Conversation

My SSH dream:

The best solution I've seen to SSH attacks is NetBSD's libblacklistd.

Log parsing solutions are inherently fragile. But a solution that lets a server program explicitly declare "Hey, this IP is being a jerk, please fubar it" is :flan_hearts:

I truly hope that one of the #OpenBSD devs will develop this itch and make something like it part of #OpenSSH, so it spreads and becomes a standard.