From 9a5b5378f61a840209d459635bb440eb3a96be95 Mon Sep 17 00:00:00 2001 From: "Hunter T." Date: Sat, 25 Oct 2025 17:03:52 -0700 Subject: [PATCH 1/3] func: configure MaxStartups parameter to '10:30:60' --- hardening/SSHD Hardening/harden-sshd.bash | 2 ++ 1 file changed, 2 insertions(+) diff --git a/hardening/SSHD Hardening/harden-sshd.bash b/hardening/SSHD Hardening/harden-sshd.bash index dd7e65d..2c7c979 100755 --- a/hardening/SSHD Hardening/harden-sshd.bash +++ b/hardening/SSHD Hardening/harden-sshd.bash @@ -74,6 +74,8 @@ declare -A C_SSHD_CONFIG=( ["ClientAliveIntervalRegex"]='^#?ClientAliveInterval\s+.*$' ["ClientAliveCountMax"]="2" ["ClientAliveCountMaxRegex"]='^#?ClientAliveCountMax\s+.*$' + ["MaxStartups"]="10:30:60" + ["MaxStartupsRegex"]='^#?MaxStartups\s+.*$' ) readonly C_SSHD_CONFIG From 25f4d31eac11314a1feadb7a165d60e4d0cdb6c2 Mon Sep 17 00:00:00 2001 From: "Hunter T." Date: Sat, 25 Oct 2025 17:05:22 -0700 Subject: [PATCH 2/3] chore: update version number --- hardening/SSHD Hardening/harden-sshd.bash | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/hardening/SSHD Hardening/harden-sshd.bash b/hardening/SSHD Hardening/harden-sshd.bash index 2c7c979..b2e055b 100755 --- a/hardening/SSHD Hardening/harden-sshd.bash +++ b/hardening/SSHD Hardening/harden-sshd.bash @@ -9,7 +9,7 @@ # - Session backup (.session_backup): For automatic script restoration during # interruptions. # -# Version: v2.1.0 +# Version: v2.2.0 # License: MIT License # Copyright (c) 2020-2025 Hunter T. (StrangeRanger) # From ab77c5ada5075b98b70f59e4f70206c1bfe0273f Mon Sep 17 00:00:00 2001 From: "Hunter T." Date: Sun, 2 Nov 2025 12:42:49 -0800 Subject: [PATCH 3/3] docs: update CHANGELOG --- hardening/SSHD Hardening/CHANGELOG.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/hardening/SSHD Hardening/CHANGELOG.md b/hardening/SSHD Hardening/CHANGELOG.md index 6e5f5e7..ee7567e 100644 --- a/hardening/SSHD Hardening/CHANGELOG.md +++ b/hardening/SSHD Hardening/CHANGELOG.md @@ -4,6 +4,12 @@ All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). +## v2.2.0 - 2025-11-02 + +### Added + +- MaxStartups is configured to `10:30:60`. This limits concurrent unauthenticated connections to mitigate DoS attacks. + ## v2.1.0 - 2025-08-09 ### Added