On 2/22/21, 17:56, "openssh-unix-dev on behalf of Damien Miller" <openssh-unix-dev-bounces+imorgan=nas.nasa.gov at mindrot.org on behalf of djm at mindrot.org> wrote: Hi, OpenSSH 8.5p1 is almost ready for release, so we would appreciate testing on as many platforms and systems as possible. This is a bugfix release. ... * sshd(8): implement client address-based rate-limiting via new sshd_config(5) PerSourceMaxStartups and PerSourceNetBlockSize directives that fine-grained control than the global MaxStartups limit. The sshd_config(5) man page has these new options listed after PidFile, whereas they should be listed before. -- Iain Morgan
fixed - thanks On Sat, 27 Feb 2021, Morgan, Iain (ARC-TN)[InuTeq, LLC] wrote:> On 2/22/21, 17:56, "openssh-unix-dev on behalf of Damien Miller" <openssh-unix-dev-bounces+imorgan=nas.nasa.gov at mindrot.org on behalf of djm at mindrot.org> wrote: > > Hi, > > OpenSSH 8.5p1 is almost ready for release, so we would appreciate testing > on as many platforms and systems as possible. This is a bugfix release. > > ... > > * sshd(8): implement client address-based rate-limiting via new > sshd_config(5) PerSourceMaxStartups and PerSourceNetBlockSize > directives that fine-grained control than the global MaxStartups > limit. > > > The sshd_config(5) man page has these new options listed after PidFile, whereas they should be listed before. > > -- > Iain Morgan > > _______________________________________________ > openssh-unix-dev mailing list > openssh-unix-dev at mindrot.org > https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev >
On Sat, Feb 27, 2021 at 10:58:52PM +0000, "Morgan, Iain (ARC-TN)[InuTeq, LLC]" <iain.morgan at nasa.gov> wrote:> On 2/22/21, 17:56, "openssh-unix-dev on behalf of Damien Miller" <openssh-unix-dev-bounces+imorgan=nas.nasa.gov at mindrot.org on behalf of djm at mindrot.org> wrote: > > Hi, > > OpenSSH 8.5p1 is almost ready for release, so we would appreciate testing > on as many platforms and systems as possible. This is a bugfix release. > > ... > > * sshd(8): implement client address-based rate-limiting via new > sshd_config(5) PerSourceMaxStartups and PerSourceNetBlockSize > directives that fine-grained control than the global MaxStartups > limit. > > > The sshd_config(5) man page has these new options listed after PidFile, whereas they should be listed before. > > -- > Iain MorganAlso, the grammar seems wrong: "directives that fine-grained control than" should probably be "directives that provide more fine-grained control than" (if this is a quote from the manpage and not just a changelog). cheers, raf
On Sun, 28 Feb 2021, raf wrote:> Also, the grammar seems wrong: "directives that > fine-grained control than" should probably be > "directives that provide more fine-grained control > than" (if this is a quote from the manpage and not > just a changelog).It's just the release notes, but I still appreciate the feedback so the final version will be less wrong :) -d