Suggestion for OpenSSH developers

Luveh Keraph 1.41421 at gmail.com
Thu Apr 22 07:28:19 AEST 2021


I recently stumbled upon something called endlessh. This is, in essence, a
very small server that keeps SSH clients engaged, possibly for a long time,
by sending unlimited amounts of junk, at reasonable time intervals, in lieu
of the SSH identification string on receiving an SSH connection request.

I was wondering whether this is a capability that guys would consider
adding to OpenSSH as a new launch-time option? Together with a feature that
would enable the OpenSSH daemon to select what clients (IP addresses
families or sets of names) the capability would (or would not) apply to,
this might come in handy when it comes to deterring script kiddies.


More information about the openssh-unix-dev mailing list