[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#275463: marked as done (ssh: MaxStartups default is very low)

Your message dated Tue, 7 May 2013 10:55:24 +0100
with message-id <20130507095524.GA10387@riva.ucam.org>
and subject line Re: Bug#275463: ssh: MaxStartups default is very low
has caused the Debian Bug report #275463,
regarding ssh: MaxStartups default is very low
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
275463: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=275463
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: ssh
Version: 1:3.8.1p1-8

The MaxStartups defaults to 10.  In certain (not entirely esoteric)
configs (e.g. with an ssh bastion/jump off host or a wanna-build
master with > 10 buildds), it's not hard to over-run that limit in
normal use.  More to the point, it seems to make ssh ridiculously easy
to remotely DoS?

-- 
James

--- End Message ---
--- Begin Message --- 
Source: openssh
Source-Version: 1:6.1p1-3

On Fri, Oct 08, 2004 at 10:58:47AM +0100, James Troup wrote:
> The MaxStartups defaults to 10.  In certain (not entirely esoteric)
> configs (e.g. with an ssh bastion/jump off host or a wanna-build
> master with > 10 buildds), it's not hard to over-run that limit in
> normal use.  More to the point, it seems to make ssh ridiculously easy
> to remotely DoS?

I think this was essentially handled by the change of MaxStartups'
default from 10 to 10:30:100, made upstream in 6.2p1 and backported to
1:6.1p1-3.

Thanks,

-- 
Colin Watson                                       [cjwatson@debian.org]

--- End Message ---
Reply to: