rich1.0phorkiehttps://p.cweiske.de/Christian Weiske86400900900<!-- embedding all files of https://p.cweiske.de/968 --> <link rel="stylesheet" href="https://p.cweiske.de/css/embed.css"/> <div class="phork" id="968"> <div class="phork-file"> <div class="phork-content"> <div class="document"> <p>Client:</p> <pre class="literal-block"> kex_exchange_identification: read: Connection reset by peer Connection reset by 159.195.22.112 port 22 </pre> <p>Server:</p> <pre class="literal-block"> $ journalctl -efu ssh [...] drop connection #10 from [212.99.194.59]:59789 on [159.195.22.112]:22 Maxstartups </pre> <p><tt class="docutils literal">$ man sshd_config</tt>:</p> <blockquote> <dl class="docutils"> <dt><tt class="docutils literal">MaxStartups</tt></dt> <dd>Specifies the maximum number of concurrent unauthenticated connections to the SSH daemon. Additional connections will be dropped until authentication succeeds or the LoginGraceTime expires for a connection. The default is 10:30:100. Alternatively, random early drop can be enabled by specifying the three colon separated values start:rate:full (e.g. &quot;10:30:60&quot;). sshd(8) will refuse connection attempts with a probability of rate/100 (30%) if there are currently start (10) unauthenticated connections. The probability increases linearly and all connection attempts are refused if the number of unauthenticated connections reaches full (60).</dd> </dl> </blockquote> </div> </div> <div class="phork-meta"> <a href="https://p.cweiske.de/968/rev-raw/55e3f7a2c3150da1e14439b43342e7e4513021c7/README.rst" style="float: right">view raw source</a> <a href="https://p.cweiske.de/968#README.rst">README.rst</a> </div> </div> </div>