Page 1 of 1

SSHD block on single attempt

Posted: 20 Sep 2020, 09:23
by zemanelcenas
Hello,

I'm using csf and have the follow config:
LF_SSHD = "15"
LF_SSHD_PERM = "1"

Even so ssh logins are being blocked on single login attempt

IP: X.X.X.X (GB/United Kingdom/-)
Failures: 1 (sshd)
Interval: 600 seconds
Blocked: Permanent Block [LF_SSHD]

Log entries:
Sep 20 08:16:34 web7 sshd[15999]: Invalid user ubuntu from X.X.X.X port 45160

Cant understand why this is happening. Checking the logs i only see one attempt.

Thank you

Re: SSHD block on single attempt

Posted: 27 May 2021, 15:41
by jranma
BUMP !

I experience the same problem. Using csf version: v14.10 (generic) on linux debian 10

my config:
LF_SSHD = "3"
LF_SSHD_PERM = "14400"

Even so ssh logins are being blocked on single failed login.
looks like a bug ?

please help :)
cheers, Julien