[openssh-commits] [openssh] branch master updated (9774b938 -> 0e0c6976)

[git+noreply at mindrot.org]

This is an automated email from the git hooks/post-receive script.

djm pushed a change to branch master
in repository openssh.

    from 9774b938 upstream: regress test for PerSourcePenalties
     new bd1f7474 upstream: mention that PerSourcePenalties don't affect concurrent
     new 0e0c6976 upstream: enable PerSourcePenalties by default.

The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.


Detailed log of new commits:

commit 0e0c69761a4c33ccd4a256560f522784a753d1a8
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Thu Jun 6 20:25:48 2024 +0000

    upstream: enable PerSourcePenalties by default.
    
    ok markus
    
    NB. if you run a sshd that accepts connections from behind large NAT
    blocks, proxies or anything else that aggregates many possible users
    behind few IP addresses, then this change may cause legitimate traffic
    to be denied.
    
    Please read the PerSourcePenalties, PerSourcePenaltyExemptList and
    PerSourceNetBlockSize options in sshd_config(5) for how to tune your
    sshd(8) for your specific circumstances.
    
    OpenBSD-Commit-ID: 24a0e5c23d37e5a63e16d2c6da3920a51078f6ce

commit bd1f74741daabeaf20939a85cd8cec08c76d0bec
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Thu Jun 6 20:20:42 2024 +0000

    upstream: mention that PerSourcePenalties don't affect concurrent
    
    in-progress connections.
    
    OpenBSD-Commit-ID: 20389da6264f2c97ac3463edfaa1182c212d420c

Summary of changes:
 servconf.c    | 4 ++--
 sshd_config.5 | 7 ++++---
 2 files changed, 6 insertions(+), 5 deletions(-)

-- 
To stop receiving notification emails like this one, please contact
djm at mindrot.org.