{"id":116409,"date":"2024-06-07T09:39:55","date_gmt":"2024-06-07T07:39:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-openssh-dobavlena-vstroennaya-zashhita-ot-atak-po-podboru-parolej"},"modified":"2024-06-07T09:39:55","modified_gmt":"2024-06-07T07:39:55","slug":"v-openssh-dobavlena-vstroennaya-zashhita-ot-atak-po-podboru-parolej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/v-openssh-dobavlena-vstroennaya-zashhita-ot-atak-po-podboru-parolej","title":{"rendered":"OpenSSH-sse on lisatud sisseehitatud kaitse paroolide murdmise r\u00fcnnakute eest","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

OpenSSH koodibaasi on lisatud sisseehitatud kaitse automatiseeritud, paroolide proovimise r\u00fcnnakute vastu, mille k\u00e4igus \u00fcritavad robotid kasutaja parooli \u00e4ra arvata, proovides erinevaid t\u00fc\u00fcpilisi kombinatsioone. T\u00f5kestamiseks on faili sshd_config lisatud parameeter PerSourcePenalties, mis v\u00f5imaldab m\u00e4\u00e4rata blokeerimise piiri, mis aktiveerub, kui \u00fchelt IP-aadressilt on liiga palju eba\u00f5nnestunud \u00fchenduse katseid. Uus kaitsemehhanism sisaldub j\u00e4rgmises OpenSSH v\u00e4ljalaskes ja see l\u00fclitatakse vaikimisi sisse OpenBSD 7.6-s. <\/p>\n

Kaitse sissel\u00fclitamisel hakkab sshd j\u00e4lgima alamprotsesside l\u00f5petamise staatust, tuvastades olukordade puhul, kus autentimine eba\u00f5nnestus v\u00f5i kui protsess l\u00f5petati ootamatult veateate t\u00f5ttu. Suur eba\u00f5nnestumiste intensiivsus autentimisel viitab paroolide proovimise katsetele, ja ootamatu l\u00f5petamine v\u00f5ib viidata katsetele ekspluateerida sshd haavatavusi. <\/p>\n

Parameetri PerSourcePenalties kaudu m\u00e4\u00e4ratakse minimaalne anomaalsete s\u00fcndmuste piir, mille \u00fcletamisel blokeeritakse IP-aadress, millel tuvastatakse kahtlane tegevus. Parameeter PerSourceNetBlockSize v\u00f5imaldab t\u00e4iendavalt m\u00e4\u00e4rata alamv\u00f5rgu maski, et blokeerida kogu alamv\u00f5rk, mille kuulub probleemne IP. <\/p>\n

Erinevate alamv\u00f5rkude blokeerimise juhtimiseks on pakutud parameetrit PerSourcePenaltyExemptList, mis v\u00f5ib osutuda kasulikuks olukordades, mis viivad valeh\u00e4irete tekitamiseni, n\u00e4iteks kui SSH-serverile p\u00f6\u00f6rdutakse suure v\u00f5rgu kaudu, mille erinevate kasutajate p\u00e4ringud tulevad sama IP-lt t\u00e4nu aadressitranslatsiooni v\u00f5i vahendite kasutamisele.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043a\u043e\u0434\u043e\u0432\u0443\u044e \u0431\u0430\u0437\u0443 OpenSSH \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0430\u044f \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u043f\u043e \u043f\u043e\u0434\u0431\u043e\u0440\u0443 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u043e\u0442\u044b \u043f\u044b\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u0433\u0430\u0434\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u0435\u0440\u0435\u0431\u0438\u0440\u0430\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0442\u0438\u043f\u043e\u0432\u044b\u0435 \u043a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u0438. \u0414\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0432 \u0444\u0430\u0439\u043b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 sshd_config \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 PerSourcePenalties, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u043f\u043e\u0440\u043e\u0433 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438, \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0439 \u043f\u0440\u0438 \u0431\u043e\u043b\u044c\u0448\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043d\u0435\u0443\u0434\u0430\u0447\u043d\u044b\u0445 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 \u0441 \u043e\u0434\u043d\u043e\u0433\u043e IP-\u0430\u0434\u0440\u0435\u0441\u0430. \u041d\u043e\u0432\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0449\u0438\u0442\u044b \u0432\u043e\u0439\u0434\u0451\u0442 \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-116409","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47OpenSSH-sse on lisatud sisseehitatud kaitse paroolide proovimise r\u00fcnnakute vastu | ProHoster","description":"OpenSSH koodibaasi on lisatud sisseehitatud kaitse automatiseeritud, paroolide proovimise r\u00fcnnakute vastu, mille k\u00e4igus \u00fcritavad robotid kasutaja parooli \u00e4ra arvata, proovides erinevaid t\u00fc\u00fcpilisi kombinatsioone.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/v-openssh-dobavlena-vstroennaya-zashhita-ot-atak-po-podboru-parolej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 OpenSSH \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0430\u044f \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 \u0430\u0442\u0430\u043a \u043f\u043e \u043f\u043e\u0434\u0431\u043e\u0440\u0443 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 | ProHoster","og:description":"\u0412 \u043a\u043e\u0434\u043e\u0432\u0443\u044e \u0431\u0430\u0437\u0443 OpenSSH \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0430\u044f \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u043f\u043e \u043f\u043e\u0434\u0431\u043e\u0440\u0443 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u043e\u0442\u044b \u043f\u044b\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u0433\u0430\u0434\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u0435\u0440\u0435\u0431\u0438\u0440\u0430\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0442\u0438\u043f\u043e\u0432\u044b\u0435 \u043a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u0438.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/v-openssh-dobavlena-vstroennaya-zashhita-ot-atak-po-podboru-parolej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-06-07T07:39:55+00:00","article:modified_time":"2024-06-07T07:39:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"116409","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 01:55:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 01:55:19","updated":"2026-01-23 01:55:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/116409","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=116409"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/116409\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=116409"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=116409"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=116409"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}