openbsd
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
openbsd [2023/06/23 11:36] – [SSHD] maja | openbsd [2023/06/23 11:41] (current) – reorder maja | ||
---|---|---|---|
Line 65: | Line 65: | ||
</ | </ | ||
eg; to stop the web-server' | eg; to stop the web-server' | ||
- | ==== Firewall PF ==== | + | |
- | PF is a super firewall, there is a good doco available in the [[https:// | + | |
- | main file is the ''/ | + | |
- | '' | + | |
- | '' | + | |
==== SSHD ==== | ==== SSHD ==== | ||
OpenBSD team long ago forked SSH and created their own version, and probably their best known project. it's so good its now the de-facto variant installed on most other OS' | OpenBSD team long ago forked SSH and created their own version, and probably their best known project. it's so good its now the de-facto variant installed on most other OS' | ||
Line 105: | Line 101: | ||
$ grep negotiate / | $ grep negotiate / | ||
508 | 508 | ||
- | |||
</ | </ | ||
+ | ==== Firewall PF ==== | ||
+ | PF is a super firewall, there is a good doco available in the [[https:// | ||
+ | main file is the ''/ | ||
+ | '' | ||
+ | '' | ||
+ | \\ | ||
Combine SSH and PF and you'll passively discard a lot | Combine SSH and PF and you'll passively discard a lot | ||
<file text pf.conf> | <file text pf.conf> | ||
Line 116: | Line 117: | ||
| | ||
</ | </ | ||
+ | < | ||
+ | $ doas pfctl -t ssh-abuse -Ts | wc -l | ||
+ | 1081 | ||
+ | </ | ||
+ | |||
==== Spamd ==== | ==== Spamd ==== | ||
SpamD can is a 'spam deferral daemon' | SpamD can is a 'spam deferral daemon' |
openbsd.1687520177.txt.gz · Last modified: 2023/06/23 11:36 by maja