veilor-org/veilor-os
1
0
Fork 0
Code Issues Pull requests Projects Releases 1 Packages Wiki Activity Actions

v0.5.16: sshd UseDNS no — fix banner timeout on NAT/slirp

Browse source
This commit is contained in:
veilor-org 2026-05-03 15:41:15 +01:00
parent d07adf3b14
commit 77266faa4f
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
overlay/etc/ssh/sshd_config.d/10-veilor-hardening.conf
View file

@ -14,3 +14,8 @@ LoginGraceTime 30
MaxAuthTries 3 MaxAuthTries 3
MaxSessions 4 MaxSessions 4
LogLevel VERBOSE LogLevel VERBOSE
# UseDNS off: reverse-lookup-on-connect adds 30s+ delay per connection
# when client DNS doesn't resolve back-references (NAT, slirp, dynamic
# IPs). Hardening doesn't benefit from the lookup either way; sshd
# still logs the IP, just not the (possibly forged) PTR.
UseDNS no