Merge pull request #25 from StrangeRanger/dev

Author: StrangeRanger

hardening/SSHD Hardening/CHANGELOG.md

@@ -4,6 +4,12 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## v2.2.0 - 2025-11-02
+
+### Added
+
+- MaxStartups is configured to `10:30:60`. This limits concurrent unauthenticated connections to mitigate DoS attacks.
+
 ## v2.1.0 - 2025-08-09
 
 ### Added

hardening/SSHD Hardening/harden-sshd.bash

@@ -9,7 +9,7 @@
 #       - Session backup (.session_backup): For automatic script restoration during
 #         interruptions.
 #
-# Version: v2.1.0
+# Version: v2.2.0
 # License: MIT License
 #          Copyright (c) 2020-2025 Hunter T. (StrangeRanger)
 #
@@ -74,6 +74,8 @@ declare -A C_SSHD_CONFIG=(
     ["ClientAliveIntervalRegex"]='^#?ClientAliveInterval\s+.*$'
     ["ClientAliveCountMax"]="2"
     ["ClientAliveCountMaxRegex"]='^#?ClientAliveCountMax\s+.*$'
+    ["MaxStartups"]="10:30:60"
+    ["MaxStartupsRegex"]='^#?MaxStartups\s+.*$'
 )
 readonly C_SSHD_CONFIG