]> git.ipfire.org Git - thirdparty/openssh-portable.git/commit
upstream: split PerSourcePenalties address tracking. Previously it
authordjm@openbsd.org <djm@openbsd.org>
Wed, 12 Jun 2024 22:36:00 +0000 (22:36 +0000)
committerDamien Miller <djm@mindrot.org>
Wed, 12 Jun 2024 22:36:41 +0000 (08:36 +1000)
commit4de80ff4e6fab5a6bb0028e7d57c6c23d1485adb
tree680220594ec121af6cc97bbfc5abfb42adfced73
parent06ab4c6931b0aaa4334db2faaa7e1069e76d0df6
upstream: split PerSourcePenalties address tracking. Previously it

used one shared table and overflow policy for IPv4 and IPv6 addresses, now it
will use separate tables and optionally different overflow policies.

This prevents misbehaviour from IPv6 addresses (which are vastly easier
to obtain many of) from affecting IPv4 connections and may allow for
stricter overflow policies.

ok deraadt@

OpenBSD-Commit-ID: 12637ed0aa4d5f1f3e702da42ea967cbd8bfdfd9
servconf.c
servconf.h
srclimit.c
sshd_config.5