{"id":116409,"date":"2024-06-07T09:39:55","date_gmt":"2024-06-07T07:39:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-openssh-dobavlena-vstroennaya-zashhita-ot-atak-po-podboru-parolej"},"modified":"2024-06-07T09:39:55","modified_gmt":"2024-06-07T07:39:55","slug":"v-openssh-dobavlena-vstroennaya-zashhita-ot-atak-po-podboru-parolej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/v-openssh-dobavlena-vstroennaya-zashhita-ot-atak-po-podboru-parolej","title":{"rendered":"N\u00eb OpenSSH \u00ebsht\u00eb shtuar mbrojtja e brendshme nga sulmet p\u00ebr gjetjen e fjal\u00ebkalimeve","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
N\u00eb kodin baz\u00eb t\u00eb OpenSSH \u00ebsht\u00eb shtuar mbrojtja e integruar nga sulmet automatizuar p\u00ebr t\u00eb guessuar fjal\u00ebkalimet, gjat\u00eb t\u00eb cilave robot\u00ebt p\u00ebrpiqen t\u00eb gjejn\u00eb fjal\u00ebkalimin e p\u00ebrdoruesit duke provuar kombinime t\u00eb ndryshme. P\u00ebr t\u00eb bllokuar k\u00ebto sulme, n\u00eb skedarin e konfigurimit sshd_config \u00ebsht\u00eb shtuar parametri PerSourcePenalties, i cili lejon p\u00ebrcaktimin e pragut t\u00eb bllokimit q\u00eb aktivizohet kur ka nj\u00eb num\u00ebr t\u00eb madh tentativash t\u00eb d\u00ebshtuar p\u00ebr lidhje nga nj\u00eb IP. Mekanizmi i ri i mbrojtjes do t\u00eb p\u00ebrfshihet n\u00eb versionin tjet\u00ebr t\u00eb OpenSSH dhe do t\u00eb aktivizohet si parazgjedhje n\u00eb OpenBSD 7.6. <\/p>\n
Kur aktivizohet mbrojtja, procesi sshd fillon t\u00eb ndjek\u00eb statusin e p\u00ebrfundimit t\u00eb proceseve f\u00ebmij\u00eb, duke identifikuar situatat kur autentikimi d\u00ebshton ose kur procesi p\u00ebrfundon n\u00eb m\u00ebnyr\u00eb t\u00eb papritur p\u00ebr shkak t\u00eb nj\u00eb d\u00ebshtimi. Intensiteti i lart\u00eb i d\u00ebshtimeve gjat\u00eb autentikimit tregon p\u00ebr p\u00ebrpjekjet p\u00ebr t\u00eb guessuar fjal\u00ebkalimet, dhe p\u00ebrfundimi i papritur mund t\u00eb tregoj\u00eb p\u00ebr p\u00ebrpjekjet p\u00ebr t\u00eb shfryt\u00ebzuar dob\u00ebsit\u00eb n\u00eb sshd. <\/p>\n
P\u00ebrmes parametrin PerSourcePenalties, vendoset pragu minimal i ngjarjeve anormale, pas kalimit t\u00eb t\u00eb cilit IP-ja, p\u00ebr t\u00eb cil\u00ebn \u00ebsht\u00eb regjistruar aktivitet i dyshimt\u00eb, do t\u00eb bllokohet. Me ndihm\u00ebn e parametrin PerSourceNetBlockSize gjithashtu mund t\u00eb p\u00ebrcaktohet nj\u00eb mask\u00eb n\u00ebnrrjeti p\u00ebr bllokimin e t\u00ebr\u00eb n\u00ebnrrjetit, ku p\u00ebrket IP-ja problematike. <\/p>\n
P\u00ebr t\u00eb ndaluar aktivizimin e bllokimit p\u00ebr n\u00ebnrrjete t\u00eb ve\u00e7anta, \u00ebsht\u00eb propozuar parametri PerSourcePenaltyExemptList, i cili mund t\u00eb jet\u00eb i dobish\u00ebm n\u00eb situatat q\u00eb \u00e7ojn\u00eb n\u00eb aktivizime false, p\u00ebr shembull, kur kontaktohet SSH-serveri nga nj\u00eb rrjet i madh, k\u00ebrkesat e p\u00ebrdoruesve t\u00eb ndrysh\u00ebm nga i cili vijn\u00eb nga IP t\u00eb nj\u00ebjta p\u00ebr shkak t\u00eb p\u00ebrdorimit t\u00eb translator\u00ebve t\u00eb adresave ose proxy-t. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"