Hi,
those two cover pretty much what you want to achieve I think:
https://ubuntuforums.org/showthread.php?t=1409993
https://www.rackaid.com/blog/how-to-block-ssh-brute-force-attacks/
** Changed in: openssh (Ubuntu)
Status: New => Incomplete
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/1628926
Title:
Postpone login attempts if X successive attempts have failed
Status in openssh package in Ubuntu:
Incomplete
Bug description:
** This is a feature request that regards to security. **
Please add to the login method a mechanism that postpones successive
login attempts if X attempts have failed.
Obviously this can be further enhanced - for example:
If X successive login attempts failed, then disable that specific login
method for that specific user for Y minutes.
If Y minutes have passed and the additional successive attempts failed again
- then disable that specific login method for that specific user for 2*Y
minutes.
And so on...
Values of X and Y should be configured by the 'root' user.
Benefits: greatly reduces the risk of remotely brute-forcing the
password.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/1628926/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
