Index | Thread | Search

From:
Damien Miller <djm@mindrot.org>
Subject:
Re: openssh: fractional-second PerSourcePenalties part 2
To:
tech@openbsd.org
Cc:
openssh@openssh.com
Date:
Fri, 28 Nov 2025 16:30:55 +1100

Download raw body.

Thread
On Fri, 28 Nov 2025, Damien Miller wrote:

> Hi,
> 
> This is the other part of adding fractional-second PerSourcePenalties
> to sshd: actually converting the existing code to microseconds.
> 
> This is pretty mechanical, though the config parsing is a little
> fiddly as we now need to parse two kinds of integer values from
> the config: int64_t intervals and int for everything else.

Forgot to mention: to test this you can run sshd with something
like PerSourcePenalties="noauth:0.5 min:5" and then hit it with:

for x in `jot 20 1` ; do nc -N ::1 2222 < /dev/null ; done

I don't intend to put this in the regression tests as they it
would be too flaky on slower test runners.

-d