69. cipher-aes.c
  70. cipher-bf1.c
  71. cipher-ctr.c
  72. cipher.c
  73. cipher.h
  74. cleanup.c
  75. clientloop.c
  76. clientloop.h
  77. compat.c
  78. compat.h
  79. compress.c
  80. compress.h
  81. config.guess
  82. config.sub
  83. configure.ac
  84. contrib/
  85. crc32.c
  86. crc32.h
  87. deattack.c
  88. deattack.h
  89. defines.h
  90. dh.c
  91. dh.h
  92. dispatch.c
  93. dispatch.h
  94. dns.c
  95. dns.h
  96. entropy.c
  97. entropy.h
  98. fatal.c
  99. fixpaths
  100. fixprogs
  101. groupaccess.c
  102. groupaccess.h
  103. gss-genr.c
  104. gss-serv-krb5.c
  105. gss-serv.c
  106. hostfile.c
  107. hostfile.h
  108. includes.h
  109. install-sh
  110. jpake.c
  111. jpake.h
  112. kex.c
  113. kex.h
  114. kexdh.c
  115. kexdhc.c
  116. kexdhs.c
  117. kexecdh.c
  118. kexecdhc.c
  119. kexecdhs.c
  120. kexgex.c
  121. kexgexc.c
  122. kexgexs.c
  123. key.c
  124. key.h
  125. krl.c
  126. krl.h
  127. log.c
  128. log.h
  129. loginrec.c
  130. loginrec.h
  131. logintest.c
  132. mac.c
  133. mac.h
  134. match.c
  135. match.h
  136. md-sha256.c
  137. md5crypt.c
  138. md5crypt.h
  139. mdoc2man.awk
  140. misc.c
  141. misc.h
  142. mkinstalldirs
  143. moduli
  144. moduli.5
  145. moduli.c
  146. monitor.c
  147. monitor.h
  148. monitor_fdpass.c
  149. monitor_fdpass.h
  150. monitor_mm.c
  151. monitor_mm.h
  152. monitor_wrap.c
  153. monitor_wrap.h
  154. msg.c
  155. msg.h
  156. mux.c
  157. myproposal.h
  158. nchan.c
  159. nchan.ms
  160. nchan2.ms
  161. openbsd-compat/
  162. openssh.xml.in
  163. opensshd.init.in
  164. packet.c
  165. packet.h
  166. pathnames.h
  167. pkcs11.h
  168. platform.c
  169. platform.h
  170. progressmeter.c
  171. progressmeter.h
  172. readconf.c
  173. readconf.h
  174. readpass.c
  175. regress/
  176. rijndael.c
  177. rijndael.h
  178. roaming.h
  179. roaming_client.c
  180. roaming_common.c
  181. roaming_dummy.c
  182. roaming_serv.c
  183. rsa.c
  184. rsa.h
  185. sandbox-darwin.c
  186. sandbox-null.c
  187. sandbox-rlimit.c
  188. sandbox-seccomp-filter.c
  189. sandbox-systrace.c
  190. scard/
  191. schnorr.c
  192. schnorr.h
  193. scp.1
  194. scp.c
  195. servconf.c
  196. servconf.h
  197. serverloop.c
  198. serverloop.h
  199. session.c
  200. session.h
  201. sftp-client.c
  202. sftp-client.h
  203. sftp-common.c
  204. sftp-common.h
  205. sftp-glob.c
  206. sftp-server-main.c
  207. sftp-server.8
  208. sftp-server.c
  209. sftp.1
  210. sftp.c
  211. sftp.h
  212. ssh-add.1
  213. ssh-add.c
  214. ssh-agent.1
  215. ssh-agent.c
  216. ssh-dss.c
  217. ssh-ecdsa.c
  218. ssh-gss.h
  219. ssh-keygen.1
  220. ssh-keygen.c
  221. ssh-keyscan.1
  222. ssh-keyscan.c
  223. ssh-keysign.8
  224. ssh-keysign.c
  225. ssh-pkcs11-client.c
  226. ssh-pkcs11-helper.8
  227. ssh-pkcs11-helper.c
  228. ssh-pkcs11.c
  229. ssh-pkcs11.h
  230. ssh-rsa.c
  231. ssh-sandbox.h
  232. ssh.1
  233. ssh.c
  234. ssh.h
  235. ssh1.h
  236. ssh2.h
  237. ssh_config
  238. ssh_config.5
  239. sshconnect.c
  240. sshconnect.h
  241. sshconnect1.c
  242. sshconnect2.c
  243. sshd.8
  244. sshd.c
  245. sshd_config
  246. sshd_config.5
  247. sshlogin.c
  248. sshlogin.h
  249. sshpty.c
  250. sshpty.h
  251. sshtty.c
  252. survey.sh.in
  253. ttymodes.c
  254. ttymodes.h
  255. uidswap.c
  256. uidswap.h
  257. umac.c
  258. umac.h
  259. uuencode.c
  260. uuencode.h
  261. version.h
  262. xmalloc.c
  263. xmalloc.h