topic Re: Limit SSH connections in Operating System - HP-UX

Limit SSH connections

Mrunal Nerpawar — Wed, 05 Jan 2011 07:56:55 GMT

Hi,

Can anyone tell me how the we can limit the no. of ssh connections to the HP-UX server.

I tried setting MaxStartups value in /etc/ssh/sshd_config file, but it is not working as i expect.

--Mrunal

Re: Limit SSH connections

Hakki Aydin Ucar — Wed, 05 Jan 2011 08:20:23 GMT

1-) Alternatively, random early drop can be enabled by specifying the three colon separated values ``start:rate:full'' (e.g.,"10:30:60") in this case I guess max. number of you need to limit must be 60.

2-) Did you restart sshd daemon ?

Re: Limit SSH connections

Mounaam — Wed, 05 Jan 2011 09:49:09 GMT

Hi,

I don't think that MaxStartups answers your need.
It applies only for *unauthenticated* connections:
--8<--
MaxStartups
Specifies the maximum number of concurrent unauthenticated con-
nections to the sshd daemon. Additional connections will be
dropped until authentication succeeds or the LoginGraceTime ex-
pires for a connection. The default is 10.

Alternatively, random early drop can be enabled by specifying the
three colon separated values ``start:rate:full'' (e.g.,
"10:30:60" ). sshd will refuse connection attempts with a proba-
bility of ``rate/100'' (30%) if there are currently ``start''
(10) unauthenticated connections. The probability increases lin-
early and all connection attempts are refused if the number of
unauthenticated connections reaches ``full'' (60).
-->8--

Regards,
Mounaam

Re: Limit SSH connections

Mrunal Nerpawar — Tue, 11 Jan 2011 10:15:00 GMT

You are right Mounaam.
That option do not solve my purpose.

So is it that, there is no way to configure ssh connection limit on HP-UX servers?

Re: Limit SSH connections

Innate Ideas — Thu, 13 Jan 2011 20:11:52 GMT

If your version of ssh is 5.1 or newer the Maxsessions 1 option might work for you. It does not limit the total number of connections to the server but it does limit number of connections per client IP address.

Re: Limit SSH connections

Srikanth Kancharla — Fri, 14 Jan 2011 06:09:16 GMT

Hi There,

You can try some thing like this
/etc/default/security
NUMBER_OF_LOGINS_ALLOWED=XX

Re: Limit SSH connections

Mrunal Nerpawar — Fri, 18 Feb 2011 11:12:03 GMT

Thanks all for you inputs.

NUMBER_OF_LOGINS_ALLOWED works for any non-root user. This has solved my problem.

Thanks again to all of you!

Re: Limit SSH connections

Mrunal Nerpawar — Fri, 18 Feb 2011 11:14:24 GMT

The inputs i have received on this thread has solved my issue.

Therefore closing this thread.