diff --git a/hardening/SSHD Hardening/CHANGELOG.md b/hardening/SSHD Hardening/CHANGELOG.md index 6e5f5e7..ee7567e 100644 --- a/hardening/SSHD Hardening/CHANGELOG.md +++ b/hardening/SSHD Hardening/CHANGELOG.md @@ -4,6 +4,12 @@ All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). +## v2.2.0 - 2025-11-02 + +### Added + +- MaxStartups is configured to `10:30:60`. This limits concurrent unauthenticated connections to mitigate DoS attacks. + ## v2.1.0 - 2025-08-09 ### Added diff --git a/hardening/SSHD Hardening/harden-sshd.bash b/hardening/SSHD Hardening/harden-sshd.bash index dd7e65d..b2e055b 100755 --- a/hardening/SSHD Hardening/harden-sshd.bash +++ b/hardening/SSHD Hardening/harden-sshd.bash @@ -9,7 +9,7 @@ # - Session backup (.session_backup): For automatic script restoration during # interruptions. # -# Version: v2.1.0 +# Version: v2.2.0 # License: MIT License # Copyright (c) 2020-2025 Hunter T. (StrangeRanger) # @@ -74,6 +74,8 @@ declare -A C_SSHD_CONFIG=( ["ClientAliveIntervalRegex"]='^#?ClientAliveInterval\s+.*$' ["ClientAliveCountMax"]="2" ["ClientAliveCountMaxRegex"]='^#?ClientAliveCountMax\s+.*$' + ["MaxStartups"]="10:30:60" + ["MaxStartupsRegex"]='^#?MaxStartups\s+.*$' ) readonly C_SSHD_CONFIG