{"id":116409,"date":"2024-06-07T09:39:55","date_gmt":"2024-06-07T07:39:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-openssh-dobavlena-vstroennaya-zashhita-ot-atak-po-podboru-parolej"},"modified":"2024-06-07T09:39:55","modified_gmt":"2024-06-07T07:39:55","slug":"v-openssh-dobavlena-vstroennaya-zashhita-ot-atak-po-podboru-parolej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pl\/blog\/news\/v-openssh-dobavlena-vstroennaya-zashhita-ot-atak-po-podboru-parolej","title":{"rendered":"OpenSSH wprowadza wbudowan\u0105 ochron\u0119 przed atakami typu brute force","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Do bazy kodowej OpenSSH dodano wbudowan\u0105 ochron\u0119 przed zautomatyzowanymi atakami na has\u0142a, w trakcie kt\u00f3rych boty pr\u00f3buj\u0105 zgadn\u0105\u0107 has\u0142o u\u017cytkownika, testuj\u0105c r\u00f3\u017cne typowe kombinacje. Aby zablokowa\u0107 takie ataki, do pliku konfiguracyjnego sshd_config dodano parametr PerSourcePenalties, kt\u00f3ry pozwala okre\u015bli\u0107 pr\u00f3g blokady, aktywuj\u0105cy si\u0119 po du\u017cej liczbie nieudanych pr\u00f3b po\u0142\u0105czenia z jednego adresu IP. Nowy mechanizm ochrony znajdzie si\u0119 w nast\u0119pnej wersji OpenSSH i b\u0119dzie w\u0142\u0105czony domy\u015blnie w OpenBSD 7.6. <\/p>\n

Po w\u0142\u0105czeniu ochrony proces sshd zaczyna monitorowa\u0107 status zako\u0144czenia proces\u00f3w potomnych, okre\u015blaj\u0105c sytuacje, w kt\u00f3rych nie powiod\u0142a si\u0119 autoryzacja lub kiedy proces zosta\u0142 niespodziewanie zako\u0144czony z powodu awarii. Wysoka intensywno\u015b\u0107 awarii podczas autoryzacji \u015bwiadczy o pr\u00f3bach \u0142amania hase\u0142, a nag\u0142e zako\u0144czenie mo\u017ce wskazywa\u0107 na pr\u00f3by wykorzystania luk w sshd. <\/p>\n

Za pomoc\u0105 parametru PerSourcePenalties okre\u015bla si\u0119 minimalny pr\u00f3g anormalnych zdarze\u0144, po przekroczeniu kt\u00f3rego adres IP, dla kt\u00f3rego zarejestrowano podejrzan\u0105 aktywno\u015b\u0107, zostanie zablokowany. Dzi\u0119ki parametrowi PerSourceNetBlockSize mo\u017cna dodatkowo okre\u015bli\u0107 mask\u0119 podsieci do blokowania ca\u0142ej podsieci, do kt\u00f3rej nale\u017cy problemowy adres IP. <\/p>\n

Aby wy\u0142\u0105czy\u0107 dzia\u0142anie blokady dla okre\u015blonych podsieci, zaproponowano parametr PerSourcePenaltyExemptList, kt\u00f3ry mo\u017ce okaza\u0107 si\u0119 przydatny w sytuacjach prowadz\u0105cych do fa\u0142szywych alarm\u00f3w, na przyk\u0142ad, gdy na serwer SSH kierowane s\u0105 zapytania z du\u017cej sieci, a \u017c\u0105dania r\u00f3\u017cnych u\u017cytkownik\u00f3w pochodz\u0105 z tego samego adresu IP z powodu u\u017cycia translacji adres\u00f3w lub proxy.
\n
\u0179r\u00f3d\u0142o: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043a\u043e\u0434\u043e\u0432\u0443\u044e \u0431\u0430\u0437\u0443 OpenSSH \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0430\u044f \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u043f\u043e \u043f\u043e\u0434\u0431\u043e\u0440\u0443 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u043e\u0442\u044b \u043f\u044b\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u0433\u0430\u0434\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u0435\u0440\u0435\u0431\u0438\u0440\u0430\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0442\u0438\u043f\u043e\u0432\u044b\u0435 \u043a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u0438. \u0414\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0432 \u0444\u0430\u0439\u043b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 sshd_config \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 PerSourcePenalties, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u043f\u043e\u0440\u043e\u0433 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438, \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0439 \u043f\u0440\u0438 \u0431\u043e\u043b\u044c\u0448\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043d\u0435\u0443\u0434\u0430\u0447\u043d\u044b\u0445 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 \u0441 \u043e\u0434\u043d\u043e\u0433\u043e IP-\u0430\u0434\u0440\u0435\u0441\u0430. \u041d\u043e\u0432\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0449\u0438\u0442\u044b \u0432\u043e\u0439\u0434\u0451\u0442 \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-116409","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47W OpenSSH dodano wbudowan\u0105 ochron\u0119 przed atakami na has\u0142a | ProHoster","description":"Do bazy kodowej OpenSSH dodano wbudowan\u0105 ochron\u0119 przed zautomatyzowanymi atakami na has\u0142a, w trakcie kt\u00f3rych boty pr\u00f3buj\u0105 zgadn\u0105\u0107 has\u0142o u\u017cytkownika, testuj\u0105c r\u00f3\u017cne typowe kombinacje.","canonical_url":"https:\/\/prohoster.info\/pl\/blog\/news\/v-openssh-dobavlena-vstroennaya-zashhita-ot-atak-po-podboru-parolej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pl_PL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 OpenSSH \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0430\u044f \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 \u0430\u0442\u0430\u043a \u043f\u043e \u043f\u043e\u0434\u0431\u043e\u0440\u0443 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 | ProHoster","og:description":"\u0412 \u043a\u043e\u0434\u043e\u0432\u0443\u044e \u0431\u0430\u0437\u0443 OpenSSH \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0430\u044f \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u043f\u043e \u043f\u043e\u0434\u0431\u043e\u0440\u0443 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u043e\u0442\u044b \u043f\u044b\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u0433\u0430\u0434\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u0435\u0440\u0435\u0431\u0438\u0440\u0430\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0442\u0438\u043f\u043e\u0432\u044b\u0435 \u043a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u0438.","og:url":"https:\/\/prohoster.info\/pl\/blog\/news\/v-openssh-dobavlena-vstroennaya-zashhita-ot-atak-po-podboru-parolej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-06-07T07:39:55+00:00","article:modified_time":"2024-06-07T07:39:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"116409","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 01:55:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 01:55:19","updated":"2026-01-23 01:55:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/116409","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/comments?post=116409"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/116409\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media?parent=116409"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/categories?post=116409"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/tags?post=116409"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}