comparison options.h @ 277:044bc108b9b3

* Per-IP connection unauthed connection limits * m_close() exits fatally on failure * other cleanups
author Matt Johnston <matt@ucc.asn.au>
date Wed, 08 Mar 2006 12:41:27 +0000
parents e37b160c414c
children b72f98803e46
comparison
equal deleted inserted replaced
266:e37b160c414c 277:044bc108b9b3
159 /* prngd must be manually set up to produce output */ 159 /* prngd must be manually set up to produce output */
160 /*#define DROPBEAR_PRNGD_SOCKET "/var/run/dropbear-rng"*/ 160 /*#define DROPBEAR_PRNGD_SOCKET "/var/run/dropbear-rng"*/
161 161
162 /* Specify the number of clients we will allow to be connected but 162 /* Specify the number of clients we will allow to be connected but
163 * not yet authenticated. After this limit, connections are rejected */ 163 * not yet authenticated. After this limit, connections are rejected */
164 /* The first setting is per-IP, to avoid denial of service */
165 #ifndef MAX_UNAUTH_PER_IP
166 #define MAX_UNAUTH_PER_IP 5
167 #endif
168
169 /* And then a global limit to avoid chewing memory if connections
170 * come from many IPs */
164 #ifndef MAX_UNAUTH_CLIENTS 171 #ifndef MAX_UNAUTH_CLIENTS
165 #define MAX_UNAUTH_CLIENTS 30 172 #define MAX_UNAUTH_CLIENTS 30
166 #endif 173 #endif
167 174
168 /* Maximum number of failed authentication tries (server option) */ 175 /* Maximum number of failed authentication tries (server option) */