comparison default_options.h @ 1794:ed20d805b332

Disable UNAUTH_CLOSE_DELAY by default
author Matt Johnston <matt@ucc.asn.au>
date Tue, 02 Mar 2021 22:20:14 +0800
parents 42745af83b7d
children 35d504d59c05
comparison
equal deleted inserted replaced
1793:f90e681b8b8c 1794:ed20d805b332
254 254
255 /* Default maximum number of failed authentication tries (server option) */ 255 /* Default maximum number of failed authentication tries (server option) */
256 /* -T server option overrides */ 256 /* -T server option overrides */
257 #define MAX_AUTH_TRIES 10 257 #define MAX_AUTH_TRIES 10
258 258
259 /* Delay introduced before closing an unauthenticated session (seconds) */ 259 /* Delay introduced before closing an unauthenticated session (seconds).
260 #define UNAUTH_CLOSE_DELAY 30 260 Disabled by default, can be set to say 30 seconds to reduce the speed
261 of password brute forcing. Note that there is a risk of denial of
262 service by setting this */
263 #define UNAUTH_CLOSE_DELAY 0
261 264
262 /* The default file to store the daemon's process ID, for shutdown 265 /* The default file to store the daemon's process ID, for shutdown
263 scripts etc. This can be overridden with the -P flag */ 266 scripts etc. This can be overridden with the -P flag */
264 #define DROPBEAR_PIDFILE "/var/run/dropbear.pid" 267 #define DROPBEAR_PIDFILE "/var/run/dropbear.pid"
265 268