Print Page - Unblocking SSH after "Too many authentication failures"

Title: Unblocking SSH after "Too many authentication failures"
Post by: OpenNonsense on February 01, 2025, 11:58:51 AM

Hi, I had a script run berserk and trigger the ssh block (actually, the issue was that the ssh key copied OPNsense didn't survive a reboot - but I'll look into this separately one SSH access works again). Further login attempts are now just giving a timeout.

I searched for how to unblock, and (only) found this: This old forum entry (https://forum.opnsense.org/index.php?topic=4814.msg18823#msg18823)
It says that ssh access is blocked via pf tables and should be unblocked via Firewall -> Diagnostics -> pf tables

This menu entry doesn't exist for me in today's (24.7.12) UI. I searched the UI, but can't find something that looks like a match. Could you please help with a pointer to where I can unblock SSH access again?

Thanks!

Title: Re: Unblocking SSH after "Too many authentication failures"
Post by: dseven on February 01, 2025, 12:13:22 PM

Under [Firewall > Diagnostics > Aliases], select "sshlockout" from the drop-down menu at the top-left, find the offending IP address, click the bin/trashcan icon to delete it (or maybe use the "Flush" button).

Title: Re: Unblocking SSH after "Too many authentication failures"
Post by: OpenNonsense on February 01, 2025, 01:10:56 PM

Great, thanks!

Title: Re: Unblocking SSH after "Too many authentication failures"
Post by: EricPerl on February 01, 2025, 08:44:25 PM

Or from a console:

Code Select

pfctl -t sshlockout -T flushA combination of -T show and -T delete <IP> could likely be used as well.

OPNsense Forum

English Forums => 24.7, 24.10 Legacy Series => Topic started by: OpenNonsense on February 01, 2025, 11:58:51 AM