{"id":116409,"date":"2024-06-07T09:39:55","date_gmt":"2024-06-07T07:39:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-openssh-dobavlena-vstroennaya-zashhita-ot-atak-po-podboru-parolej"},"modified":"2024-06-07T09:39:55","modified_gmt":"2024-06-07T07:39:55","slug":"v-openssh-dobavlena-vstroennaya-zashhita-ot-atak-po-podboru-parolej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/v-openssh-dobavlena-vstroennaya-zashhita-ot-atak-po-podboru-parolej","title":{"rendered":"V OpenSSH byla p\u0159id\u00e1na integrovan\u00e1 ochrana proti \u00fatok\u016fm hrubou silou.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Do k\u00f3du OpenSSH byla p\u0159id\u00e1na vestav\u011bn\u00e1 ochrana proti automatizovan\u00fdm \u00fatok\u016fm na h\u00e1d\u00e1n\u00ed hesel, p\u0159i nich\u017e se boti sna\u017e\u00ed uhodnout u\u017eivatelsk\u00e9 heslo zkou\u0161en\u00edm r\u016fzn\u00fdch typov\u00fdch kombinac\u00ed. K zablokov\u00e1n\u00ed takov\u00fdch \u00fatok\u016f byl do konfigura\u010dn\u00edho souboru sshd_config p\u0159id\u00e1n parametr PerSourcePenalties, kter\u00fd umo\u017e\u0148uje stanovit prahovou hodnotu blokace, aktivuj\u00edc\u00ed se p\u0159i vysok\u00e9m po\u010dtu ne\u00fasp\u011b\u0161n\u00fdch pokus\u016f o p\u0159ipojen\u00ed z jedn\u00e9 IP adresy. Nov\u00fd ochrann\u00fd mechanismus bude sou\u010d\u00e1st\u00ed dal\u0161\u00ed verze OpenSSH a bude ve v\u00fdchoz\u00edm nastaven\u00ed zapnut\u00fd v OpenBSD 7.6. <\/p>\n

P\u0159i zapnut\u00ed ochrany proces sshd za\u010d\u00edn\u00e1 sledovat stav ukon\u010den\u00ed pod\u0159\u00edzen\u00fdch proces\u016f, ur\u010duje situace, kdy do\u0161lo k ne\u00fasp\u011b\u0161n\u00e9 autentizaci nebo kdy byl proces ne\u010dekan\u011b ukon\u010den kv\u016fli chyb\u011b. Vysok\u00e1 intenzita chyb p\u0159i autentizaci nazna\u010duje pokusy o h\u00e1d\u00e1n\u00ed hesel, a ne\u010dekan\u00e9 ukon\u010den\u00ed m\u016f\u017ee ukazovat na pokusy o zneu\u017eit\u00ed zranitelnost\u00ed v sshd. <\/p>\n

Parametr PerSourcePenalties ur\u010duje minim\u00e1ln\u00ed prahovou hodnotu abnorm\u00e1ln\u00edch ud\u00e1lost\u00ed, po jej\u00edm\u017e p\u0159ekro\u010den\u00ed bude IP adresa, pro kterou byla zaznamen\u00e1na podez\u0159el\u00e1 aktivita, zablokov\u00e1na. Pomoc\u00ed parametru PerSourceNetBlockSize m\u016f\u017eete d\u00e1le ur\u010dit masku pods\u00edt\u011b pro zablokov\u00e1n\u00ed cel\u00e9 pods\u00edt\u011b, kter\u00e9 problematick\u00e1 IP pat\u0159\u00ed. <\/p>\n

Pro vylou\u010den\u00ed spou\u0161t\u011bn\u00ed blokace pro jednotliv\u00e9 pods\u00edt\u011b byl navr\u017een parametr PerSourcePenaltyExemptList, kter\u00fd m\u016f\u017ee b\u00fdt u\u017eite\u010dn\u00fd v situac\u00edch vedouc\u00edch k fale\u0161n\u00fdm poplach\u016fm, nap\u0159\u00edklad kdy\u017e se k SSH serveru p\u0159istupuje z velk\u00e9 s\u00edt\u011b, kde po\u017eadavky r\u016fzn\u00fdch u\u017eivatel\u016f p\u0159ich\u00e1zej\u00ed z identick\u00fdch IP adres kv\u016fli pou\u017eit\u00ed p\u0159eklada\u010de adres nebo proxy.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043a\u043e\u0434\u043e\u0432\u0443\u044e \u0431\u0430\u0437\u0443 OpenSSH \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0430\u044f \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u043f\u043e \u043f\u043e\u0434\u0431\u043e\u0440\u0443 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u043e\u0442\u044b \u043f\u044b\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u0433\u0430\u0434\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u0435\u0440\u0435\u0431\u0438\u0440\u0430\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0442\u0438\u043f\u043e\u0432\u044b\u0435 \u043a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u0438. \u0414\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0432 \u0444\u0430\u0439\u043b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 sshd_config \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 PerSourcePenalties, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u043f\u043e\u0440\u043e\u0433 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438, \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0439 \u043f\u0440\u0438 \u0431\u043e\u043b\u044c\u0448\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043d\u0435\u0443\u0434\u0430\u0447\u043d\u044b\u0445 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 \u0441 \u043e\u0434\u043d\u043e\u0433\u043e IP-\u0430\u0434\u0440\u0435\u0441\u0430. \u041d\u043e\u0432\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0449\u0438\u0442\u044b \u0432\u043e\u0439\u0434\u0451\u0442 \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-116409","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Do OpenSSH byla p\u0159id\u00e1na vestav\u011bn\u00e1 ochrana proti \u00fatok\u016fm na h\u00e1d\u00e1n\u00ed hesel | ProHoster","description":"Do k\u00f3du OpenSSH byla p\u0159id\u00e1na vestav\u011bn\u00e1 ochrana proti automatizovan\u00fdm \u00fatok\u016fm na h\u00e1d\u00e1n\u00ed hesel, p\u0159i nich\u017e se boti sna\u017e\u00ed uhodnout u\u017eivatelsk\u00e9 heslo zkou\u0161en\u00edm r\u016fzn\u00fdch typov\u00fdch kombinac\u00ed.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/v-openssh-dobavlena-vstroennaya-zashhita-ot-atak-po-podboru-parolej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 OpenSSH \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0430\u044f \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 \u0430\u0442\u0430\u043a \u043f\u043e \u043f\u043e\u0434\u0431\u043e\u0440\u0443 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 | ProHoster","og:description":"\u0412 \u043a\u043e\u0434\u043e\u0432\u0443\u044e \u0431\u0430\u0437\u0443 OpenSSH \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0430\u044f \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u043f\u043e \u043f\u043e\u0434\u0431\u043e\u0440\u0443 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u043e\u0442\u044b \u043f\u044b\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u0433\u0430\u0434\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u0435\u0440\u0435\u0431\u0438\u0440\u0430\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0442\u0438\u043f\u043e\u0432\u044b\u0435 \u043a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u0438.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/v-openssh-dobavlena-vstroennaya-zashhita-ot-atak-po-podboru-parolej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-06-07T07:39:55+00:00","article:modified_time":"2024-06-07T07:39:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"116409","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 01:55:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 01:55:19","updated":"2026-01-23 01:55:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/116409","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=116409"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/116409\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=116409"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=116409"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=116409"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}