SSH Brute Force Protection - sshd_bfp - where in GUI?

[bengalih]

I see the nvram variable 'sshd_bfp=1' but I don't know where this option is in the gui, and/or if any of the settings are configurable?

Is there a way if you already have a console session open in one window you can reset this count by restarting a service?
I have locked myself out a few times and been unable to open another session apart from the one I already had enabled.

I'm pretty sure I tried restarting ssh before, but that didn't seem to do it.

 

[Tech Junky]

It's not a count it's a status 0 = off / 1 = on

 

[bengalih]

It's not a count it's a status 0 = off / 1 = on

Yes I understand it is on/off. I am asking:

a) where that toggle option is in the GUI, because it isn't with the other SSH settings.
b) Is there another configuration variable/file on the system that allows you to tweak the brute force settings.

thanks.

 

[ColinTaylor]

Try this:

killall protect_srv

 

[Tech Junky]

Looking at @ColinTaylor 's response it would appear to be either on or off as the killall just terminates the process. However poking around you might find other attributes to "protect". I have a feeling though it's limited to on/off though.

 

[bengalih]

Ok thanks guys. Just to confirm, there is no GUI option for this? I feel like there used to be.
If not, what would be the best way to toggle it after setting the nvram variable (without reboot).

 

[dave14305]

Merlin’s option was removed in 386.2. That nvram variable no longer does anything.

rc: remove SSH brute force protection option, as it is redundant · RMerl/asuswrt-merlin.ng@7bc6c9b

Asus's Protect Service daemon already takes care of blacklisting IPs that generate too many authentication failures on the SSH service.

github.com

 

[bengalih]

Merlin’s option was removed in 386.2. That nvram variable no longer does anything.

rc: remove SSH brute force protection option, as it is redundant · RMerl/asuswrt-merlin.ng@7bc6c9b

Asus's Protect Service daemon already takes care of blacklisting IPs that generate too many authentication failures on the SSH service.

github.com

Thanks...that makes sense.
Is the ASUS option configurable at all?

 

[Apprentice]

Bump

Making some changes and not sure if I have disabled this by mistake!

Can somebody help me with the command to check the protect_srv status?

Many thanks!

 

[ColinTaylor]

Bump

Making some changes and not sure if I have disabled this by mistake!

Can somebody help me with the command to check the protect_srv status?

Many thanks!

ps | grep [p]rotect_srv

 

[Apprentice]

ps | grep [p]rotect_srv

thanks very much!

nothing along the lines of :
service status_protect_srv

. . that works?

 

[ColinTaylor]

nothing along the lines of :
service status_protect_srv

. . that works?

No. The process is either running or it's not. Alternatively you could use:

pidof protect_srv

 

[Apprentice]

Many thanks!